Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
File: BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json)
Hash identifier: SBSg13F1jKTSh8hrqMRgBx2b9CYfuaO1Frl1YU6XbiI=
Subject key identifier: E8:D4:1C:75:3F:4A:8A:EA:01:C3:D4:B5:11:DF:2A:6E:3B:1C:F7:A0
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 0199FEB55055C3E7A7C0FF4BCE869CCC5068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
Manifest number: 01DA
Signing time: Sun 19 Oct 2025 23:01:59 +0000
Manifest this update: Sun 19 Oct 2025 23:01:59 +0000
Manifest next update: Mon 20 Oct 2025 23:01:59 +0000
Files and hashes: 1: 0u4sqokZjOQf7KaPCR38X232zpY.roa (hash: SoYNQnYaRwUS276ubIyzvGXTMikrkiTgadJnej2pwhs=)
2: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: TB/LS3B2RJ+OvbMavnycG/vRqCsIHl2SmgGchoW62wA=)
3: Mmrr_XQ_x4BmANs7gCo-KqYTJm4.roa (hash: WNj9dn+QKBH33dHyCXrqaGnhqfpAS/VW6cjp/ENdP7Y=)
4: _xZGSYeoZPiZm7mgnuw9tHP_mKI.roa (hash: uB1FVuxaKohE/X+ir1/pelecF7ew6K8ZJNCpRq5oAHw=)
5: eAr-aAj7uWMuBz66qsxEYuZsKRU.roa (hash: upDaP9emSBMltrR9yq3F/Qw8IFTio9ABAVUioXIvrx4=)
6: jmGzc4FW1R6PAQNH4WxlC9OKi34.roa (hash: q2c49YbHCp9droshhYthNjwqMciPkn/uk7InBbQTyJo=)
7: lf7VZmq2rsBXJedCujxEgR3JSRw.roa (hash: i4ihoqVdnAGdUVkmGd9SoSzj6rV5e9gZRKeKMlY+OMU=)
8: ru7w0W3lQckov7VLXi2IdFlGxc8.roa (hash: vKg9HC/GY7EtcTEA0K5g2y1Kwk8jYnfJyEo6IYPl+Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:50:55:c3:e7:a7:c0:ff:4b:ce:86:9c:cc:50:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Oct 19 23:01:59 2025 GMT
Not After : Oct 20 23:01:59 2025 GMT
Subject: CN=e8d41c753f4a8aea01c3d4b511df2a6e3b1cf7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:45:36:de:4d:e6:6d:aa:fd:7f:0f:5f:39:8c:
79:09:e6:1d:e6:5c:44:88:28:77:fb:cb:6e:02:1f:
c8:22:15:34:86:ac:96:0b:43:e3:3d:85:c3:2e:63:
a0:4d:c5:ea:f8:eb:7d:eb:4f:3d:72:0a:1b:6b:22:
87:d4:70:4e:3f:ce:23:63:37:89:90:87:12:a2:2a:
62:65:66:5d:dc:47:84:9a:ea:e1:56:ac:16:20:ba:
90:55:51:d1:03:de:d3:ae:dc:bc:64:be:ef:26:fc:
d4:19:62:7e:61:4a:9d:46:7b:b0:18:0c:4f:2f:4a:
38:8c:70:f4:5f:1b:ac:94:f8:f6:a2:8e:ce:67:59:
df:f3:a4:37:33:a5:15:e2:0e:83:7f:b5:c8:23:2b:
69:ed:47:8c:f2:c2:25:97:92:93:1a:7f:50:9a:25:
7c:9c:4e:40:b5:a5:f1:92:2e:53:73:7c:b6:48:8d:
ee:45:12:70:9d:06:44:2b:29:9b:a6:e6:06:dd:dc:
04:e2:7c:84:4e:8f:eb:7c:0c:37:35:37:ca:a2:c9:
a9:e1:fd:8e:a2:8d:e7:29:4e:5e:a5:06:75:e7:02:
22:29:6f:77:6e:ea:8c:af:24:14:67:29:aa:cf:77:
a9:0e:59:d7:f6:9d:3a:f1:b3:15:72:66:aa:1b:bf:
18:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D4:1C:75:3F:4A:8A:EA:01:C3:D4:B5:11:DF:2A:6E:3B:1C:F7:A0
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:49:7d:43:99:b9:63:b2:f2:eb:07:dd:ef:e2:5a:80:e2:37:
a7:56:4e:85:af:25:1b:e1:2b:af:51:6f:9f:ca:e3:71:06:f4:
a4:cf:07:4e:04:05:41:79:bc:da:8a:9e:bc:df:5b:64:9f:96:
da:93:cb:ba:ea:aa:ee:22:31:a9:d8:65:e3:0d:1f:f0:e7:53:
ab:39:32:40:ab:cc:fd:9a:21:b2:11:b0:ef:9c:df:60:33:67:
84:ce:1e:e8:43:ef:4e:14:22:68:1a:e6:60:51:43:7f:32:b6:
7f:cf:d5:c1:cd:ff:d1:9c:c6:72:ac:13:65:2b:53:a8:cb:7f:
81:23:b3:08:42:f5:0f:c0:7c:7d:00:f8:f5:13:b7:78:b6:03:
06:23:bc:ef:4d:08:63:31:c9:dc:3c:92:e4:34:c5:bf:76:4a:
82:6a:e3:2c:58:63:37:02:06:a8:c4:57:17:eb:b4:aa:5b:99:
8c:38:6f:4b:c8:b4:c7:b8:77:40:4c:9a:9e:41:27:c7:97:80:
aa:40:27:a8:dd:5a:9f:d0:97:1f:41:58:de:58:2c:d0:a5:50:
42:eb:4d:c7:1c:fb:ba:2d:92:b4:c3:b9:76:ed:91:00:ea:c3:
5f:e9:7c:4c:95:04:bd:52:e8:3f:8f:96:db:12:ac:3e:c6:43:
c9:95:b1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:34 2025 by rpki-client