Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier: phc9mLaOhKYuyfFfyrkQIMttvKFiB1CFmjZmzHAnuXo=
Subject key identifier: 34:D2:E5:E0:08:8F:EB:F4:BD:ED:D1:70:BD:B9:8D:E3:4E:53:E9:0D
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 019A003580AE6F39E8A7906A443E96A1EAFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number: 1624
Signing time: Mon 20 Oct 2025 06:01:37 +0000
Manifest this update: Mon 20 Oct 2025 06:01:37 +0000
Manifest next update: Tue 21 Oct 2025 06:01:37 +0000
Files and hashes: 1: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: lhI5+E/EqJ8av66lJ+aRVrToJXlCCZYx2PHbvvvdwmM=)
2: CLXmnDFSTo8gYOSfsi36Eul40PU.roa (hash: 8Z8KtVhkqNicLx/HNFdK6oyXYk9JSXXv8S9J27mq/xY=)
3: lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa (hash: 1gPUwLHqyRYBWV9FA/ZpZB+VDiIwSRS3XaQWbg+vKSc=)
4: pzYaLDX-85nYF2riSdG9v-AKZYM.roa (hash: EygpfdGwPkKz8M66wN+etr5plBuJkHzB1mglzx/9MuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:80:ae:6f:39:e8:a7:90:6a:44:3e:96:a1:ea:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: Oct 20 06:01:37 2025 GMT
Not After : Oct 21 06:01:37 2025 GMT
Subject: CN=34d2e5e0088febf4bdedd170bdb98de34e53e90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:9f:15:c9:91:65:7c:29:b5:d8:3b:91:35:
7c:a4:38:3b:a8:a9:6d:fd:cb:e4:aa:3b:9b:22:41:
95:14:9d:82:5a:0b:8d:a2:ca:15:9f:9d:03:7f:a5:
a1:17:57:24:90:f1:e5:ca:8b:c0:44:46:7d:37:8b:
d1:62:de:1d:8f:ae:af:50:d8:1f:04:41:4a:1f:35:
bd:20:22:b2:2f:0e:37:4b:f1:db:17:49:28:cc:25:
70:83:8f:65:93:45:27:4a:cd:c5:d9:cd:6d:e9:15:
f7:f0:ef:84:8d:cb:86:01:d7:3c:8a:8e:e6:02:3d:
bd:8e:9c:0a:cb:d7:f2:a9:44:f0:2b:1e:5d:c7:d7:
3b:96:4d:d4:0b:5b:90:75:fc:ac:56:09:4b:be:1c:
dc:67:34:4d:4c:05:5b:12:f8:d6:57:00:8a:35:87:
d7:03:08:1b:e7:94:ed:2b:f5:5c:08:3d:5a:c3:11:
d7:74:49:8a:ef:de:23:b7:64:97:fc:6f:e7:52:aa:
38:af:9a:2d:bc:c8:94:a3:3a:95:64:74:db:7d:f4:
45:30:90:51:ab:f4:93:f8:e9:09:02:e6:00:80:97:
5a:af:6c:62:1a:8a:09:2c:79:8f:08:b3:2a:72:3d:
3e:a7:a2:77:6e:89:ed:45:29:d1:54:25:7b:a6:ec:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D2:E5:E0:08:8F:EB:F4:BD:ED:D1:70:BD:B9:8D:E3:4E:53:E9:0D
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:20:f6:d8:c0:62:a2:0d:97:f0:ca:61:45:5e:49:22:ae:cc:
f0:d2:f0:e4:53:1d:06:b0:19:48:46:1c:bd:47:d8:e0:7a:61:
a2:b8:e4:a2:60:8f:b2:90:63:0d:ae:e1:8d:0f:fd:e0:71:4f:
e7:00:b5:e7:71:dc:38:ca:a1:08:94:52:68:67:15:c7:db:59:
b4:5e:2a:4b:ab:e8:0a:b1:79:7e:fd:da:6a:a9:97:e0:d7:61:
6e:7e:b5:a3:f9:03:01:cb:8b:04:1b:07:07:f1:bf:bb:af:a7:
49:78:13:65:f0:57:af:b6:51:3a:6a:4b:e9:b4:11:be:ca:8d:
b9:85:b5:a9:1a:14:3b:c4:3f:83:7d:9d:32:f1:82:f1:d0:d7:
29:90:80:5c:be:2a:67:d5:a8:7b:ba:78:45:1d:5e:88:2f:36:
c1:48:ae:6a:fc:89:8c:24:3d:da:e6:8d:23:44:31:06:23:17:
9c:1b:0b:a6:d2:87:a4:df:b2:9b:67:3a:34:0e:a8:1e:d5:9f:
35:f0:a8:a6:d3:a3:5a:d3:1e:fa:78:79:b1:fd:a3:4d:2d:f0:
dc:e5:c3:e0:6c:73:ca:48:83:aa:80:cc:95:bf:56:13:7e:32:
13:b7:b0:cd:bb:cc:e8:3e:de:f2:9c:00:ad:62:00:b6:8f:d7:
4e:10:67:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:13:54 2025 by rpki-client