Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
File: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft (raw, json)
Hash identifier: xr3c/mGo+sw+0RBg3FcZ21w7n4Pm8XJrS+63T2DVUCI=
Subject key identifier: 80:ED:79:71:BC:F6:66:1A:BF:8E:97:9B:AE:1D:55:2D:0C:AB:AB:26
Authority key identifier: BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
Certificate issuer: /CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Certificate serial: 49C1703A69881A3427CA14AB62E50B1A7914989A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
Manifest number: 038D
Signing time: Tue 16 Dec 2025 09:06:07 +0000
Manifest this update: Tue 16 Dec 2025 09:01:07 +0000
Manifest next update: Wed 17 Dec 2025 11:13:07 +0000
Files and hashes: 1: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl (hash: ogzKNRLPCcWeS5r3EAF2/52D0rDtmligakkl575G0C8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:c1:70:3a:69:88:1a:34:27:ca:14:ab:62:e5:0b:1a:79:14:98:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Validity
Not Before: Dec 16 09:01:07 2025 GMT
Not After : Dec 17 11:13:07 2025 GMT
Subject: CN=80ED7971BCF6661ABF8E979BAE1D552D0CABAB26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:82:73:2c:ad:b3:cf:f7:2c:2e:08:1e:ef:
45:b7:39:89:d3:1f:13:a1:17:fd:f4:73:3d:a9:c1:
c7:fb:6e:e5:b5:92:76:73:37:44:59:dc:2f:52:40:
f7:e4:ff:63:62:65:46:5c:fc:48:12:9d:82:12:b3:
99:87:14:3d:fa:1d:56:ee:59:7a:30:e3:e5:00:d2:
91:83:bc:3b:21:36:fd:ca:e0:fa:9f:3e:cb:52:4c:
87:d1:86:58:11:6a:13:24:fd:9a:0c:08:4e:ff:01:
09:d2:2c:11:25:98:78:a8:97:9c:6b:1b:ec:8d:76:
fd:23:22:5d:56:57:e9:62:3f:b6:dc:71:8b:91:85:
ba:5b:9e:b9:86:a7:54:67:92:6f:db:8b:1e:0e:58:
cc:32:e8:19:ea:d0:e3:23:f3:2a:59:19:8d:a9:91:
9c:d0:dd:20:88:32:47:ef:f6:46:e7:b1:ee:2b:fe:
9c:29:49:e5:36:b9:a8:43:e3:3a:a6:da:97:a3:20:
b6:f4:2e:42:60:59:bc:b7:1b:6e:a8:ef:72:a7:f8:
f0:72:62:28:d9:a8:b0:2f:97:5f:d5:af:dc:4a:41:
24:73:af:0b:13:a5:19:c8:2b:00:71:5c:01:d3:53:
da:f5:2c:b6:c9:fe:26:96:79:09:e4:ee:73:67:18:
be:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:ED:79:71:BC:F6:66:1A:BF:8E:97:9B:AE:1D:55:2D:0C:AB:AB:26
X509v3 Authority Key Identifier:
keyid:BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:45:51:c3:ba:c0:5b:18:7b:f9:47:0e:1a:87:3a:14:34:0d:
46:d5:47:e1:87:b8:90:29:88:d4:ec:1c:30:41:c0:0c:54:46:
5f:eb:d5:4b:dd:b9:db:73:2e:ad:69:07:0f:64:c6:33:70:49:
b8:41:f2:8c:3f:c5:1e:be:8d:92:2e:4b:00:80:08:8b:f3:df:
bf:59:e7:a8:eb:31:7a:ee:51:7f:28:09:75:5d:a3:05:96:a7:
86:73:c4:18:87:9b:d8:9c:b7:7e:91:f7:02:ce:98:4f:1d:04:
16:13:b7:40:73:2e:ab:96:5f:e9:89:01:09:f9:e5:fa:12:86:
a6:45:9d:9c:de:47:8b:42:16:d9:b4:d9:fa:99:2d:e0:1a:5a:
de:4c:19:88:ca:60:f9:35:51:5d:3f:70:25:f0:8a:6b:21:92:
59:ef:b6:d6:22:b4:31:80:00:cb:59:90:2f:87:e3:ca:26:b4:
98:26:9d:20:cc:6a:ec:c7:16:f2:22:70:43:59:e1:98:02:d5:
55:9c:ec:f2:8d:15:48:19:cd:43:dc:44:af:4b:d8:a0:bb:40:
02:69:77:7f:a5:f2:d5:ab:5c:55:fb:b4:b4:27:2f:58:85:d2:
97:a4:2d:23:c1:d2:c1:de:05:6f:b4:dd:9c:e1:66:5c:99:63:
0c:15:6c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:16 2026 by rpki-client