
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
File: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft (raw, json)
Hash identifier: c4lKvYh7vy/iDGsCwUjVxNujl5hlUH9o3IvdE3HbC14=
Subject key identifier: 0C:5B:D5:E9:A1:2C:CA:30:27:AB:22:18:9D:6B:9F:DF:26:2B:2D:93
Authority key identifier: 6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
Certificate issuer: /CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Certificate serial: 0199FBEA7EA5437907C78B5B689126D7D786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:01:12 +0000
Manifest this update: Sun 19 Oct 2025 10:01:12 +0000
Manifest next update: Mon 20 Oct 2025 10:01:12 +0000
Files and hashes: 1: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl (hash: Xj4x1glhRVxs2I8LKSzMqYuUWe/KnPAK/7Krs82g+UU=)
2: dT_nuVNPNVy7zap0s-GlTGbCJFQ.roa (hash: 2ckePt60vTr0Jaf/aV6ugqWUeBibjAZagoTGX9Ra3Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:7e:a5:43:79:07:c7:8b:5b:68:91:26:d7:d7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Validity
Not Before: Oct 19 10:01:12 2025 GMT
Not After : Oct 20 10:01:12 2025 GMT
Subject: CN=0c5bd5e9a12cca3027ab22189d6b9fdf262b2d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:07:78:32:d2:0a:2a:41:e0:a5:e0:f1:8c:
78:86:36:35:6a:35:cf:5f:b4:4d:72:1f:a9:a6:81:
23:fe:d0:4c:29:de:00:e3:5a:e4:88:62:70:55:02:
b3:6a:97:78:44:32:5f:5a:ae:6b:1a:52:0a:c1:71:
b9:da:de:b0:17:f0:c1:d4:59:2e:b4:fb:7f:38:e3:
d6:49:d6:e0:27:e4:56:a6:cf:81:e4:71:14:cc:2e:
23:8d:06:e2:af:15:80:85:71:b1:0b:17:51:46:07:
fc:9c:9a:bc:ee:98:be:a3:69:89:ce:e6:1a:5f:a2:
f6:7a:0d:26:39:9d:b3:91:da:8f:b6:a3:9f:13:81:
e2:52:56:04:b9:e3:8e:b5:2d:2a:b2:9f:05:c5:55:
51:2e:60:20:61:fb:ad:d8:b9:a4:bd:21:8e:ef:cf:
9a:08:79:e0:ca:a8:bd:b1:e0:5e:99:29:c0:31:da:
33:50:f2:b4:74:d5:fa:01:bc:61:47:27:63:b9:5b:
13:fd:ed:aa:0a:5e:f2:d9:01:d5:7d:aa:8b:9b:9b:
9c:49:43:e7:a8:21:4b:fe:f7:57:20:92:56:3f:a8:
1c:df:b7:a7:44:1a:a0:58:d3:17:ee:3d:9e:20:1f:
61:32:35:1c:53:13:19:c2:a2:a1:a4:b0:dc:55:f3:
e4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5B:D5:E9:A1:2C:CA:30:27:AB:22:18:9D:6B:9F:DF:26:2B:2D:93
X509v3 Authority Key Identifier:
keyid:6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ea:6c:47:8b:b3:fe:11:d3:17:ee:11:4e:ea:94:ba:f0:1a:
37:83:d1:be:34:05:01:4c:ec:ae:1d:e2:6f:5c:33:d9:93:32:
d3:ac:d6:07:22:90:78:00:97:ff:51:eb:2a:00:17:f1:00:2f:
8c:48:f3:0a:6f:8b:4a:71:37:f2:fe:1d:ec:67:1d:00:6f:32:
64:af:98:9b:42:42:1a:07:04:4f:2e:7f:02:6b:82:05:7d:5b:
9d:3d:bd:83:a5:66:b3:36:b3:5c:84:0c:8c:66:9d:a8:9b:24:
16:fe:7d:b6:ec:c0:fa:f7:21:55:73:34:6e:fd:88:3a:ae:1a:
39:0c:d7:77:36:28:8a:dd:9d:17:1a:2d:78:14:81:6e:1c:0b:
6d:02:0d:0c:ad:84:59:5c:d7:e6:1e:79:91:19:37:79:f5:06:
2a:bf:25:1c:70:22:54:eb:87:43:59:24:64:80:1b:f9:e0:0b:
e6:9e:fe:a9:a3:9e:c1:c3:25:41:81:5a:44:37:b1:e2:f7:6f:
47:9d:a1:86:5b:ea:d5:33:c0:ae:9a:12:2e:4e:a9:04:12:27:
ad:01:6a:8d:32:63:1d:bf:f2:72:3d:b7:f7:aa:f2:80:bb:10:
b1:95:16:6b:56:94:80:b8:d7:2b:4a:26:81:83:35:90:cb:77:
9f:94:1c:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76n6lQ3kHx4tbaJEm19eGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlM2VjOTcyZjk3NjBiODU1ZjFkNDM5MGJjMzc1YjNmYTNk
NDExYjYwHhcNMjUxMDE5MTAwMTEyWhcNMjUxMDIwMTAwMTEyWjAzMTEwLwYDVQQD
EygwYzViZDVlOWExMmNjYTMwMjdhYjIyMTg5ZDZiOWZkZjI2MmIyZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpAHeDLSCipB4KXg8Yx4hjY1ajXP
X7RNch+ppoEj/tBMKd4A41rkiGJwVQKzapd4RDJfWq5rGlIKwXG52t6wF/DB1Fku
tPt/OOPWSdbgJ+RWps+B5HEUzC4jjQbirxWAhXGxCxdRRgf8nJq87pi+o2mJzuYa
X6L2eg0mOZ2zkdqPtqOfE4HiUlYEueOOtS0qsp8FxVVRLmAgYfut2LmkvSGO78+a
CHngyqi9seBemSnAMdozUPK0dNX6AbxhRydjuVsT/e2qCl7y2QHVfaqLm5ucSUPn
qCFL/vdXIJJWP6gc37enRBqgWNMX7j2eIB9hMjUcUxMZwqKhpLDcVfPkKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxb1emhLMowJ6siGJ1rn98mKy2TMB8GA1UdIwQY
MBaAFG4+yXL5dguFXx1DkLw3Wz+j1BG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85ZGFjOWMtODVjNi00NTcyLWFkNjAt
MTQ1MTJlN2U1OWVmLzEvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85ZGFjOWMtODVjNi00NTcyLWFkNjAtMTQ1MTJlN2U1OWVm
LzEvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuepsR4uz
/hHTF+4RTuqUuvAaN4PRvjQFAUzsrh3ib1wz2ZMy06zWByKQeACX/1HrKgAX8QAv
jEjzCm+LSnE38v4d7GcdAG8yZK+Ym0JCGgcETy5/AmuCBX1bnT29g6VmszazXIQM
jGadqJskFv59tuzA+vchVXM0bv2IOq4aOQzXdzYoit2dFxoteBSBbhwLbQINDK2E
WVzX5h55kRk3efUGKr8lHHAiVOuHQ1kkZIAb+eAL5p7+qaOewcMlQYFaRDex4vdv
R52hhlvq1TPArpoSLk6pBBInrQFqjTJjHb/ycj2396rygLsQsZUWa1aUgLjXK0om
gYM1kMt3n5QcLA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:52 2025 by rpki-client