Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
File: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft (raw, json)
Hash identifier: /IXoRysGzg6bfFd7p7N/L/S+we3DENwiBzCUX5xmdFg=
Subject key identifier: 1D:51:86:35:DD:7D:6C:5D:E0:82:DB:11:4B:D2:21:F2:C5:C5:02:03
Authority key identifier: BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
Certificate issuer: /CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Certificate serial: 6BDE324007E784B344A121218E0D7DABD0069E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
Manifest number: 0355
Signing time: Tue 04 Nov 2025 02:50:30 +0000
Manifest this update: Tue 04 Nov 2025 02:45:30 +0000
Manifest next update: Wed 05 Nov 2025 05:12:30 +0000
Files and hashes: 1: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl (hash: LrWzn6FYw9yP6L9XFdJUCydiRCBTYX7QOVJ5TjNBoOA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:12:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:de:32:40:07:e7:84:b3:44:a1:21:21:8e:0d:7d:ab:d0:06:9e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Validity
Not Before: Nov 4 02:45:30 2025 GMT
Not After : Nov 5 05:12:30 2025 GMT
Subject: CN=1D518635DD7D6C5DE082DB114BD221F2C5C50203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c9:fb:ee:41:58:2d:ba:e6:c4:35:62:eb:8b:
fc:72:b7:71:90:aa:82:b1:15:5b:71:5d:61:82:2b:
ce:e1:52:9a:e8:3c:a3:ee:54:a8:80:3b:3c:7d:27:
10:3d:aa:8a:34:ff:48:5d:a8:bf:c4:31:a3:6f:2d:
84:75:66:73:7f:c7:02:d6:22:2f:88:77:98:ce:15:
f2:1e:80:25:fb:47:7f:c8:db:57:e0:f5:00:85:2f:
87:44:a5:57:18:8f:d4:54:27:3e:a9:f7:4a:93:f1:
19:1f:12:a5:29:d4:2d:94:ba:d6:b3:e8:cb:c0:b3:
72:d2:24:8d:95:b7:d7:8b:ab:b6:9f:2e:9c:9c:5e:
f6:d8:4f:e8:c9:15:59:75:0f:17:1c:82:96:99:91:
01:f8:85:8b:45:7a:06:eb:94:5c:54:59:2b:7f:7d:
b5:55:78:c4:07:88:76:86:ac:8b:df:8d:a8:9b:e5:
83:88:bc:6a:4d:13:1b:95:3d:f1:b3:c4:7c:8b:bf:
ed:a9:01:25:78:d2:a9:28:38:41:6c:8a:79:fb:c8:
df:87:74:45:76:53:ab:79:b5:db:b5:71:a4:78:3d:
26:6a:b2:be:47:b8:ab:db:28:fe:fc:d6:79:34:ca:
d4:5f:f2:65:dc:05:13:d7:ca:24:08:59:cb:be:6d:
ce:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:51:86:35:DD:7D:6C:5D:E0:82:DB:11:4B:D2:21:F2:C5:C5:02:03
X509v3 Authority Key Identifier:
keyid:BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c5:39:84:cf:bb:e8:62:ac:90:d8:ae:d2:7f:e0:4d:56:0d:
fe:4f:fb:bf:3b:39:b4:81:c5:d7:b8:06:96:02:4a:b3:54:28:
c9:2d:81:36:8a:ec:90:e7:47:7c:e7:71:34:c9:c3:50:56:e9:
8e:94:2d:6a:d8:0b:cb:8b:cc:af:c5:cd:1a:de:c4:ac:8b:b9:
db:a7:f3:96:92:0a:16:0e:5e:f7:93:3c:df:1e:df:e5:6d:86:
69:22:23:ab:98:f7:8c:fb:0f:69:bd:8c:d8:fa:00:ad:3f:16:
01:d7:99:70:e5:76:21:b9:98:fc:25:a2:10:22:ad:bb:8b:fc:
7e:51:68:1b:21:d0:e1:60:1b:29:6b:45:2f:17:02:2b:43:18:
04:a6:a6:d8:32:51:c1:9c:63:34:21:3a:df:18:a5:0e:ce:ed:
1a:94:c9:90:05:1f:dc:41:45:f3:fe:9a:ad:35:35:47:a1:b3:
ba:f2:34:dd:10:9f:af:1c:42:66:23:54:3a:2a:83:f5:b6:13:
ae:dc:b9:1d:bd:fe:47:71:ca:4a:20:37:0c:22:7a:cb:a0:39:
47:c1:7a:46:90:5b:6c:d9:40:55:c8:40:c4:3b:7d:29:23:ba:
ed:11:9b:2d:4d:61:ca:d0:86:77:37:4d:34:72:82:4f:5f:2c:
de:e8:0a:af
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUa94yQAfnhLNEoSEhjg19q9AGnmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmMwOWYxNTA4ZTFiYzExYmVlY2I4MDhlNWIwMWU2ZjVk
YjhkODE2ODAeFw0yNTExMDQwMjQ1MzBaFw0yNTExMDUwNTEyMzBaMDMxMTAvBgNV
BAMTKDFENTE4NjM1REQ3RDZDNURFMDgyREIxMTRCRDIyMUYyQzVDNTAyMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCayfvuQVgtuubENWLri/xyt3GQ
qoKxFVtxXWGCK87hUproPKPuVKiAOzx9JxA9qoo0/0hdqL/EMaNvLYR1ZnN/xwLW
Ii+Id5jOFfIegCX7R3/I21fg9QCFL4dEpVcYj9RUJz6p90qT8RkfEqUp1C2Uutaz
6MvAs3LSJI2Vt9eLq7afLpycXvbYT+jJFVl1DxccgpaZkQH4hYtFegbrlFxUWSt/
fbVVeMQHiHaGrIvfjaib5YOIvGpNExuVPfGzxHyLv+2pASV40qkoOEFsinn7yN+H
dEV2U6t5tdu1caR4PSZqsr5HuKvbKP781nk0ytRf8mXcBRPXyiQIWcu+bc6XAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUHVGGNd19bF3ggtsRS9Ih8sXFAgMwHwYDVR0j
BBgwFoAUvAnxUI4bwRvuy4COWwHm9duNgWgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWNiMzAzMjItOTRmNy00ZTYxLTg2OTEtNWMxYjYxMWIw
YTk1LzAvQkMwOUYxNTA4RTFCQzExQkVFQ0I4MDhFNUIwMUU2RjVEQjhEODE2OC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZBbnhVSTRid1J2dXk0Q09Xd0htOWR1
TmdXZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lY2IzMDMyMi05
NGY3LTRlNjEtODY5MS01YzFiNjExYjBhOTUvMC9CQzA5RjE1MDhFMUJDMTFCRUVD
QjgwOEU1QjAxRTZGNURCOEQ4MTY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMU5hM+76GKskNiu0n/g
TVYN/k/7vzs5tIHF17gGlgJKs1QoyS2BNorskOdHfOdxNMnDUFbpjpQtatgLy4vM
r8XNGt7ErIu526fzlpIKFg5e95M83x7f5W2GaSIjq5j3jPsPab2M2PoArT8WAdeZ
cOV2IbmY/CWiECKtu4v8flFoGyHQ4WAbKWtFLxcCK0MYBKam2DJRwZxjNCE63xil
Ds7tGpTJkAUf3EFF8/6arTU1R6GzuvI03RCfrxxCZiNUOiqD9bYTrty5Hb3+R3HK
SiA3DCJ6y6A5R8F6RpBbbNlAVchAxDt9KSO67RGbLU1hytCGdzdNNHKCT18s3ugK
rw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:09 2025 by rpki-client