Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
File: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft (raw, json)
Hash identifier: YtOiHLnHhcqUdNr7gTmQPCttdWnhYYS7Ur8mtfACZ7M=
Subject key identifier: 29:44:D9:BE:F4:4B:93:A9:AB:FA:3C:09:14:D4:65:7A:15:E2:B9:7A
Authority key identifier: BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
Certificate issuer: /CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Certificate serial: 712A7E6308D90AE6F0A0996306C332B45BA4FF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
Manifest number: 02F4
Signing time: Sat 23 Aug 2025 00:54:57 +0000
Manifest this update: Sat 23 Aug 2025 00:49:57 +0000
Manifest next update: Sun 24 Aug 2025 02:06:57 +0000
Files and hashes: 1: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl (hash: SwH9tBr83YxfaH7FmfKc/dqRauR4pEKYeOi9pWs/KMo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:06:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:2a:7e:63:08:d9:0a:e6:f0:a0:99:63:06:c3:32:b4:5b:a4:ff:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Validity
Not Before: Aug 23 00:49:57 2025 GMT
Not After : Aug 24 02:06:57 2025 GMT
Subject: CN=2944D9BEF44B93A9ABFA3C0914D4657A15E2B97A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:21:73:02:92:2d:39:93:d7:f4:81:60:64:
3b:4c:89:03:d0:2c:03:66:85:30:2a:6f:1f:64:58:
03:47:06:08:d1:fc:39:7f:68:e0:f3:57:27:b1:75:
a2:26:f4:1e:58:80:cd:7f:dd:5f:35:7b:29:b7:2c:
8c:a7:03:2f:c9:3c:81:f8:8d:f2:b5:6c:50:6d:2f:
cf:ff:62:6c:17:7f:ba:1c:71:f4:5d:7b:7f:cc:e8:
1e:82:e1:c3:6f:e7:91:e9:e7:8b:21:a4:89:d6:d8:
4b:35:78:b4:13:4b:72:0d:f0:4c:ba:66:b2:e9:5b:
a2:f5:74:1c:f7:7e:67:ed:fc:9d:ef:28:4a:ff:3d:
92:11:34:82:b1:68:e3:28:63:0d:27:f9:be:19:12:
1d:88:b2:25:a5:83:6b:36:1d:78:3a:a6:e9:ce:34:
d0:32:4d:17:c5:cb:7f:e1:16:b7:0b:0e:41:4a:75:
4e:5b:45:2b:e1:bb:7c:88:63:43:ea:f2:2c:0a:68:
0f:8a:0c:9e:6d:34:61:73:26:e0:a5:32:3c:45:30:
bc:77:67:97:ff:64:04:b6:9e:5c:c5:b7:bd:89:99:
58:6e:e5:8a:72:4f:8d:99:7d:e6:f0:44:08:40:d9:
a0:33:50:59:6d:01:ea:08:f7:d6:97:36:92:73:36:
b6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:44:D9:BE:F4:4B:93:A9:AB:FA:3C:09:14:D4:65:7A:15:E2:B9:7A
X509v3 Authority Key Identifier:
keyid:BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e5:f7:0c:2d:2c:d1:39:95:3c:9d:92:3b:2b:0f:b2:87:2b:
9d:24:12:f0:3f:17:8c:7a:b0:dc:af:17:a2:c3:e5:2a:e0:09:
12:92:4d:39:cf:19:0b:bc:c7:86:3a:05:ce:4c:26:dc:8a:95:
3e:93:eb:6e:96:85:61:9b:13:b3:e7:3c:90:eb:bd:20:4e:b5:
83:72:30:e6:45:12:cf:dd:8f:61:df:15:2a:5b:1c:2d:43:32:
8a:ad:b7:0a:8e:5d:7c:e6:85:d6:5d:27:04:a2:52:fc:d3:e5:
7c:17:ff:ba:4f:d1:83:4e:85:20:0f:4a:c2:50:1c:06:d3:a1:
7b:2f:54:d5:fc:8f:c8:b2:cd:13:56:2a:d0:75:61:8c:f7:00:
2e:2d:cc:06:f1:18:17:3d:48:19:0a:87:e6:34:2a:ca:1d:97:
b8:b2:9f:23:0e:1e:04:15:1b:c9:f9:9e:75:5a:80:17:c6:7b:
c2:ac:e2:e2:0a:19:09:2e:34:e4:f2:2e:ab:c5:2f:c8:57:56:
da:ac:4b:de:09:dd:98:80:86:12:bb:f3:54:6c:04:90:3d:1a:
6b:ce:5c:41:07:25:77:93:9c:a9:1c:b2:72:e8:3b:f0:fc:2e:
69:9c:3f:f2:e3:97:0d:95:ac:f1:0d:2a:1f:88:97:8b:04:4d:
7e:d3:e2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:24:37 2025 by rpki-client