Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
File: BCTBFlgYpDL3l8jd9LUwex5a73Q.mft (raw, json)
Hash identifier: YyFeSpAY9asfeUZx8kTpNyiAlRo2dBqdl8ySabuDh1I=
Subject key identifier: C3:68:88:F5:0B:59:48:01:7A:B9:59:78:2E:1F:FC:E9:F4:FF:BB:34
Authority key identifier: 04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
Certificate issuer: /CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Certificate serial: 0197B88F5B56E0B41B6CF5EE9747EF7A6818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 22:01:32 +0000
Manifest this update: Sat 28 Jun 2025 22:01:32 +0000
Manifest next update: Sun 29 Jun 2025 22:01:32 +0000
Files and hashes: 1: BCTBFlgYpDL3l8jd9LUwex5a73Q.crl (hash: GdxXLvB0oSaz1+zDJHehXIRcWGwIF2f84PVukmLV5OE=)
2: etJJULXuEpA4QGWaRQ6bhvJFlYY.roa (hash: bLfeWna6CHVgTNdnQXDkU5zoQ0SXs8EuETZb9amfVlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:5b:56:e0:b4:1b:6c:f5:ee:97:47:ef:7a:68:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Validity
Not Before: Jun 28 22:01:32 2025 GMT
Not After : Jun 29 22:01:32 2025 GMT
Subject: CN=c36888f50b5948017ab959782e1ffce9f4ffbb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6f:e1:75:d1:a3:0f:4a:07:f8:5f:85:0f:21:
2e:b6:28:93:bc:10:8a:d8:fa:2d:48:c6:2a:a9:b9:
9e:15:59:12:70:cc:c2:b4:7e:6f:27:09:a9:34:20:
29:58:40:f4:be:75:65:2a:4f:a1:26:fa:b3:c1:4a:
28:d2:da:34:3d:42:df:40:ee:0c:13:9e:f1:c4:60:
fb:ec:a1:03:e0:9a:24:28:e7:1f:15:48:29:74:f1:
3f:a6:80:49:2e:22:81:4c:db:20:32:b5:92:57:4c:
59:28:7e:fc:07:58:9b:44:6a:7d:d7:cf:19:0d:93:
57:3c:cd:19:57:75:ee:03:e9:4b:8c:aa:f2:69:37:
2b:e2:d9:91:8e:ec:6b:b0:2e:8c:7f:c7:88:13:55:
cf:76:2f:d2:77:2c:a5:47:95:d2:72:bc:0d:c6:4b:
80:db:84:d7:fb:08:98:d1:97:62:5e:42:cd:77:e0:
e4:42:1b:70:8d:b1:df:2a:9b:7c:67:3c:31:e2:15:
f3:bc:e2:e0:e6:4c:c0:05:86:d4:93:e2:8f:7d:9c:
16:62:b3:65:49:b8:2c:19:46:94:02:da:a7:e8:58:
00:51:b8:49:8c:94:7b:66:95:8f:18:e1:b9:ed:46:
60:51:5b:4c:6c:54:62:b1:f0:b9:99:77:99:ea:18:
de:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:68:88:F5:0B:59:48:01:7A:B9:59:78:2E:1F:FC:E9:F4:FF:BB:34
X509v3 Authority Key Identifier:
keyid:04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f5:30:6c:49:10:ee:af:1d:90:84:c2:04:a8:a5:df:da:b6:
0d:dd:44:4c:a1:0c:6f:90:87:b5:71:bd:0e:2d:23:0f:7c:20:
9f:16:26:b8:22:c8:b2:9e:55:6b:6d:ce:1b:60:b6:1e:05:67:
