
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
File: BV14S5ASZjw0C_Z_rLYb--EIcbg.mft (raw, json)
Hash identifier: ZS9ue2o+aW5pP89tYW93MdhknEMOEIhee3lCTUPPBGE=
Subject key identifier: 08:59:09:C6:CE:9C:FD:35:9D:28:D9:73:9F:E1:77:F2:4D:15:AE:AF
Authority key identifier: 05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
Certificate issuer: /CN=055d784b9012663c340bf67facb61bfbe10871b8
Certificate serial: 0199FBEBF46116FCD028BA144ECA83153A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
Manifest number: 0BE9
Signing time: Sun 19 Oct 2025 10:02:48 +0000
Manifest this update: Sun 19 Oct 2025 10:02:48 +0000
Manifest next update: Mon 20 Oct 2025 10:02:48 +0000
Files and hashes: 1: BV14S5ASZjw0C_Z_rLYb--EIcbg.crl (hash: ACu/OIxsledGCyb57DuEQwId0TYqIkjZI+XmhhmeohM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f4:61:16:fc:d0:28:ba:14:4e:ca:83:15:3a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055d784b9012663c340bf67facb61bfbe10871b8
Validity
Not Before: Oct 19 10:02:48 2025 GMT
Not After : Oct 20 10:02:48 2025 GMT
Subject: CN=085909c6ce9cfd359d28d9739fe177f24d15aeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b5:bd:f6:64:4c:76:0f:ee:f9:df:20:4c:97:
82:f7:e8:39:69:da:de:4f:1e:5c:08:f8:c9:89:8a:
1b:ae:e3:06:36:b5:a1:3b:f5:96:92:28:28:56:05:
01:62:1d:8d:c8:ac:f2:94:79:53:c3:60:b3:50:e8:
e2:e9:2c:94:4d:0d:af:01:6a:15:42:ba:20:08:ea:
f1:81:63:67:e8:30:01:7c:ba:e7:53:74:7f:97:e9:
4b:d8:b0:4e:4e:64:18:9e:c9:6d:1c:d2:8a:2d:a9:
06:9a:e8:d7:27:2c:fc:33:e5:fa:fe:00:fb:02:42:
a4:a2:4d:8a:c1:88:4c:b7:88:f9:10:2d:9e:02:73:
bd:a9:88:6a:70:6f:9f:6e:cb:75:e5:0c:82:74:39:
04:08:24:16:57:25:a1:00:11:ad:fa:44:1c:b8:f1:
82:aa:76:8c:51:69:85:dc:4d:c5:4b:dd:d5:fe:80:
d1:e6:7f:54:64:6e:23:9c:0b:ce:68:93:ac:4b:f6:
44:f8:04:ab:4d:80:fc:67:18:83:c5:a8:88:23:69:
22:70:8c:c9:fd:0e:cb:7e:57:4d:d1:c6:db:b1:02:
e1:f9:8c:2c:79:f9:ab:14:aa:38:1d:ec:0f:2e:c0:
ce:39:f9:30:64:1c:74:da:05:af:ba:53:4c:06:53:
6a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:59:09:C6:CE:9C:FD:35:9D:28:D9:73:9F:E1:77:F2:4D:15:AE:AF
X509v3 Authority Key Identifier:
keyid:05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ff:b9:96:73:a8:5e:da:a8:85:3a:a0:cf:31:71:ca:9c:de:
ea:2f:2d:52:7d:80:3a:a4:80:4b:f0:c6:2e:b5:31:e6:79:6f:
28:4f:62:00:eb:40:0d:c2:5e:0a:b5:72:62:15:46:3c:4c:0e:
ad:10:9d:ba:f5:87:e9:12:32:e4:e8:aa:59:91:f6:67:ab:6a:
60:76:4b:9a:a7:8f:b3:89:6a:39:ab:ab:eb:51:6a:cc:ef:05:
f1:22:5d:3c:69:62:3b:58:39:68:1b:fc:c3:6b:35:fa:c6:f7:
ef:49:d0:d5:e0:ed:01:51:cc:c9:1b:08:85:db:9c:93:1f:d6:
64:38:c1:b5:06:2d:2b:78:e4:48:e0:0d:d7:58:24:3d:46:02:
dd:89:bd:6d:2c:3a:ab:da:11:b4:a5:37:86:75:2d:f6:f9:68:
fe:35:d2:63:98:32:d1:c0:53:fa:bc:8a:90:6c:96:df:a5:50:
82:58:b3:e9:82:6c:5e:03:31:fa:03:7b:72:81:98:59:b9:50:
24:c0:ff:11:f5:ea:bc:2c:de:69:db:b8:3d:22:92:55:f4:88:
b7:bf:83:ba:31:21:27:9d:f5:cb:aa:4e:c7:36:a8:05:ee:1c:
06:7b:a6:d6:2c:d0:81:16:01:41:91:bb:a1:e0:2a:27:40:b9:
8f:dd:d4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:43 2025 by rpki-client