Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
File: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft (raw, json)
Hash identifier: sbYIsvYGJLXuOpUF/AwWVjdd1aCAvjgIyQ8/LO7sq5I=
Subject key identifier: 21:C7:23:69:FF:B2:96:BF:93:9E:C4:C9:D0:9E:02:79:4B:59:C2:CE
Authority key identifier: BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
Certificate issuer: /CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Certificate serial: 7CA46A17EC98A9C5C4A2A5FB7A26B2569B68FDE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
Manifest number: 0341
Signing time: Sun 19 Oct 2025 21:35:21 +0000
Manifest this update: Sun 19 Oct 2025 21:30:21 +0000
Manifest next update: Tue 21 Oct 2025 00:20:21 +0000
Files and hashes: 1: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl (hash: 4Sr59HfVKOtrQhoQwVoXxQaEJGEdq9PfWwyZbMSteUw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:a4:6a:17:ec:98:a9:c5:c4:a2:a5:fb:7a:26:b2:56:9b:68:fd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Validity
Not Before: Oct 19 21:30:21 2025 GMT
Not After : Oct 21 00:20:21 2025 GMT
Subject: CN=21C72369FFB296BF939EC4C9D09E02794B59C2CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:ff:d1:0b:fd:b5:34:91:e8:94:ad:94:37:
98:42:d6:65:bd:a0:1a:61:55:d5:6f:c8:e4:6f:55:
42:07:c2:b4:8c:a4:11:9b:e4:f4:2e:6e:77:09:03:
84:6b:e2:69:d4:e0:10:cc:22:d0:de:dd:72:5c:93:
40:8d:ef:8d:cb:76:59:a3:e2:7e:d3:7b:0b:ed:a6:
7f:06:eb:b3:d3:a8:12:f8:ea:0e:f7:b1:8f:11:b0:
f9:bd:0b:32:72:88:8b:52:4e:0b:80:02:af:a2:1d:
86:64:ea:c5:11:d3:b0:cd:82:95:0a:0b:be:b4:82:
94:cc:84:13:14:b2:e9:07:7d:85:77:c8:0b:a3:4a:
29:50:7b:e8:05:aa:c2:c7:18:78:ad:1c:65:1a:bb:
3d:96:4e:c4:7c:58:16:27:65:fe:30:25:56:82:5c:
70:d4:0a:4c:4d:b5:26:b6:30:39:5a:ab:e1:49:1a:
08:1c:ef:41:c4:2b:ab:e7:a7:f0:f8:4d:c2:a8:50:
9c:dc:d5:45:8b:bd:c6:c4:cd:53:9b:be:d9:33:51:
d2:cc:24:2c:e1:88:ed:99:8e:1a:7f:62:89:72:2d:
46:06:69:02:2f:c8:eb:ba:66:f6:c8:20:e8:21:12:
6f:b4:cf:e2:43:ab:3c:f5:14:2a:f7:2d:a5:97:a3:
66:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C7:23:69:FF:B2:96:BF:93:9E:C4:C9:D0:9E:02:79:4B:59:C2:CE
X509v3 Authority Key Identifier:
keyid:BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a2:68:6f:9d:03:1d:84:b4:47:25:1c:45:96:13:53:37:a7:
52:0e:b8:9d:07:e4:19:9c:d9:93:63:51:be:10:49:c7:a8:33:
03:2e:50:11:c3:71:2e:ec:5b:b3:09:58:19:44:cd:ea:6e:93:
e1:20:6e:82:b8:0d:ba:70:9b:6a:14:62:66:6a:7a:bd:28:98:
c9:24:f5:d7:57:1d:9a:7e:6d:c7:a1:b0:4e:5a:f4:cb:fe:8c:
19:55:32:7a:3c:2f:d1:c8:85:e5:47:81:01:d0:43:15:95:68:
5a:b5:01:4f:c2:00:9d:87:8d:80:52:82:19:4a:f4:8c:05:21:
73:e6:2f:d3:f5:d8:31:7d:33:f2:c9:28:9f:4d:45:57:33:c5:
bf:bb:a3:16:ed:a3:cd:5a:6f:91:ef:e5:fa:89:65:16:22:dd:
05:78:4f:1e:cb:59:7d:7b:44:79:e6:8e:13:54:96:45:92:6f:
d3:72:58:b7:ec:75:3e:ec:72:88:f3:bd:e8:75:8a:53:d7:9b:
90:c3:c5:dc:ed:80:90:59:b8:95:8f:87:e7:cc:55:c4:cc:f8:
d1:f4:3e:b7:69:0a:30:51:d6:ac:99:b0:30:d5:06:fa:5c:e7:
d1:13:b2:38:b3:ec:9b:84:25:dc:78:87:98:b3:bf:37:13:6f:
a9:ec:cc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:47:24 2025 by rpki-client