Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
File: BsvHYUtJh4vzf94MGNfIUcLQfm8.mft (raw, json)
Hash identifier: 2jQHCqZVfU5jgOswXRlaU7pMALjZ3T78Q+lOu3Lyw18=
Subject key identifier: A8:AA:29:CC:71:B1:12:8B:F4:7D:AA:E2:A2:CC:1E:CC:B3:92:32:C9
Authority key identifier: 06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
Certificate issuer: /CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Certificate serial: 0199FEB4FEBF90CB833D968F2DDA48F6B754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 23:01:38 +0000
Manifest this update: Sun 19 Oct 2025 23:01:38 +0000
Manifest next update: Mon 20 Oct 2025 23:01:38 +0000
Files and hashes: 1: 8AWj4g0mxpAeQ6fJYXYND52Gfz8.roa (hash: 2r0E8x2l8OQ6i+ALf5Xdf7skVCZem0LAwWfFUiiW7hQ=)
2: BsvHYUtJh4vzf94MGNfIUcLQfm8.crl (hash: G2lmyadzPQJ3DfZj5Zzw/Syz6X4XgsGPOw9N3UjNSOg=)
3: z9CRwAoKZD-WKyzEgGIY-4pomCM.roa (hash: GIFVDo3J/VItfarKhSpqOK3aHLE2Bigm2lGriNtj4SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:fe:bf:90:cb:83:3d:96:8f:2d:da:48:f6:b7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Validity
Not Before: Oct 19 23:01:38 2025 GMT
Not After : Oct 20 23:01:38 2025 GMT
Subject: CN=a8aa29cc71b1128bf47daae2a2cc1eccb39232c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:65:3c:bd:d1:1f:30:ae:df:cc:bc:4e:dc:
01:0f:a9:7c:de:ac:ea:13:29:2e:36:ce:d5:0e:cb:
c7:fb:34:a6:bc:ae:93:94:4e:33:d2:78:4e:53:6b:
ae:03:9d:ac:59:e1:51:fe:c5:ea:0b:b0:b2:3b:e7:
2f:14:e2:51:36:e6:6d:7d:40:47:e2:02:9e:9a:cf:
e8:3f:f6:0b:80:18:d3:2c:b5:85:80:59:5a:ed:0a:
4f:3f:8d:8d:c6:49:69:04:d0:73:a3:5b:61:53:5e:
72:77:d1:42:a9:61:10:08:ea:f8:95:1d:e5:d0:7a:
ce:ac:e8:b8:74:e6:6b:ba:53:82:d1:b4:71:6e:a2:
7f:bf:06:65:54:ca:a5:d5:94:e7:6e:e8:b2:a4:0b:
b2:2f:46:26:c4:8d:65:e6:02:20:cf:92:dc:3c:5a:
44:48:27:aa:5f:f4:06:36:54:15:e2:88:f9:17:c8:
c2:fa:0f:4a:e2:4a:c1:1e:25:d1:92:e1:4a:41:a3:
13:f3:78:95:f4:93:a3:73:7f:42:22:14:b2:0e:32:
06:f1:6f:ce:53:80:eb:20:08:67:b2:20:0f:1b:e4:
99:2b:24:d5:38:e0:d2:25:9c:36:25:8f:81:ee:3c:
98:d1:06:12:58:4b:60:91:75:b0:f5:ea:9d:a2:05:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AA:29:CC:71:B1:12:8B:F4:7D:AA:E2:A2:CC:1E:CC:B3:92:32:C9
X509v3 Authority Key Identifier:
keyid:06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:fb:b1:4b:7a:d8:79:b6:9d:2e:45:c9:a1:52:c6:d7:b6:a3:
43:01:6f:a2:45:81:ca:e2:92:79:34:f2:31:5a:b8:5b:4f:20:
48:5e:17:0b:b5:f0:76:d8:af:e1:5a:86:f9:53:81:a7:23:4c:
e8:16:63:a7:05:38:b7:c7:8c:f5:61:73:72:05:03:b8:b5:49:
c8:5f:ce:18:ac:bb:39:3d:6f:85:a4:0f:c9:00:6b:94:9c:b7:
8c:fa:b3:51:d3:13:dc:4c:7f:b8:1b:da:f4:00:12:7a:4c:13:
13:dc:a8:29:54:8a:61:4a:79:b2:fc:d3:44:47:df:62:d2:30:
54:9b:47:21:8e:f8:7b:96:d6:2b:73:c2:5b:ca:27:7c:f8:d2:
65:2f:9a:f5:d2:91:64:76:0b:38:51:a4:c2:7e:19:84:ba:5d:
65:85:c3:29:cf:b0:d7:54:fe:ce:ca:e8:cf:49:ea:2f:fb:40:
96:ce:4a:82:20:42:61:2a:0d:37:55:38:c5:01:e4:b1:fa:9a:
96:c9:88:6a:c0:f6:bd:a3:57:8b:89:85:77:c1:54:9b:75:42:
9e:00:df:5d:63:30:d1:52:b9:87:14:03:6c:35:76:8d:b0:bf:
b7:cc:87:b3:4c:b0:84:2c:a1:b1:66:6f:96:87:34:5f:4b:65:
48:25:41:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:46:24 2025 by rpki-client