Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
File: BvkuaDHfHy681dXrDlmZxbBHXFE.mft (raw, json)
Hash identifier: Pj56zGV/9Jgeu+5NDeAs4WCJ6FAskscV+nbAy8oG1qU=
Subject key identifier: 47:9E:58:09:1C:8D:F6:77:AC:09:32:15:BE:21:4E:64:C4:AE:EE:41
Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
Certificate issuer: /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Certificate serial: 0199C45746A9A0B8B6E65E190A2E46FE98AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
Manifest number: 0D31
Signing time: Wed 08 Oct 2025 15:01:17 +0000
Manifest this update: Wed 08 Oct 2025 15:01:17 +0000
Manifest next update: Thu 09 Oct 2025 15:01:17 +0000
Files and hashes: 1: ABHkV05s8th27UlOQfZqHpvCN9M.roa (hash: W21GRUIPND/bYNl8U/r+S01S2Z9vywL8FOAp0ejiALY=)
2: BvkuaDHfHy681dXrDlmZxbBHXFE.crl (hash: HJSWkY+tVI9Fx3o+s5/n3wnB7SODsVSi5YHCQkohDo0=)
3: GVZUC0rsnJQ_sIBtkI8ZsdyoWyk.roa (hash: X6+WjYU4u92P6QuF2cfdvTIGyt+YNPourgL+oCE8uTI=)
4: LLltM-NzTNKgxqwZ9NE7KyNLRfU.roa (hash: 62y8p/Y8rE/XeGWy9+O3o9ixoxKXX+jz7XcY73z+2J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:57:46:a9:a0:b8:b6:e6:5e:19:0a:2e:46:fe:98:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Validity
Not Before: Oct 8 15:01:17 2025 GMT
Not After : Oct 9 15:01:17 2025 GMT
Subject: CN=479e58091c8df677ac093215be214e64c4aeee41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:f1:9c:71:f8:b4:1f:9b:6e:90:4b:9a:7a:
6b:f8:4c:a3:8b:3d:0b:31:a1:6f:15:ab:2e:13:bf:
bd:63:87:51:80:95:a0:a1:21:44:7b:37:4b:73:f8:
ac:7c:f2:61:69:09:48:ce:95:8c:64:c2:03:af:e5:
ee:3b:d3:25:5a:2b:a5:18:5b:50:e1:2a:8d:aa:bd:
26:04:77:b4:ed:7d:d3:0f:c6:5d:1b:02:1b:7b:59:
b1:c8:e1:17:d4:e5:48:92:bf:21:60:04:f2:47:34:
50:ea:2f:7d:13:e0:28:b7:4d:87:77:ee:0f:0e:9d:
e9:17:46:4b:37:53:a9:3e:ae:89:f3:f3:d1:5d:67:
7f:b7:e5:99:91:4a:69:33:f5:11:02:16:a8:f6:a3:
39:9b:4b:38:08:d3:d1:cf:9f:11:07:52:73:0c:3b:
df:58:69:02:0a:81:25:74:69:c1:d0:d2:78:26:ed:
01:b5:4e:60:56:9a:b4:8b:64:e5:13:8f:a5:95:9d:
eb:bb:d9:02:50:e9:0d:55:ce:3f:43:62:47:60:cd:
df:f0:a9:5d:4b:6a:02:bb:26:ea:30:47:1b:0e:06:
0f:90:4a:7b:a5:ce:db:0b:d3:4c:10:a6:d2:c0:6a:
c2:0d:20:60:87:6b:c2:23:ea:93:49:2c:db:9e:d0:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9E:58:09:1C:8D:F6:77:AC:09:32:15:BE:21:4E:64:C4:AE:EE:41
X509v3 Authority Key Identifier:
keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2c:55:5f:b0:63:63:98:07:16:fc:83:fa:6c:7d:91:0e:31:
16:ac:bd:24:e6:70:b2:c1:69:36:08:42:a5:17:52:e3:95:7c:
3e:1e:e8:9e:d2:ff:2a:58:8f:df:6f:8e:0d:2a:6f:9e:d2:f6:
5b:ab:41:02:c8:66:40:8b:c3:cc:11:a2:1f:49:54:b8:eb:b3:
16:24:c7:68:05:48:44:2a:ea:49:ec:90:3e:1b:72:49:61:48:
e0:b5:67:07:fd:cf:4a:f9:ba:44:92:04:3e:2b:69:71:a1:20:
59:12:49:23:98:d4:62:5d:34:4e:55:f5:2e:4b:5e:1e:b7:d2:
92:0d:c4:60:3c:a6:69:dd:13:b7:06:6a:31:a8:62:6f:eb:30:
d5:09:91:af:12:4f:66:71:7a:cc:08:3f:14:15:c3:98:8a:fc:
fe:89:91:db:0b:3e:49:f5:be:f0:c5:5d:8f:7b:9f:71:a6:1e:
c4:8b:cb:13:d1:14:48:c2:d3:47:e4:f3:6c:b6:94:d4:dc:6e:
a8:bc:38:2a:0b:8c:ed:35:60:11:33:c5:58:e4:a8:89:21:02:
18:c0:d0:15:d9:37:f5:9c:0b:9d:ee:75:bc:2f:d9:e1:1a:27:
4c:17:bc:94:76:a0:df:81:02:46:f0:39:21:f5:df:a6:31:13:
27:d1:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:31:55 2025 by rpki-client