Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
File: BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft (raw, json)
Hash identifier: NXe6XhhBxlEMkBEeNlS0q5whCO1XkJOeR4Udg9hNciM=
Subject key identifier: 43:3E:D6:22:55:22:AF:EB:63:9E:C6:F8:F0:17:C8:4D:C8:DB:66:C0
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Certificate issuer: /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial: 0198D583772CE6CF2FD17E5695AFAD27CFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
Manifest number: 052C
Signing time: Sat 23 Aug 2025 06:00:19 +0000
Manifest this update: Sat 23 Aug 2025 06:00:19 +0000
Manifest next update: Sun 24 Aug 2025 06:00:19 +0000
Files and hashes: 1: 8NoTu3q8IjcyFeSIedZ4Ihj-NDU.roa (hash: /wW2Zq1BGMLL48zxl/CKfKIe0NCGNYrdHYCS8/4pGYw=)
2: BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl (hash: igm/rW7KU6LOIwRsakqCR/5c15Om1SQRHwvWiI6boZc=)
3: BXaZelrYFdJvNqOdLiZPisxY7Uk.roa (hash: 67k1me2SgwY24GHhzeZvCPBUVpU7Aig03bpTpS4se2U=)
4: BvrFfgaOvktjClmF1Y8fP67Mecs.roa (hash: PbuxkncSrl/Kd/73WRwH/QoM5pPO6VdbbF0JBm0KcQM=)
5: c4e4vqwgZd2ZJ6wIw-pjuHwTcAg.roa (hash: oVdR7HS3XKDpou60JLgnb0pDBzK522Os/r6Pbt/GzeA=)
6: ckrq-xWy9dmxHUCFMOdOt359xMc.roa (hash: Rrj1A3kTGmZ6GPx6N9soo7FlfXOroReQlh35Wi3wkRU=)
7: xHsH2-pcu2rRd9FcSrlqvXUZKdc.roa (hash: gqOwGQ8lbsGxh3Vbcwpg5cnF6uUZY0zyhOiB5pUPkiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:77:2c:e6:cf:2f:d1:7e:56:95:af:ad:27:cf:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Validity
Not Before: Aug 23 06:00:19 2025 GMT
Not After : Aug 24 06:00:19 2025 GMT
Subject: CN=433ed6225522afeb639ec6f8f017c84dc8db66c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:01:93:4b:e2:26:17:88:48:eb:9a:40:c2:
e7:eb:95:af:78:3b:a6:5f:c4:b7:0a:53:42:8e:70:
7e:3d:3d:78:73:85:d2:da:37:aa:49:50:2f:54:bb:
a3:d1:03:b2:c5:4c:42:b9:eb:78:28:1a:09:47:ee:
e6:54:dd:39:a2:c2:39:80:e5:10:50:40:d6:21:d1:
98:c3:0b:95:54:56:2a:75:d9:79:cf:7b:d9:93:a2:
33:60:0f:e9:22:0c:f7:d8:0a:d1:39:ae:6a:c5:3c:
a8:24:62:0d:cc:4c:ac:35:6b:dd:e3:15:40:02:76:
c2:62:09:aa:90:1e:65:bb:d4:26:ec:ce:f9:a8:70:
16:a8:89:c2:45:ad:dc:60:b2:c3:5d:b4:17:69:cb:
65:ba:a6:d2:c1:6c:e6:0d:9f:86:55:fc:7c:d1:62:
61:d9:27:0b:9c:be:3b:ba:4e:28:6f:bb:cd:16:59:
90:d7:69:9e:d3:5d:a2:30:cd:71:11:05:76:cb:50:
73:6b:14:23:6a:ef:47:21:97:52:9a:99:58:88:48:
37:87:f2:1b:c2:8d:17:e3:fa:91:92:22:33:b0:f5:
df:ef:fa:94:00:41:70:0c:bb:aa:5a:cb:1e:a2:3f:
6d:77:4d:2a:02:c9:25:55:1e:f6:5c:4c:d0:4a:fa:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3E:D6:22:55:22:AF:EB:63:9E:C6:F8:F0:17:C8:4D:C8:DB:66:C0
X509v3 Authority Key Identifier:
keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f0:63:43:18:8b:09:84:26:0d:22:bd:0a:47:05:e1:83:15:
0d:7c:b6:37:87:dd:43:e8:71:04:96:dc:a8:75:11:09:6a:d4:
7b:51:89:f6:2a:f5:33:c3:08:37:18:da:55:e8:23:d0:72:25:
ea:b0:6f:4a:3d:8f:26:17:1e:25:33:b1:a7:43:65:aa:ef:60:
c7:74:e2:0e:ea:0e:b7:61:69:4b:2b:dd:e4:5c:dc:70:3f:72:
3a:03:eb:5a:f8:81:e5:9a:bd:c0:83:bb:a6:a9:59:e3:da:41:
e6:da:88:4b:86:f8:73:b9:1a:79:52:1a:bd:79:95:a9:ba:50:
3a:0e:22:46:61:81:7a:05:5b:b8:2a:a4:39:ee:fa:6c:bd:f2:
9f:39:d4:79:bd:c7:7a:9f:68:03:a4:be:ae:5c:86:04:ad:8b:
51:a8:6f:bc:ce:b9:f0:b3:71:97:78:eb:ff:e1:e8:26:e6:2d:
d3:e2:e0:ae:2a:6e:68:a0:1b:66:0a:fd:fb:cd:e6:c7:67:c9:
38:c3:b0:db:2f:2f:ac:23:a5:6e:ed:de:1f:4b:d4:63:d1:8a:
4e:64:db:ba:4f:42:41:93:77:c1:8f:32:c1:97:d3:a1:17:69:
d2:56:35:b8:65:99:ba:02:3b:b8:02:fd:3d:c8:f0:71:00:9b:
5c:43:73:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:51 2025 by rpki-client