Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
File: BVYYphlfHsrLCFztOwoaF8YqLPo.mft (raw, json)
Hash identifier: 44mWkzuHOj23yCA73+NfST+db5xv1HlA8Dh39FQ/Q08=
Subject key identifier: CC:95:BB:D5:05:6B:7B:4F:3C:85:97:7A:4F:92:80:D9:5A:11:A0:68
Authority key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
Certificate issuer: /CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Certificate serial: 0199FFC7329FF7188DFE0725BB86C575F30D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
Manifest number: 1275
Signing time: Mon 20 Oct 2025 04:01:08 +0000
Manifest this update: Mon 20 Oct 2025 04:01:08 +0000
Manifest next update: Tue 21 Oct 2025 04:01:08 +0000
Files and hashes: 1: BVYYphlfHsrLCFztOwoaF8YqLPo.crl (hash: oW97uAEoTTebHWDsz6n58UWJZUlHUojnGKBT6tr+v/Q=)
2: e_kofoKg7y1J8uLrVIeuvY2O9Mk.roa (hash: F9D5aBOFLIrm7XWZ3/0StMK2qKNaesetbFTA4limnyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:32:9f:f7:18:8d:fe:07:25:bb:86:c5:75:f3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Validity
Not Before: Oct 20 04:01:08 2025 GMT
Not After : Oct 21 04:01:08 2025 GMT
Subject: CN=cc95bbd5056b7b4f3c85977a4f9280d95a11a068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:ab:c2:ca:e0:59:0f:1a:5f:66:f8:49:34:
c9:3a:6e:0f:fa:c1:79:b7:cb:ad:c7:ae:4f:c7:47:
df:b2:66:5a:8d:5d:f8:f0:7c:bc:3b:6c:ce:a3:88:
e7:91:03:c0:e9:6d:86:b9:1c:a5:fb:31:2d:cc:b5:
55:8c:f0:f0:79:80:4a:21:12:43:07:87:d3:9b:4b:
d1:1e:26:a3:2a:3d:ce:fd:91:df:05:1c:2a:9b:16:
62:77:9b:19:6b:57:75:5d:89:e9:3b:c1:0f:4a:8f:
1f:09:02:5e:45:73:e0:96:b5:1f:4c:28:f6:63:05:
bc:30:15:f0:6c:15:65:a9:fc:22:6a:1b:19:e5:fe:
de:02:c2:e5:85:cb:96:88:f6:63:e3:ad:a3:00:7e:
db:aa:d2:1b:79:19:28:99:1d:21:a7:98:53:95:e4:
71:9d:66:72:c5:18:5a:07:9d:9c:74:27:31:40:0e:
e4:4e:ed:ff:93:e9:d5:78:57:a2:b6:33:89:ed:25:
8c:05:54:32:17:f5:5d:d2:86:7f:fd:31:98:49:25:
14:d4:59:75:35:81:ff:fc:d4:21:e5:d6:86:36:9b:
5f:4c:fb:97:fb:58:b6:cd:27:35:a0:e8:dc:f7:ee:
40:21:8b:d8:c0:23:d1:d0:26:a0:55:f8:ea:76:7c:
f4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:95:BB:D5:05:6B:7B:4F:3C:85:97:7A:4F:92:80:D9:5A:11:A0:68
X509v3 Authority Key Identifier:
keyid:05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c9:9f:5f:5e:88:45:88:a5:c2:ff:6a:13:78:7d:43:45:15:
cb:1a:ab:cf:65:e6:9b:1e:76:11:b9:66:ef:a5:65:e0:d2:5b:
d8:76:f5:21:e4:c7:cf:56:f9:d6:00:eb:43:6a:dd:34:d2:7c:
60:d3:09:c1:ae:eb:6c:5c:48:18:b5:9f:d4:ad:02:05:8f:eb:
47:29:7a:56:25:ef:61:61:15:5b:46:cb:7c:44:14:84:6c:a4:
b9:3b:88:4b:8f:37:5a:c4:5a:2b:17:bd:6a:24:53:2c:b9:ee:
cb:75:1d:80:a2:e7:db:8c:17:8b:54:39:53:2a:6e:a0:dd:d3:
9a:46:44:98:ae:e6:0f:a4:37:93:72:07:ef:da:3b:94:24:36:
87:aa:0e:a2:d5:dd:fa:af:2f:ff:c8:4b:cd:20:43:76:e2:3e:
9c:10:02:9c:9e:17:bf:ff:2d:88:98:fb:7b:79:ae:07:59:8e:
2d:f9:a5:7c:90:c3:46:0a:4d:b7:46:d0:c8:3f:86:e5:36:83:
5d:95:35:31:90:de:82:50:1a:00:61:15:01:80:28:7f:41:2c:
e1:2e:66:27:96:c4:9b:75:71:53:e6:2b:d7:aa:53:d1:05:a7:
28:57:0f:4e:7c:4c:1c:9b:ae:da:77:98:1f:56:15:a2:12:47:
c8:b8:43:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/xzKf9xiN/gclu4bFdfMNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTYxOGE2MTk1ZjFlY2FjYjA4NWNlZDNiMGExYTE3YzYy
YTJjZmEwHhcNMjUxMDIwMDQwMTA4WhcNMjUxMDIxMDQwMTA4WjAzMTEwLwYDVQQD
EyhjYzk1YmJkNTA1NmI3YjRmM2M4NTk3N2E0ZjkyODBkOTVhMTFhMDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZarwsrgWQ8aX2b4STTJOm4P+sF5
t8utx65Px0ffsmZajV348Hy8O2zOo4jnkQPA6W2GuRyl+zEtzLVVjPDweYBKIRJD
B4fTm0vRHiajKj3O/ZHfBRwqmxZid5sZa1d1XYnpO8EPSo8fCQJeRXPglrUfTCj2
YwW8MBXwbBVlqfwiahsZ5f7eAsLlhcuWiPZj462jAH7bqtIbeRkomR0hp5hTleRx
nWZyxRhaB52cdCcxQA7kTu3/k+nVeFeitjOJ7SWMBVQyF/Vd0oZ//TGYSSUU1Fl1
NYH//NQh5daGNptfTPuX+1i2zSc1oOjc9+5AIYvYwCPR0CagVfjqdnz0kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyVu9UFa3tPPIWXek+SgNlaEaBoMB8GA1UdIwQY
MBaAFAVWGKYZXx7Kywhc7TsKGhfGKiz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZZWXBobGZIc3JMQ0Z6dE93b2FGOFlxTFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lYWUzMzMtMzBjNC00M2ZmLWIyM2Qt
NWFlNWJjYTZmNDhjLzEvQlZZWXBobGZIc3JMQ0Z6dE93b2FGOFlxTFBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lYWUzMzMtMzBjNC00M2ZmLWIyM2QtNWFlNWJjYTZmNDhj
LzEvQlZZWXBobGZIc3JMQ0Z6dE93b2FGOFlxTFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGsmfX16I
RYilwv9qE3h9Q0UVyxqrz2Xmmx52Eblm76Vl4NJb2Hb1IeTHz1b51gDrQ2rdNNJ8
YNMJwa7rbFxIGLWf1K0CBY/rRyl6ViXvYWEVW0bLfEQUhGykuTuIS483WsRaKxe9
aiRTLLnuy3UdgKLn24wXi1Q5UypuoN3TmkZEmK7mD6Q3k3IH79o7lCQ2h6oOotXd
+q8v/8hLzSBDduI+nBACnJ4Xv/8tiJj7e3muB1mOLfmlfJDDRgpNt0bQyD+G5TaD
XZU1MZDeglAaAGEVAYAof0Es4S5mJ5bEm3VxU+Yr16pT0QWnKFcPTnxMHJuu2neY
H1YVohJHyLhDkQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:26:34 2025 by rpki-client