04:8b:b3:36:2e:5b:65:6a:53:eb:95:65:ba:10:14:c1:ec:e6:
75:3c:59:8c:c3:38:ec:24:86:34:f0:8d:da:30:cb:75:3d:64:
0d:2d:00:85:ca:58:1b:62:e2:80:2d:f1:1b:7f:6c:41:62:74:
d6:54:e6:26:17:03:c5:e2:0b:54:53:e3:03:f0:20:51:47:ee:
c3:b3:a7:e2:c4:3e:25:7d:46:16:f7:46:d4:eb:cd:68:5f:e1:
f2:c8:67:b3:07:ea:10:14:5a:6a:f0:37:c5:05:c5:2d:fe:fc:
55:4e:d2:15:a9:c1:26:a3:7b:e6:5d:d8:70:5c:00:8d:03:44:
0c:5d:d8:98:a3:98:9f:30:b9:4a:fb:0b:24:73:a0:b7:2f:53:
d5:73:08:eb:ac:28:19:f7:96:42:34:fe:41:1e:2a:5f:ce:bc:
27:c3:00:a6:b5:d1:39:8c:3a:6d:ea:39:18:15:7a:d8:24:43:
cc:3c:03:86:6a:09:f2:0c:43:50:39:ed:db:37:39:8c:0e:86:
17:5d:eb:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j1tW4LQbbPXul0fvemgYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MjRjMTE2NTgxOGE0MzJmNzk3YzhkZGY0YjUzMDdiMWU1
YWVmNzQwHhcNMjUwNjI4MjIwMTMyWhcNMjUwNjI5MjIwMTMyWjAzMTEwLwYDVQQD
EyhjMzY4ODhmNTBiNTk0ODAxN2FiOTU5NzgyZTFmZmNlOWY0ZmZiYjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9G/hddGjD0oH+F+FDyEutiiTvBCK
2PotSMYqqbmeFVkScMzCtH5vJwmpNCApWED0vnVlKk+hJvqzwUoo0to0PULfQO4M
E57xxGD77KED4JokKOcfFUgpdPE/poBJLiKBTNsgMrWSV0xZKH78B1ibRGp9188Z
DZNXPM0ZV3XuA+lLjKryaTcr4tmRjuxrsC6Mf8eIE1XPdi/SdyylR5XScrwNxkuA
24TX+wiY0ZdiXkLNd+DkQhtwjbHfKpt8Zzwx4hXzvOLg5kzABYbUk+KPfZwWYrNl
SbgsGUaUAtqn6FgAUbhJjJR7ZpWPGOG57UZgUVtMbFRisfC5mXeZ6hje1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNoiPULWUgBerlZeC4f/On0/7s0MB8GA1UdIwQY
MBaAFAQkwRZYGKQy95fI3fS1MHseWu90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkNUQkZsZ1lwREwzbDhqZDlMVXdleDVhNzNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jNzVhMzktYWZjYS00ZmJkLWFiOTkt
YzMzOWNjYWYzYTFlLzEvQkNUQkZsZ1lwREwzbDhqZDlMVXdleDVhNzNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9jNzVhMzktYWZjYS00ZmJkLWFiOTktYzMzOWNjYWYzYTFl
LzEvQkNUQkZsZ1lwREwzbDhqZDlMVXdleDVhNzNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/UwbEkQ
7q8dkITCBKil39q2Dd1ETKEMb5CHtXG9Di0jD3wgnxYmuCLIsp5Va23OG2C2HgVn
BIuzNi5bZWpT65VluhAUwezmdTxZjMM47CSGNPCN2jDLdT1kDS0AhcpYG2LigC3x
G39sQWJ01lTmJhcDxeILVFPjA/AgUUfuw7On4sQ+JX1GFvdG1OvNaF/h8shnswfq
EBRaavA3xQXFLf78VU7SFanBJqN75l3YcFwAjQNEDF3YmKOYnzC5SvsLJHOgty9T
1XMI66woGfeWQjT+QR4qX868J8MAprXROYw6beo5GBV62CRDzDwDhmoJ8gxDUDnt
2zc5jA6GF13rJg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:46:14 2025 by rpki-client