Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier: dRHgG9kQsuEgrnRV9Jg6KgiETNcbscPgcIR9ByDYsu8=
Subject key identifier: 2A:E9:ED:56:71:5A:42:0D:76:75:DD:72:94:05:9E:70:1C:50:06:D4
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 0199FE100E7230353E0086284906BE3A1DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number: 09A0
Signing time: Sun 19 Oct 2025 20:01:29 +0000
Manifest this update: Sun 19 Oct 2025 20:01:29 +0000
Manifest next update: Mon 20 Oct 2025 20:01:29 +0000
Files and hashes: 1: 3kGa7kLBm042LbbqykHtZB7ufPc.roa (hash: w1pGOLasw4Pb62ELUrEIQqwR4u8hfryDi61TGvccVyw=)
2: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: 712ozTpv379DPfi+P+zn8y/gPzpgvI3EcOES4F01yMU=)
3: F6fQGiNxub0Asxw2Ftlalm35-sI.roa (hash: wYkSnnpKM5pfTpyfgZw3XQ3Jd7ZS+gOnc16p21qV1JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:0e:72:30:35:3e:00:86:28:49:06:be:3a:1d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Oct 19 20:01:29 2025 GMT
Not After : Oct 20 20:01:29 2025 GMT
Subject: CN=2ae9ed56715a420d7675dd7294059e701c5006d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:35:3f:88:85:4e:20:50:e6:1b:d3:99:6c:
db:96:e6:0e:be:50:0b:99:4d:67:20:28:44:a8:ff:
39:60:3c:e2:16:c7:bc:54:75:39:20:ca:00:18:47:
62:a7:ac:b1:7e:38:52:55:3d:bc:6c:c3:74:fe:81:
11:b6:1c:20:d0:c2:76:77:cb:46:f6:20:46:71:a1:
75:c6:52:0c:07:24:1e:18:6a:81:df:7c:ef:ab:86:
8b:92:63:87:5f:d8:d7:ef:c5:16:35:07:e6:08:e8:
85:fb:e1:10:b3:21:1a:98:61:f9:72:bb:c2:d6:52:
f4:d6:9f:15:8c:d1:b7:bf:10:dc:25:a4:a2:b0:2b:
90:1b:66:e1:a4:43:f5:70:44:ef:20:09:c9:85:26:
03:b5:1f:38:61:03:61:a1:af:ce:e0:ba:04:b8:32:
ab:cf:3b:e4:f4:9a:60:9b:9b:57:81:7c:13:1e:d4:
5a:6d:5d:63:cb:f3:33:62:2f:fb:1f:b9:67:bd:72:
48:c2:c4:25:44:13:a3:66:39:1c:6b:e2:a7:06:c5:
69:ae:32:19:94:c3:c2:da:75:f3:86:67:0d:c5:9a:
a1:23:91:bf:2d:14:7e:f5:0c:83:14:3c:53:41:93:
84:a7:72:ee:4c:68:05:d2:45:b3:7a:6d:82:2f:37:
3b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E9:ED:56:71:5A:42:0D:76:75:DD:72:94:05:9E:70:1C:50:06:D4
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:11:9c:7b:0b:f6:73:d7:64:80:a7:b0:41:2d:f6:44:ba:17:
e4:77:6f:40:dd:1b:a7:b7:bb:a9:aa:85:b2:d3:9f:41:98:f1:
e9:62:00:a2:5d:f4:80:5d:3e:24:61:0a:70:63:26:fb:7a:82:
81:1b:da:bd:c0:ef:af:f7:83:dd:56:9e:71:9e:6e:c2:85:f6:
f6:4a:41:18:37:a6:1d:1b:79:5d:c1:ad:ae:f6:2e:60:1b:a5:
0f:0b:97:27:cd:55:36:d8:11:0c:a9:6c:55:63:4c:6e:b1:fc:
3f:79:84:0c:f5:41:e1:d1:dd:4b:43:ae:23:4f:07:35:ca:a8:
89:bc:4a:7a:06:d4:1c:d5:10:ee:23:23:bd:82:c1:bc:ff:f6:
46:84:ca:bc:11:80:c9:45:93:1d:da:51:53:be:cf:93:37:e4:
97:5f:ae:78:f9:dd:62:4d:62:00:25:28:15:cd:15:0c:07:ee:
fc:f0:90:d4:6a:28:7d:25:ce:95:5c:ff:bd:13:ed:da:ac:bc:
37:03:d7:8a:c0:44:9a:2c:95:db:ed:47:3f:17:38:17:a1:e2:
6a:41:94:66:3c:2a:87:64:24:5a:63:5c:11:bc:97:54:a9:ca:
b7:d8:3e:c3:21:67:bd:ee:85:b2:e3:bf:06:b3:13:94:45:88:
d2:b9:45:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:13 2025 by rpki-client