Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier: hotJSl5kJELprPvfqW+nth3unnpMHi6CYV4zmcyd7tg=
Subject key identifier: BE:D6:F5:BD:7A:90:DA:0F:CB:A3:C6:F6:67:C4:FC:CA:65:0B:57:B9
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 019A0222D8F3EB67B5ACB5538A603D6B7DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number: 1625
Signing time: Mon 20 Oct 2025 15:00:29 +0000
Manifest this update: Mon 20 Oct 2025 15:00:29 +0000
Manifest next update: Tue 21 Oct 2025 15:00:29 +0000
Files and hashes: 1: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: Uct4uNZ7jx0S+ySu2fSCuyuG/PL9xOOeoguu/2wL+ZA=)
2: CLXmnDFSTo8gYOSfsi36Eul40PU.roa (hash: 8Z8KtVhkqNicLx/HNFdK6oyXYk9JSXXv8S9J27mq/xY=)
3: lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa (hash: 1gPUwLHqyRYBWV9FA/ZpZB+VDiIwSRS3XaQWbg+vKSc=)
4: pzYaLDX-85nYF2riSdG9v-AKZYM.roa (hash: EygpfdGwPkKz8M66wN+etr5plBuJkHzB1mglzx/9MuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:d8:f3:eb:67:b5:ac:b5:53:8a:60:3d:6b:7d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: Oct 20 15:00:29 2025 GMT
Not After : Oct 21 15:00:29 2025 GMT
Subject: CN=bed6f5bd7a90da0fcba3c6f667c4fcca650b57b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:86:95:d8:9f:26:75:63:dc:53:71:63:1e:b8:
0f:41:7f:f8:4b:1d:c0:3e:be:5e:e2:83:62:a9:c0:
d5:46:7a:e7:c0:a5:36:16:5c:a7:c0:35:31:d2:e4:
7e:1e:2c:eb:14:62:fe:ff:96:dd:4c:c6:44:02:31:
3b:97:db:be:7d:6c:6f:66:7a:61:fd:c6:ef:61:76:
9e:ab:9e:17:20:3b:54:26:e2:86:c5:35:24:ca:dc:
ad:79:bf:f1:28:a1:2b:f6:d8:91:42:46:e0:75:19:
4c:c3:ee:6c:e1:ad:d2:e7:16:e2:4e:01:18:81:3e:
f4:00:9f:63:51:cc:98:86:e2:43:31:75:2e:8c:ef:
90:9d:91:d7:a2:32:80:bd:6e:f8:1d:2b:7a:d4:2c:
94:ab:3d:f6:a6:87:9c:94:73:c1:41:e4:cd:45:1e:
f0:7b:7e:5a:22:ed:7c:6d:c1:56:ad:b5:30:19:e7:
0b:ad:6e:56:0a:9b:4c:a7:0d:37:5b:97:df:7b:b7:
02:d6:c8:44:22:3d:c1:5c:90:0b:c5:03:8c:8d:06:
68:d6:7c:03:80:21:a9:45:34:74:21:0d:3a:82:90:
dd:2d:6b:88:61:9d:55:53:46:d0:b4:33:45:06:40:
0f:95:78:72:2d:4a:b5:89:19:5f:b5:0d:da:32:25:
91:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D6:F5:BD:7A:90:DA:0F:CB:A3:C6:F6:67:C4:FC:CA:65:0B:57:B9
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a8:c3:04:52:e1:da:30:da:1b:2a:f1:20:89:b5:21:85:48:
10:87:ff:e6:64:17:3a:73:65:00:63:ad:dc:74:73:98:d4:91:
62:c0:5c:0d:db:51:9c:da:69:55:5e:0d:58:f8:14:ef:f7:00:
65:e9:52:aa:43:4c:12:88:09:1e:2e:32:06:c0:90:42:93:0a:
e4:e9:a8:7c:f5:85:ba:93:67:91:ab:49:86:ee:97:43:45:c4:
b5:71:ee:10:bd:25:64:f9:22:37:b2:47:35:ca:a7:0b:5b:3b:
a0:b7:92:5d:39:af:ce:65:eb:14:a8:e9:f4:61:13:86:29:02:
7c:68:47:da:4d:8a:b2:53:5e:c7:2f:d2:32:0c:a2:90:36:fd:
f7:60:32:4c:d3:af:db:3a:c7:e4:74:01:37:53:75:6f:77:06:
30:dd:c9:93:12:05:f7:81:96:d2:b7:fb:fd:8a:e3:46:9b:9f:
b2:49:95:8e:b1:4d:24:a6:8d:7d:00:9c:23:d3:ad:e0:3b:e7:
55:16:aa:07:fd:c7:2c:c3:ff:2d:10:95:5b:01:3b:c4:fa:cf:
c2:98:b7:ea:d5:18:ac:07:5f:93:15:39:48:dd:55:66:50:61:
37:bf:c4:9d:df:8e:cf:eb:76:b2:77:72:83:4d:53:a2:69:82:
b4:10:4f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:49:29 2025 by rpki-client