Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
File: BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft (raw, json)
Hash identifier: FXCO9ZU1d289H6ZSGDm37so8l/eFzKt0XfWDScSokyk=
Subject key identifier: A0:64:4E:13:11:07:94:E4:E9:61:DE:55:D0:86:BF:F1:FA:48:7B:2C
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Certificate issuer: /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial: 01983CF2F9CC6ACD4778602309670B23BD11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
Manifest number: 04DD
Signing time: Thu 24 Jul 2025 15:00:13 +0000
Manifest this update: Thu 24 Jul 2025 15:00:13 +0000
Manifest next update: Fri 25 Jul 2025 15:00:13 +0000
Files and hashes: 1: 8NoTu3q8IjcyFeSIedZ4Ihj-NDU.roa (hash: /wW2Zq1BGMLL48zxl/CKfKIe0NCGNYrdHYCS8/4pGYw=)
2: BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl (hash: 7sif0Nnvdd/ICpM/0vPMvKhS0uDXMZbqrlH5cmLSHfs=)
3: BXaZelrYFdJvNqOdLiZPisxY7Uk.roa (hash: 67k1me2SgwY24GHhzeZvCPBUVpU7Aig03bpTpS4se2U=)
4: BvrFfgaOvktjClmF1Y8fP67Mecs.roa (hash: PbuxkncSrl/Kd/73WRwH/QoM5pPO6VdbbF0JBm0KcQM=)
5: c4e4vqwgZd2ZJ6wIw-pjuHwTcAg.roa (hash: oVdR7HS3XKDpou60JLgnb0pDBzK522Os/r6Pbt/GzeA=)
6: ckrq-xWy9dmxHUCFMOdOt359xMc.roa (hash: Rrj1A3kTGmZ6GPx6N9soo7FlfXOroReQlh35Wi3wkRU=)
7: xHsH2-pcu2rRd9FcSrlqvXUZKdc.roa (hash: gqOwGQ8lbsGxh3Vbcwpg5cnF6uUZY0zyhOiB5pUPkiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:f2:f9:cc:6a:cd:47:78:60:23:09:67:0b:23:bd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Validity
Not Before: Jul 24 15:00:13 2025 GMT
Not After : Jul 25 15:00:13 2025 GMT
Subject: CN=a0644e13110794e4e961de55d086bff1fa487b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2c:f9:43:72:61:8b:2a:52:aa:45:b9:78:89:
de:ea:69:37:1c:08:f8:5d:d9:ff:83:fe:cb:0e:b9:
19:79:5c:66:be:12:bd:da:54:6d:51:d0:04:59:76:
2a:fa:52:3a:b5:01:b0:a8:e3:f8:47:c2:ce:07:ab:
2c:b9:ae:ba:14:09:98:ba:ec:ea:3a:c5:e3:3e:08:
fb:ea:38:f0:b7:e8:09:f9:8d:e8:d5:c1:8a:39:93:
08:ee:42:4e:62:06:a3:ca:9f:13:5e:ed:75:c8:cb:
2c:de:ef:ee:d7:b6:9a:c2:c5:4d:8f:18:8f:03:60:
10:e1:03:b7:5b:5a:23:80:a8:61:fe:30:e2:39:ec:
2d:68:f3:d9:fe:ab:cc:0b:1f:b9:b3:02:73:54:5d:
86:40:02:db:05:0c:82:fd:d5:da:8b:66:de:fe:27:
73:5c:c3:91:ae:7d:58:84:8c:fc:ad:7e:2a:43:b3:
99:7b:d0:8d:05:c0:23:87:3b:aa:00:27:76:9a:28:
20:79:df:61:36:9a:16:18:c8:c2:2f:0c:6f:af:e0:
f6:e9:e2:ed:25:cd:48:0f:30:01:93:6d:01:02:7c:
9b:ce:21:bf:05:e0:39:e6:e1:44:0d:12:29:76:ab:
f6:f2:df:e3:d1:de:bc:36:83:c1:82:9d:a5:59:6e:
61:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:64:4E:13:11:07:94:E4:E9:61:DE:55:D0:86:BF:F1:FA:48:7B:2C
X509v3 Authority Key Identifier:
keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:02:a3:e6:c8:17:d5:8b:e0:97:5e:8a:a4:ea:2f:5b:1b:01:
b8:96:ba:9b:d4:63:8c:2d:e6:a7:27:5c:18:67:37:28:06:30:
d5:af:cc:34:30:4e:ff:9d:37:97:1f:e7:2c:e6:b7:49:b8:1e:
11:7e:d7:68:f3:31:b3:0a:0a:77:3d:14:21:c3:fa:95:99:c4:
38:02:0b:54:e7:e8:ae:6d:a4:80:9e:fe:f4:72:bd:5d:a6:96:
ad:a8:2e:ef:97:7f:b9:e9:4a:b0:f6:4b:1c:76:f4:c0:78:a7:
8f:2f:ec:60:7c:36:66:1c:ac:f0:56:55:d7:7b:88:9b:83:73:
7f:f8:b6:75:60:0f:f3:14:5c:77:03:19:d3:e5:f7:f3:ca:c0:
41:7a:2a:44:52:19:41:66:24:2e:0f:b6:ad:00:53:07:c6:53:
18:a3:7d:70:5c:08:80:37:79:f7:ad:9f:2d:ca:61:a0:bf:6e:
33:ff:af:ca:dd:5e:b8:ee:60:48:ee:dd:3f:ae:30:ad:a1:67:
83:62:a5:ec:b0:05:a5:a7:fb:85:53:2f:69:9e:90:62:6c:bf:
75:46:8d:de:30:d3:a4:dc:a6:4d:a1:fd:bf:51:83:a0:af:37:
ba:0c:b9:d2:ce:03:c5:f4:6e:61:f0:fe:d5:17:02:c6:d4:c8:
d2:76:bf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:29:30 2025 by rpki-client