Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
File: BCTBFlgYpDL3l8jd9LUwex5a73Q.mft (raw, json)
Hash identifier: 05zxdyKixwDoPClycODvqgksND5McZWWLe+eusEcqgc=
Subject key identifier: BE:45:20:BA:A7:00:48:2E:04:0E:76:81:1B:CE:C3:C6:3D:0A:43:1E
Authority key identifier: 04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
Certificate issuer: /CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Certificate serial: 0198D661552CEFF5EE89C22FDBDCEC523CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:02:39 +0000
Manifest this update: Sat 23 Aug 2025 10:02:39 +0000
Manifest next update: Sun 24 Aug 2025 10:02:39 +0000
Files and hashes: 1: BCTBFlgYpDL3l8jd9LUwex5a73Q.crl (hash: V8jc2cqrx0ZmGe6ncwhUbnqCFT9ZogjasFUFEkY6P9I=)
2: etJJULXuEpA4QGWaRQ6bhvJFlYY.roa (hash: bLfeWna6CHVgTNdnQXDkU5zoQ0SXs8EuETZb9amfVlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:55:2c:ef:f5:ee:89:c2:2f:db:dc:ec:52:3c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Validity
Not Before: Aug 23 10:02:39 2025 GMT
Not After : Aug 24 10:02:39 2025 GMT
Subject: CN=be4520baa700482e040e76811bcec3c63d0a431e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:a3:d2:76:7e:95:95:77:b8:a3:7d:9a:6d:
d2:2a:f1:64:2f:34:54:04:4a:69:db:34:a9:17:14:
71:52:f4:2c:f0:ae:9e:76:1b:46:86:a2:40:b5:e2:
b5:ea:dd:22:45:8a:8c:5e:cf:78:c4:c7:cb:f3:ec:
6b:72:54:99:07:b8:67:a9:76:a7:0b:b9:d6:8c:a3:
1c:9f:21:88:04:79:ef:fa:1e:e7:a8:63:cc:41:8a:
07:55:ba:5d:a3:7a:87:75:20:c5:89:ef:4d:ff:12:
24:4b:27:5d:eb:df:2d:bd:4c:1e:bc:50:32:28:6f:
94:99:5b:9e:4b:b8:bb:63:67:c5:57:a7:a7:88:00:
e6:12:e0:aa:7c:f3:e5:1d:c5:e6:85:07:c5:c3:f6:
e7:a4:b7:bd:0d:91:15:65:ff:0d:af:cb:9b:3e:86:
a1:1f:21:26:e8:7d:d5:d5:84:52:b7:b1:fd:be:df:
99:c7:a4:23:50:10:43:ee:1c:53:d5:94:9e:de:77:
ea:23:e6:e4:5b:c2:e0:a7:0b:f9:7f:2b:8e:6d:ed:
a4:ad:6a:f5:09:8c:d5:f1:8d:0f:7d:87:a4:ee:3a:
8f:29:fa:ed:8d:62:63:b5:a3:87:5e:98:f7:e3:60:
fc:74:d5:ed:4b:24:66:86:fb:61:ce:7b:ce:ef:88:
48:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:45:20:BA:A7:00:48:2E:04:0E:76:81:1B:CE:C3:C6:3D:0A:43:1E
X509v3 Authority Key Identifier:
keyid:04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:a7:17:e4:cb:5c:8b:33:91:53:4f:06:a3:1b:77:0a:16:71:
28:c0:e2:f6:e7:c2:56:e0:9f:88:0d:55:64:de:de:0b:19:c8:
41:ab:95:77:3d:82:1a:b1:02:79:0e:cb:1c:34:9a:d6:dd:11:
c4:a2:af:cb:b3:e3:5c:6d:18:4c:8a:7c:e6:c8:ac:60:d3:6d:
59:c6:9c:d6:f9:9c:36:48:04:d8:b7:f3:d3:cc:e1:94:da:04:
12:cf:f9:c7:b4:25:96:63:a7:3f:b6:c1:84:09:6a:95:4f:ba:
ec:e6:00:9e:42:9f:cf:04:cc:34:9d:27:a4:7b:cb:45:92:97:
0f:44:12:f3:9a:46:13:44:4c:30:8d:03:45:43:12:38:99:5f:
d1:27:bd:d7:f7:1c:16:4c:ed:b3:9f:ff:97:a6:cb:db:df:9f:
cb:14:58:b9:f8:03:06:55:3a:2e:15:c1:97:14:01:51:d1:35:
a3:a6:f3:30:54:25:e7:79:4d:5d:9c:03:92:77:84:85:99:ab:
97:7c:94:3c:c3:fb:2b:cc:0a:c9:ee:fd:f8:1c:61:bf:ec:fd:
f6:76:9a:4c:5a:9f:cf:4b:6f:30:eb:10:f7:d1:c6:bc:fc:5e:
32:ff:c3:1f:57:d5:d1:33:72:8d:e5:5a:2a:60:dd:ad:2f:39:
e5:15:5a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:30:10 2025 by rpki-client