Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
File: bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json)
Hash identifier: WwiafllRi92wbTiD41VSAW7MZ3uYHKwNdGHqGsZc0Yk=
Subject key identifier: 1F:22:BC:D7:71:A3:66:42:0D:2F:42:5F:1E:37:1A:78:C4:35:D2:D4
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Certificate issuer: /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial: 0199FCFD8A1EB40FB12C8A0A72CC2D89E991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 15:01:38 +0000
Manifest this update: Sun 19 Oct 2025 15:01:38 +0000
Manifest next update: Mon 20 Oct 2025 15:01:38 +0000
Files and hashes: 1: 49pxkgi7itIv6ImUGF743Hog5ps.roa (hash: hT65WPD3rxjKAyyXgkyC1Te/5QcBwu6G6s4Re/Tw2UE=)
2: Jyvq7rcCs6Qlew8Ff4iEMvVHpXo.roa (hash: cAmAOJsrcg5h/lolypAUDsWdoBjnFRvupRZVbDEj0XI=)
3: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: hgqYwDfbqyprpuq2zrCx/T3Oaf7VuIwLzeUER0mXmD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:8a:1e:b4:0f:b1:2c:8a:0a:72:cc:2d:89:e9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Validity
Not Before: Oct 19 15:01:38 2025 GMT
Not After : Oct 20 15:01:38 2025 GMT
Subject: CN=1f22bcd771a366420d2f425f1e371a78c435d2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:2c:80:ed:d0:14:68:21:8f:50:4b:90:7c:
e2:3d:39:71:92:9f:34:00:03:d3:d5:97:7b:52:b5:
7e:f3:3d:66:a8:e6:43:36:69:d6:04:a9:18:3d:12:
2c:76:a4:15:86:07:b4:e8:6d:eb:d4:39:aa:c0:81:
f9:e2:e9:eb:de:8d:47:2c:28:5f:79:93:71:85:a3:
fd:a8:56:68:ef:a1:66:76:22:a0:6f:f0:64:37:19:
0c:56:b4:95:5a:ab:07:e4:e2:31:91:83:10:1c:ec:
5f:13:86:20:e6:03:29:a5:46:53:09:1b:8d:b1:41:
72:1e:0b:c0:8a:50:1f:72:de:0b:de:01:cc:27:e1:
37:22:ca:b9:42:61:3c:7e:b3:85:b5:d5:8d:d7:4e:
a2:fb:2d:3c:e4:81:87:27:3f:58:18:d7:35:fd:19:
62:54:1a:36:1d:a7:78:eb:6b:81:e0:21:a0:0e:3d:
25:ab:6c:10:11:8f:f3:2d:bf:a4:b0:75:68:ce:a9:
53:b7:d0:e4:6b:6b:2e:c2:c7:55:6d:70:2c:66:73:
a2:de:4b:20:e6:ae:ba:79:c5:43:31:c5:c7:3f:5e:
66:5d:09:0e:e3:b6:8a:20:e7:86:00:6e:b0:cf:05:
6b:f9:e5:1e:0d:0d:fd:3b:de:22:69:62:e4:fc:8e:
79:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:22:BC:D7:71:A3:66:42:0D:2F:42:5F:1E:37:1A:78:C4:35:D2:D4
X509v3 Authority Key Identifier:
keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3a:bc:ef:0e:a1:8f:85:1c:4f:a6:47:a5:f3:b8:8d:b7:01:
f8:39:80:1a:25:9c:7b:7a:6a:06:59:a9:72:7d:b8:58:18:3e:
e7:f5:69:94:45:78:df:ea:40:86:5c:b8:02:64:7d:18:6a:6c:
9f:40:d0:5a:ed:df:b1:37:f5:03:d8:b4:fb:e5:3f:32:9a:ea:
af:04:26:c7:e9:78:5e:74:21:7a:0a:7e:8a:3a:06:62:32:e1:
49:d9:ba:52:4f:c5:c8:c0:b0:98:42:8d:0b:29:c2:db:3d:e1:
44:6a:53:56:03:fb:23:e0:ab:30:29:3c:9a:2d:db:4c:e7:d6:
5d:4e:ee:7b:fc:20:94:c9:03:ca:e7:89:51:b0:aa:d0:1f:a0:
f7:73:8a:5f:ff:2e:4d:8e:f7:5c:ff:99:5e:70:61:69:08:b0:
09:4c:16:15:a0:13:b9:5a:16:b4:e2:88:7b:c5:0b:e5:06:c8:
51:30:40:f7:9f:f4:14:2f:25:d4:4b:a6:2a:7c:2e:b6:04:a8:
26:eb:75:e1:87:28:83:27:3e:ea:73:40:66:d1:7b:46:e3:31:
2b:80:52:ea:9b:03:0b:a8:8b:3d:23:dc:67:63:34:20:8d:c7:
22:ae:a2:78:14:df:8d:23:7f:83:0d:5a:14:26:21:3c:c2:f2:
31:cb:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:55 2025 by rpki-client