Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
File: Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json)
Hash identifier: /19y+TKT8MWLZj92oOuxRmX9OPGylFQVBXl2/FW5CoA=
Subject key identifier: 9B:B0:33:FB:41:4A:B9:01:4D:64:06:B1:4E:ED:E8:48:7B:DE:2A:9D
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial: 0199FF224702E89AB86ACB2566222D0C822E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
Manifest number: 1675
Signing time: Mon 20 Oct 2025 01:01:00 +0000
Manifest this update: Mon 20 Oct 2025 01:01:00 +0000
Manifest next update: Tue 21 Oct 2025 01:01:00 +0000
Files and hashes: 1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: EQHdb1d3Cux50cGcLe4hUWiJL8LNWGpfnymhza3Zib0=)
2: FICKnMTDt6RllV7DRYxFFl_kXjI.roa (hash: VbuR+rFejgRWNBNYlJRCVwMyUQVXxPvp/no+ZnMl4bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:47:02:e8:9a:b8:6a:cb:25:66:22:2d:0c:82:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Validity
Not Before: Oct 20 01:01:00 2025 GMT
Not After : Oct 21 01:01:00 2025 GMT
Subject: CN=9bb033fb414ab9014d6406b14eede8487bde2a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:a5:83:aa:97:83:74:4d:1d:ba:52:9d:4b:
1a:46:8b:02:4d:f2:8f:21:05:d3:98:18:e2:3a:a0:
ab:cb:75:69:fb:b5:3e:fb:ca:6d:6e:c8:df:63:f0:
70:ba:89:7a:9e:0d:6e:b7:66:42:82:53:b2:94:f5:
0d:ee:94:6c:11:61:d6:70:76:cf:e9:d4:e7:f4:0f:
ca:3d:a6:88:ee:72:a4:8e:10:8e:15:34:4c:b5:00:
22:29:9f:95:fd:cf:fa:0f:d3:6f:be:2c:52:7f:26:
ce:49:b9:67:17:13:69:29:fd:b6:ac:06:24:14:dd:
78:48:c8:4d:b1:78:6c:29:ad:ab:49:66:13:e5:24:
1d:32:5a:89:d2:d5:fe:b4:26:40:ff:48:50:a3:16:
2c:c0:9b:10:31:e3:cf:f7:6f:3d:66:00:aa:90:b3:
01:90:62:19:06:d3:4b:b3:ec:b5:c9:5c:e4:69:f7:
d4:ef:7e:85:de:7b:a3:29:f3:a4:4d:5e:96:7c:51:
96:f7:3e:ae:5b:e5:9d:fe:df:51:87:83:66:ff:48:
f1:26:07:98:6c:e5:b6:94:1a:45:07:de:16:e3:8a:
ad:48:a9:8c:ae:34:5d:a5:90:ce:0d:f0:dd:7f:05:
e6:66:6d:39:9c:29:ce:21:2d:f8:61:d2:2e:c5:48:
81:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B0:33:FB:41:4A:B9:01:4D:64:06:B1:4E:ED:E8:48:7B:DE:2A:9D
X509v3 Authority Key Identifier:
keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:57:0a:36:48:3e:a4:ce:31:64:f5:77:5c:7a:e1:ce:f9:a6:
2a:35:34:ed:ef:fa:94:6e:6f:10:25:2a:23:1f:84:f5:c2:8e:
eb:14:ff:56:00:d3:08:92:e4:ed:b4:d4:85:c0:4b:6c:95:cb:
fc:a5:eb:42:5b:04:79:e7:29:8b:26:a5:1d:4a:fe:07:32:c2:
c4:f2:91:32:ed:61:44:ab:1e:4b:db:ad:51:62:6f:6e:09:c9:
04:64:43:5b:18:67:d5:1c:2d:dd:d3:23:8c:ae:fa:16:db:c9:
38:da:d2:a5:cc:e5:e3:36:64:0f:9f:69:db:7d:4e:b4:51:04:
5e:30:e1:47:69:f1:2a:a1:92:15:e0:a7:8f:c9:99:11:9e:c0:
53:79:1c:02:6b:d0:3e:38:d2:c4:f1:76:78:40:50:d6:c4:99:
c0:bf:a6:b6:ac:52:8c:a8:19:64:84:8c:f9:ca:b6:d6:4a:aa:
ce:18:e8:72:ad:c1:e8:d1:a9:bf:7b:5d:29:93:fd:5c:8b:69:
92:dd:ac:71:38:fc:c8:3c:45:a5:96:c7:3d:49:20:e1:44:42:
bc:7a:27:6d:24:3d:a9:c7:b9:3b:c1:6e:f4:00:2e:8a:a6:b5:
80:d0:42:d8:a5:c2:1a:0e:22:c1:04:69:8d:af:b8:07:97:fd:
31:a6:e4:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/IkcC6Jq4asslZiItDIIuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1Y2Y2YWQ5Y2JlOWY3YjI4NjNlMGNlYzM2YzE1M2M1ZDA3
MzZhZTIwHhcNMjUxMDIwMDEwMTAwWhcNMjUxMDIxMDEwMTAwWjAzMTEwLwYDVQQD
Eyg5YmIwMzNmYjQxNGFiOTAxNGQ2NDA2YjE0ZWVkZTg0ODdiZGUyYTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6Clg6qXg3RNHbpSnUsaRosCTfKP
IQXTmBjiOqCry3Vp+7U++8ptbsjfY/Bwuol6ng1ut2ZCglOylPUN7pRsEWHWcHbP
6dTn9A/KPaaI7nKkjhCOFTRMtQAiKZ+V/c/6D9NvvixSfybOSblnFxNpKf22rAYk
FN14SMhNsXhsKa2rSWYT5SQdMlqJ0tX+tCZA/0hQoxYswJsQMePP9289ZgCqkLMB
kGIZBtNLs+y1yVzkaffU736F3nujKfOkTV6WfFGW9z6uW+Wd/t9Rh4Nm/0jxJgeY
bOW2lBpFB94W44qtSKmMrjRdpZDODfDdfwXmZm05nCnOIS34YdIuxUiBhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuwM/tBSrkBTWQGsU7t6Eh73iqdMB8GA1UdIwQY
MBaAFAXPatnL6feyhj4M7DbBU8XQc2riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2Yt
NzQ4YWYxZjg0MDBlLzEvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2YtNzQ4YWYxZjg0MDBl
LzEvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1cKNkg+
pM4xZPV3XHrhzvmmKjU07e/6lG5vECUqIx+E9cKO6xT/VgDTCJLk7bTUhcBLbJXL
/KXrQlsEeecpiyalHUr+BzLCxPKRMu1hRKseS9utUWJvbgnJBGRDWxhn1Rwt3dMj
jK76FtvJONrSpczl4zZkD59p231OtFEEXjDhR2nxKqGSFeCnj8mZEZ7AU3kcAmvQ
PjjSxPF2eEBQ1sSZwL+mtqxSjKgZZISM+cq21kqqzhjocq3B6NGpv3tdKZP9XItp
kt2scTj8yDxFpZbHPUkg4URCvHonbSQ9qce5O8Fu9AAuiqa1gNBC2KXCGg4iwQRp
ja+4B5f9Mabkzg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:59 2025 by rpki-client