Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
File: BCSFBLVFValEOwKjPTUakChju5k.mft (raw, json)
Hash identifier: etmnWHdVqmquArBjW7nV07BgUT91L/olppNx0ccbd1I=
Subject key identifier: 54:8C:E8:D3:0C:CC:3C:C3:5E:A5:14:87:39:D3:5C:DE:54:E9:F1:19
Authority key identifier: 04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
Certificate issuer: /CN=04248504b54555a9443b02a33d351a902863bb99
Certificate serial: 0199FEEBD5333CDB1AB866ACF873FD7D1B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 00:01:32 +0000
Manifest this update: Mon 20 Oct 2025 00:01:32 +0000
Manifest next update: Tue 21 Oct 2025 00:01:32 +0000
Files and hashes: 1: BCSFBLVFValEOwKjPTUakChju5k.crl (hash: jwdGkPhA2rTtDTCOLvut5bxJUyB75BFugXKM3O6cmZ8=)
2: b8vdOmpolmwnMi7asOpMYmI4_jA.roa (hash: 9A3fwbUf06Rc6Df5WmKqMxfDfFV1g3qJ0g03eRw6WqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:d5:33:3c:db:1a:b8:66:ac:f8:73:fd:7d:1b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04248504b54555a9443b02a33d351a902863bb99
Validity
Not Before: Oct 20 00:01:32 2025 GMT
Not After : Oct 21 00:01:32 2025 GMT
Subject: CN=548ce8d30ccc3cc35ea5148739d35cde54e9f119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:a3:b4:90:67:33:1e:4c:ee:6a:4a:92:73:
8a:e5:49:10:54:cc:4e:4f:98:c6:b7:de:e0:d4:ea:
58:24:24:8b:1b:bb:71:e6:66:46:c4:61:25:87:61:
3c:2e:b6:f3:2f:a8:d0:cd:35:22:d1:38:dd:2b:58:
a6:77:f8:bd:30:c6:12:e9:9a:76:7c:0f:02:25:1f:
9b:64:92:8b:64:16:64:e6:36:7c:10:41:3a:ac:2c:
8d:bb:d3:6a:ff:0c:55:f8:12:8a:2a:32:43:a4:72:
32:28:d4:80:f7:6f:36:c7:b2:73:f7:82:d6:5d:40:
3c:a0:98:f6:e8:44:a3:9c:c7:f3:13:8c:84:ff:77:
a6:d9:33:57:4d:cd:24:0d:c1:f6:1b:cc:14:eb:b6:
80:7b:15:e3:60:7d:15:5a:3f:9c:b2:a9:04:ec:a4:
8c:af:45:01:80:aa:10:c1:b9:75:af:fe:9a:27:41:
1a:a2:a1:00:2c:d3:22:f8:dc:0a:24:1a:f2:a7:6e:
09:4c:3d:82:94:5b:72:65:80:da:37:66:00:06:0f:
e4:96:3c:f4:ef:63:b1:b3:66:20:f8:cf:f9:7c:10:
a0:18:84:25:f8:a1:97:36:d4:49:a7:53:b5:59:f7:
c8:12:6a:f4:0f:9a:22:1f:ed:dd:f2:76:86:c7:c9:
38:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8C:E8:D3:0C:CC:3C:C3:5E:A5:14:87:39:D3:5C:DE:54:E9:F1:19
X509v3 Authority Key Identifier:
keyid:04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4a:fa:36:37:90:39:2f:22:81:f1:4b:6d:d5:9b:78:45:fd:
5a:f8:5e:e4:c1:98:3f:42:d4:5a:f0:1a:90:3e:97:48:cb:6c:
07:bb:06:cf:db:37:14:1d:fd:88:7b:b2:b6:d2:c2:c1:00:0a:
c6:aa:33:33:72:02:39:17:69:e8:40:d6:47:63:fe:fe:65:2c:
83:71:d2:9b:f5:b9:99:b4:a0:a3:0e:fa:42:ac:b5:cb:11:65:
57:47:62:c1:76:59:3d:22:42:52:ac:2e:97:e9:5b:96:d9:69:
9d:da:86:e6:bc:bc:a6:5d:75:5f:e7:10:df:11:35:f5:4c:68:
a7:6f:71:5f:30:0a:a9:94:3a:da:7e:a5:f2:15:c8:c0:f9:2b:
48:3a:c9:26:7a:b2:e1:64:1a:21:f5:aa:9c:4b:a1:db:f3:c7:
4b:00:fd:dc:e3:4d:3c:e4:10:4a:c5:68:f7:a8:46:f0:e5:ee:
d3:83:24:bc:9c:44:f7:5e:a7:a3:11:e7:11:44:9e:31:9e:07:
2e:ff:a9:dc:bb:bb:65:3f:55:9b:e6:53:14:09:79:6d:c6:6a:
df:ab:7a:03:36:dd:b4:0e:32:b1:93:a8:17:87:2f:1f:5d:88:
29:40:5a:fe:78:94:37:23:4d:e7:35:81:b2:43:85:a1:5c:89:
f6:a9:51:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:47 2025 by rpki-client