Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json)
Hash identifier: of8bcLZIUVAcns4j8xgLiJuoqW0sj14d4sAGeTQQx2o=
Subject key identifier: B8:8F:5A:BA:70:C9:0D:10:E6:BF:8F:70:B0:BF:12:22:A8:CD:E3:95
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 0199FB7CD2BB0A0D085C5C5182859EEEAC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:25 +0000
Manifest this update: Sun 19 Oct 2025 08:01:25 +0000
Manifest next update: Mon 20 Oct 2025 08:01:25 +0000
Files and hashes: 1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: fksO7Tlx+sUY6+NR7/oLxcCRI/9hhlCm1qOhyoE4iAU=)
2: SiRuz5DPXz9HshuqRJYB7VyQXyE.roa (hash: bgytOhweICmzdqwpnRZX5G1gQSNta8oc7hejatWlbv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d2:bb:0a:0d:08:5c:5c:51:82:85:9e:ee:ac:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: Oct 19 08:01:25 2025 GMT
Not After : Oct 20 08:01:25 2025 GMT
Subject: CN=b88f5aba70c90d10e6bf8f70b0bf1222a8cde395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f2:32:d1:e2:92:86:57:42:75:e7:a3:2f:f0:
a6:16:88:29:80:5c:f3:1e:42:83:53:d0:cc:a0:cb:
ad:e6:ca:dd:41:7b:7d:03:7f:6f:f2:12:51:7a:48:
e3:20:90:0c:72:e0:ee:ee:5b:62:87:2c:8f:54:55:
44:1f:18:e6:ac:1e:db:98:88:bc:ab:f1:36:48:da:
2d:5a:d2:81:50:2c:9c:52:87:41:1a:bf:b9:d3:69:
cf:53:48:ce:19:61:3e:e6:08:0c:fe:e5:ab:58:bc:
d0:a3:56:5a:b5:fa:b9:fb:2e:92:52:b6:51:2e:fa:
50:91:3c:18:f9:62:77:14:67:9b:10:a9:f8:ea:ba:
03:cf:09:d4:f5:58:be:9a:48:1d:d0:ed:30:f3:74:
73:b0:d0:8d:f4:f9:5d:5e:3b:15:46:3b:95:c9:3c:
a8:ca:fe:8e:e6:0c:1b:91:b1:71:29:4c:67:10:d5:
92:d9:7d:74:1a:73:5e:56:19:f6:21:51:25:3a:4f:
2a:94:e6:4b:56:9b:e9:70:b6:7f:9c:56:33:f2:eb:
d8:53:65:69:5a:0f:c8:c7:96:ab:c5:72:e8:7f:94:
73:3c:b0:ff:01:e5:6b:9c:54:39:7a:44:c3:7f:1f:
1b:7c:3c:62:15:18:b8:86:36:c5:32:e9:fa:d6:fa:
e1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8F:5A:BA:70:C9:0D:10:E6:BF:8F:70:B0:BF:12:22:A8:CD:E3:95
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e2:e3:14:46:46:22:e2:78:49:16:34:42:e0:a9:9c:15:5b:
9e:da:58:aa:b3:72:e9:7e:3a:9a:ae:f5:2d:1d:a1:42:db:8a:
5e:00:31:f0:c1:f3:89:60:d0:7b:91:40:36:e8:d9:cd:06:f5:
92:57:64:15:89:fb:38:9c:74:cd:c0:7c:c4:27:3b:f8:28:07:
b1:b1:f0:42:99:37:db:bf:41:bd:fd:3a:d1:71:80:d2:6d:3b:
51:e2:7d:00:4a:89:f5:89:cd:73:f8:3d:aa:d6:63:bf:2c:2d:
2c:ad:e9:cb:93:b6:f0:74:b2:f6:92:8c:94:41:68:61:62:50:
33:3f:0f:eb:05:a1:ea:58:4b:ad:e1:c4:88:85:67:ac:dc:dc:
06:1b:b8:57:ec:69:ab:5b:6e:b3:15:82:20:f4:82:a1:10:65:
5c:f3:8d:3b:7c:6a:ea:d6:dd:a6:72:54:4e:92:79:2c:eb:12:
7a:84:28:f8:85:3b:5a:dc:c5:de:18:46:a3:07:56:52:eb:72:
b8:e6:f8:38:6a:40:16:5d:31:c4:b5:bd:60:02:2c:86:c2:ee:
e8:69:98:8f:cc:f7:6f:af:26:ec:f6:8a:fd:6e:2e:44:d5:b9:
4f:c0:fc:4a:2a:56:6d:6b:10:ae:f6:ff:5d:1f:c4:54:e9:02:
ef:02:df:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:58 2025 by rpki-client