Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
File: bchbZ4jkUMBUE0row2V0iyP3Qmc.mft (raw, json)
Hash identifier: VcdDQo587+lxS7usJhYJCGMkIJ91LVPK6/jIz8oNkZA=
Subject key identifier: 84:AC:D9:6E:CF:63:6C:72:68:0F:2C:C8:04:EB:2D:BC:FA:43:1C:B5
Authority key identifier: 6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67
Certificate issuer: /CN=6dc85b6788e450c054134ae8c365748b23f74267
Certificate serial: 0199FC21990F10E9AF3ACE25FCF021556FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
Manifest number: 085C
Signing time: Sun 19 Oct 2025 11:01:23 +0000
Manifest this update: Sun 19 Oct 2025 11:01:23 +0000
Manifest next update: Mon 20 Oct 2025 11:01:23 +0000
Files and hashes: 1: HuuruuJUnyizGG7iC01ujDUd5zE.roa (hash: zJUuXbnFQXiP5Cz81qdrVSNYrr0dHAG+T0ZkZ/sUgdY=)
2: bchbZ4jkUMBUE0row2V0iyP3Qmc.crl (hash: /gh/fYYSd3b1REhpGoGEysq4V+dapkC+/IQr3FvIY08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:99:0f:10:e9:af:3a:ce:25:fc:f0:21:55:6f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc85b6788e450c054134ae8c365748b23f74267
Validity
Not Before: Oct 19 11:01:23 2025 GMT
Not After : Oct 20 11:01:23 2025 GMT
Subject: CN=84acd96ecf636c72680f2cc804eb2dbcfa431cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:9e:2d:42:53:7b:fd:9d:c2:d4:d9:f2:e5:
dd:6e:65:26:3b:a9:72:9a:2c:63:d6:0d:68:d2:81:
bf:c2:f2:ba:5e:f6:1b:c8:16:36:5e:fb:42:a3:08:
0c:c6:ba:49:31:61:3a:02:48:a4:47:cb:63:64:04:
47:6c:45:07:86:43:d5:db:2d:bc:4a:59:d0:1c:9a:
32:13:fa:6a:70:c6:68:ee:52:a1:7e:80:84:44:03:
bb:16:ef:70:ad:85:c4:bc:03:f1:9c:b4:bb:2c:a1:
07:6f:a0:7c:e0:31:70:9d:f4:2d:48:83:23:ab:ab:
8b:7f:81:66:29:ee:7a:6c:07:f2:4f:b3:4c:fe:6a:
e4:a7:cb:7b:e2:86:fe:0c:f9:68:6a:ca:ea:a3:58:
99:8f:90:1a:ef:56:e3:0c:fd:6a:4f:60:c4:85:96:
7c:35:16:2e:90:4b:a1:c9:a3:d4:fc:e9:81:4e:dd:
6e:22:00:9c:a9:2b:cd:88:b0:6c:ed:8d:41:87:00:
20:33:e9:83:87:1f:41:3c:3d:69:b2:03:4b:a3:ab:
f5:c4:b7:d4:e2:ba:c2:79:1f:bd:4d:a3:6d:4b:0b:
2a:98:4d:59:b6:98:94:4d:37:31:14:c4:42:28:47:
f8:ce:72:1c:07:42:0d:06:a1:18:ec:83:2c:9d:68:
a1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AC:D9:6E:CF:63:6C:72:68:0F:2C:C8:04:EB:2D:BC:FA:43:1C:B5
X509v3 Authority Key Identifier:
keyid:6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f6:37:23:ec:db:be:65:98:54:ef:6b:3d:ef:fe:26:ee:f0:
a4:94:d4:d2:98:c3:9c:2e:97:70:43:52:05:49:13:5e:11:0f:
81:ac:b6:3f:36:75:0f:40:9a:48:bd:2c:3b:4f:d6:66:64:7b:
52:ca:e0:c8:cb:b3:48:fa:27:f4:a9:6e:5f:05:6a:da:58:3a:
d8:e5:60:2b:ba:7e:9a:ec:89:5c:17:d7:4c:0b:e8:f5:86:0b:
a1:30:bc:b3:1e:02:a2:51:21:49:8a:e0:97:5d:06:0f:57:4a:
a8:7b:db:82:6a:30:eb:ed:1c:87:90:61:c4:1c:a0:f6:9a:42:
8b:44:87:0d:28:d8:fb:91:59:6e:92:77:0a:c0:f4:2a:0d:29:
14:a9:0f:f7:3e:4a:45:90:6e:78:b6:ab:6d:fa:fa:79:ad:53:
7f:dd:af:1c:48:65:d1:9b:e7:8d:d9:6e:38:e3:b0:93:84:62:
e0:c8:03:c3:39:82:f4:07:d6:4f:05:32:a7:09:62:8d:bb:1e:
4c:36:eb:fd:9e:1b:d2:ef:64:e1:45:d6:92:03:f1:5c:b0:54:
e3:f0:25:f8:5c:20:43:c9:eb:43:f0:cf:fc:17:f6:b6:02:8f:
c3:17:8f:f9:a6:1e:5c:ec:a0:7d:bf:46:f1:20:8d:5d:3e:35:
f0:10:f3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:37 2025 by rpki-client