Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
File: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft (raw, json)
Hash identifier: FwS5Hh4aXw1NW5njNxnVCdp9IpStu6TNW+XPqEpAqpA=
Subject key identifier: 46:5F:98:F4:68:47:86:34:29:1A:BB:C8:75:D2:23:51:F2:72:BB:48
Authority key identifier: BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
Certificate issuer: /CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Certificate serial: 3C6F29102F85D9C8A97E24EBCA5C2664531F31C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
Manifest number: 02E0
Signing time: Thu 07 Aug 2025 23:11:44 +0000
Manifest this update: Thu 07 Aug 2025 23:06:44 +0000
Manifest next update: Fri 08 Aug 2025 23:19:44 +0000
Files and hashes: 1: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl (hash: +vHRHAcghHA6pccWU62FDrV2dN77t0Bvrz7atu13URA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 23:19:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:6f:29:10:2f:85:d9:c8:a9:7e:24:eb:ca:5c:26:64:53:1f:31:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Validity
Not Before: Aug 7 23:06:44 2025 GMT
Not After : Aug 8 23:19:44 2025 GMT
Subject: CN=465F98F468478634291ABBC875D22351F272BB48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:cc:fa:ef:0a:8e:16:a1:6c:0d:0f:10:ca:
c4:f2:ee:7f:3d:88:d2:2f:a8:44:fc:88:4d:a9:a7:
77:a0:e1:e6:d3:00:d6:14:36:5c:27:70:1a:21:c0:
68:cf:76:70:42:2b:2d:39:64:96:d4:75:af:31:36:
b9:91:c1:2e:ec:81:28:7b:09:36:04:02:f4:c7:6c:
b2:f0:90:13:3c:c6:97:df:71:1f:86:5c:50:e3:44:
a5:5c:f0:f8:71:f2:7e:76:2d:ac:d1:74:4b:78:48:
bd:39:13:d9:58:b6:ef:07:ce:d6:bc:28:46:4f:68:
0e:c9:ff:09:ae:b6:2f:db:a0:ce:13:8d:21:3e:2c:
d0:a8:fd:d2:f8:81:7f:90:7a:0f:62:f1:a3:68:50:
23:a3:3a:8d:37:79:6e:03:2a:0d:8c:e2:28:ad:85:
d9:1e:e3:b9:33:e9:e9:58:e6:c4:f1:ca:89:fa:60:
63:aa:00:4f:a9:db:47:40:ac:52:be:5c:62:6a:ef:
c4:60:11:9f:95:63:ac:f7:17:ae:b7:8f:8d:e6:13:
a7:e5:1b:61:0d:4f:23:3b:9c:fd:2f:9e:d2:51:62:
79:cb:6b:18:b9:f6:38:c5:19:3b:61:1c:f6:26:c1:
25:fb:39:dc:ac:99:bb:fb:fc:e4:11:f8:7d:e9:9e:
8b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5F:98:F4:68:47:86:34:29:1A:BB:C8:75:D2:23:51:F2:72:BB:48
X509v3 Authority Key Identifier:
keyid:BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d1:ec:a4:c5:58:77:be:c8:36:4d:93:da:95:15:fc:8d:cf:
e7:a5:b5:a3:6d:2c:8c:21:d4:6c:71:58:f4:68:a4:f1:94:5e:
f6:bc:d2:c8:d6:de:fb:d3:ac:c5:8c:ca:3c:e8:2f:64:fe:e7:
1b:49:54:a8:47:65:bc:e3:ac:74:7c:12:c7:16:9c:ee:96:0e:
5c:7f:bd:c5:e9:7f:c4:f2:ed:a3:7b:1d:db:3c:ea:80:2e:2b:
8c:b3:24:34:56:46:e4:f3:4d:17:0f:f7:63:24:f2:a7:89:e2:
26:68:b4:92:0b:ba:0c:f0:04:13:2f:a4:55:ae:57:ff:f2:53:
e2:0a:60:d4:cb:32:f4:0b:5f:19:d4:13:ba:7f:d9:b3:40:a9:
3d:de:e5:a5:ba:d8:4e:ad:02:96:87:78:25:6e:6e:4e:df:b6:
b9:db:48:42:32:db:de:60:5b:a8:6d:a9:2f:bf:a6:fc:93:d8:
18:19:84:78:e6:8f:d1:5c:71:9b:09:45:e5:fb:e8:39:3d:3f:
d6:74:7d:9a:be:13:c1:65:ce:6d:6f:0a:aa:09:96:3f:ec:82:
87:f7:d7:20:fb:6c:5e:66:bd:3b:fa:95:b7:e7:b0:84:25:0f:
98:0a:b1:8b:66:54:2e:de:9d:dd:3b:f1:48:39:6f:8e:d6:71:
5a:37:10:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:21:24 2025 by rpki-client