Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
File: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft (raw, json)
Hash identifier: tzBTkylLexEZ4PpNxtx9mTTiI+PD86qSSv8bt081JJk=
Subject key identifier: CA:2D:CD:D8:85:82:72:8C:FC:BC:A7:B2:22:C4:38:91:8F:A1:4C:A4
Authority key identifier: 05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
Certificate issuer: /CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Certificate serial: 0199FC8FA319BE18E6DD0C72FCEA13799EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
Manifest number: 095C
Signing time: Sun 19 Oct 2025 13:01:35 +0000
Manifest this update: Sun 19 Oct 2025 13:01:35 +0000
Manifest next update: Mon 20 Oct 2025 13:01:35 +0000
Files and hashes: 1: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl (hash: kN8rOLf6X3UVdKnSNdxPWoU2nDZHgQLuWSOTZlqXinU=)
2: kZOSQmU6A2elFsqdm-zFawpP2VM.roa (hash: bGe5j2ABlU0093SdrMDiQuuHNz672BXZ6vQ6WijSw+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a3:19:be:18:e6:dd:0c:72:fc:ea:13:79:9e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Validity
Not Before: Oct 19 13:01:35 2025 GMT
Not After : Oct 20 13:01:35 2025 GMT
Subject: CN=ca2dcdd88582728cfcbca7b222c438918fa14ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9a:17:6c:0f:98:70:8f:83:cb:3c:10:eb:a4:
9f:bf:94:d9:d8:51:4f:6b:d2:f0:c2:df:b9:6d:20:
24:c7:bb:79:49:9e:32:fa:b5:3d:55:78:6c:ad:11:
d2:04:95:e3:56:e6:47:48:82:25:f9:4a:26:e6:67:
71:24:f8:d7:25:02:37:36:15:7c:43:f5:4e:81:33:
fe:f2:96:de:6a:f7:31:a3:0a:71:37:97:20:72:1a:
3a:9b:3a:07:fe:73:31:4a:fb:e5:f5:24:b3:e8:a8:
5b:93:2d:8a:20:b4:b8:75:67:3d:fb:99:80:84:07:
08:87:81:51:ea:bd:56:84:34:21:50:75:44:fb:ee:
e8:71:93:f4:f2:22:08:6c:fc:f8:97:5d:db:37:36:
f8:ca:7b:e5:51:0f:0f:a6:e3:ef:e9:c2:e7:fd:e5:
27:8a:f2:e5:69:7c:25:48:00:80:2d:6d:97:e5:86:
8b:65:f6:fb:4b:ca:30:d0:94:23:99:c6:d7:f8:97:
d7:22:98:ef:9c:28:6b:f4:1b:78:e7:d1:6b:12:0b:
89:2c:c3:3e:9f:33:55:91:cc:d9:f0:f3:fc:9d:1d:
25:67:2a:5e:f1:b0:33:72:67:59:1e:6a:5f:7b:ea:
c7:f1:94:ed:ad:21:c4:76:20:74:e3:0c:bb:de:98:
43:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2D:CD:D8:85:82:72:8C:FC:BC:A7:B2:22:C4:38:91:8F:A1:4C:A4
X509v3 Authority Key Identifier:
keyid:05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:88:a8:07:99:21:b0:2a:03:35:d7:03:39:a4:8b:56:4e:29:
3e:53:dd:88:62:7f:61:7c:1f:c7:34:ef:6d:aa:f9:21:25:a3:
25:ad:35:9c:c0:d3:43:d5:08:e3:72:ba:f5:19:6e:4b:d5:bc:
ab:04:2e:2f:6e:a0:8b:b7:9f:1d:66:e1:85:af:82:4c:3c:c0:
bd:87:2e:84:76:82:d7:a6:7b:2c:76:33:30:29:8a:a5:da:bf:
55:d8:69:6c:26:3d:e4:0a:c7:e8:01:b7:d8:42:de:9a:22:af:
b6:e0:1f:5f:2c:c9:ab:4b:a8:95:65:31:11:55:8a:40:65:31:
58:de:f7:d3:15:de:2f:eb:2a:cc:9f:0f:66:d8:b5:6a:92:35:
d7:da:8f:f3:46:49:2c:b6:bc:f5:ec:c8:32:51:1e:5f:fd:b4:
74:04:02:ed:e2:af:0c:18:cb:ad:c8:e9:5c:41:26:0d:6f:f5:
2c:5e:36:2e:dc:c3:f9:d0:c2:f4:e5:79:04:30:4e:ba:bb:90:
d9:32:b4:35:a6:14:b4:50:0d:1e:86:b3:83:dd:9f:0d:34:f6:
96:ca:c9:70:20:a0:1e:e3:f9:df:f7:2c:4e:bb:04:b9:2f:a0:
31:0c:c4:2b:50:c9:02:19:f3:1c:2c:3e:51:69:b6:41:bc:e7:
da:d5:54:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:35 2025 by rpki-client