Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
File: BcgcgJdDfNF58xkYPAKC6mzRylE.mft (raw, json)
Hash identifier: Q0s3dMobJ8DtF2lLob71y9kK3poQ225oE9kxBHrfCD8=
Subject key identifier: 0B:BC:70:5B:13:D4:9F:62:B2:41:EA:E6:B6:51:3C:98:CD:D9:6C:86
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Certificate issuer: /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial: 0199FCC64DA3F8117D8C159BF643ACEDD690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
Manifest number: 06A0
Signing time: Sun 19 Oct 2025 14:01:18 +0000
Manifest this update: Sun 19 Oct 2025 14:01:18 +0000
Manifest next update: Mon 20 Oct 2025 14:01:18 +0000
Files and hashes: 1: 0eEbXaLT72xMShRX80ks6Q4d5oI.roa (hash: qA3gKPtC1PDR4pbDhy0QBVS9nz5AKV5Uc6LznPWBGvQ=)
2: BcgcgJdDfNF58xkYPAKC6mzRylE.crl (hash: 2CirBJSeopjxmPTGU68bp7rVCVZEJVf69u8ckzFza4w=)
3: z0nJV6Vj9yWOU_8BIeua9e3I6JE.roa (hash: YIrDiztONnsPy57n2ZnC2YoDiFkPGBFAHQe2Pe5+Gi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:4d:a3:f8:11:7d:8c:15:9b:f6:43:ac:ed:d6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Validity
Not Before: Oct 19 14:01:18 2025 GMT
Not After : Oct 20 14:01:18 2025 GMT
Subject: CN=0bbc705b13d49f62b241eae6b6513c98cdd96c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:42:f9:41:eb:f9:53:d9:d2:eb:14:11:57:9e:
76:de:d8:76:58:c0:04:4c:51:21:75:46:d9:8c:72:
98:18:b8:9e:9c:40:b7:51:4b:88:f5:c9:4e:16:59:
ff:8e:35:e7:35:34:b7:db:65:e2:d3:24:8d:a6:36:
38:35:4e:81:cf:d2:72:0b:3c:c9:9a:5b:da:20:ce:
0d:0a:6e:05:bc:e5:35:1e:f7:a5:d5:f0:06:70:d2:
e7:f7:3e:cc:c2:7d:11:ee:ea:02:07:ad:fb:e5:19:
6f:09:83:5d:d3:a5:f9:b2:71:30:63:f4:09:98:b3:
0a:ab:74:2c:ba:ee:c4:76:d3:8c:c3:17:9d:15:a6:
62:1b:0c:57:47:35:ae:5a:c6:17:ed:ea:fd:2a:62:
4e:89:68:b0:19:5e:36:a4:e6:66:b4:90:3d:88:81:
34:3c:99:d6:fc:36:9c:2d:3a:f8:a0:8d:3a:7d:c9:
17:6d:13:5d:58:2a:25:8c:88:c2:28:bc:e5:bc:0e:
06:7b:2d:d7:67:03:23:55:b4:35:af:e7:82:20:a6:
73:aa:75:24:1d:19:49:ec:32:39:2d:c9:ec:28:15:
01:7d:34:3c:ec:b5:8f:5d:8c:3e:f5:cc:54:ad:c0:
19:ef:f5:3b:17:49:29:86:ee:87:d0:fa:e1:c8:2c:
e9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BC:70:5B:13:D4:9F:62:B2:41:EA:E6:B6:51:3C:98:CD:D9:6C:86
X509v3 Authority Key Identifier:
keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1d:a3:69:22:13:a5:b3:15:9e:84:f8:27:0a:68:ef:07:72:
fb:d2:73:8a:24:02:89:f8:e7:a5:66:e4:2c:62:61:51:cc:56:
df:3d:ab:9d:ec:63:07:ca:be:4d:46:95:60:cc:cf:3f:e8:e1:
e0:46:d8:fb:ed:a4:46:56:74:da:15:8b:55:3b:e9:f6:15:88:
29:46:11:e3:0e:3d:80:97:41:43:3c:b6:0b:ff:a9:f0:bc:9a:
6d:75:e4:e7:01:5e:b9:3e:fc:f3:52:56:53:50:4b:ef:dd:b7:
d7:6a:b5:95:ef:c8:ef:ac:f1:e9:a2:5a:19:9b:36:9e:3c:70:
4b:36:81:57:03:6f:ef:33:b9:fa:96:41:bb:e0:5d:f1:95:08:
a3:45:84:14:bc:ca:76:44:cb:dc:74:ed:06:ae:f8:1f:6e:f2:
ca:50:f0:31:64:43:ea:6d:1d:80:b8:83:84:4e:9f:7b:0b:1b:
22:56:77:74:18:a8:a7:0b:2e:dc:5d:47:93:8a:d8:27:07:03:
b1:28:55:fd:df:45:e0:8d:93:b1:8b:05:13:83:4f:2c:04:fe:
f6:1f:c5:37:cb:13:bc:c3:9f:a8:b0:23:3c:21:2f:eb:38:47:
66:47:82:ba:8d:c0:2a:8c:88:46:ae:e5:27:cb:5b:68:cb:70:
cf:da:e3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:59 2025 by rpki-client