
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
File: BV14S5ASZjw0C_Z_rLYb--EIcbg.mft (raw, json)
Hash identifier: hvvYYrTmc3qBjQkkDii+CC3hveDqjmOWPGqUy3EEAow=
Subject key identifier: 69:51:5D:B9:09:B4:EC:68:3B:25:94:66:8D:2A:28:F6:28:E7:36:65
Authority key identifier: 05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
Certificate issuer: /CN=055d784b9012663c340bf67facb61bfbe10871b8
Certificate serial: 0199239EBA8FC8277FEA813949A95EDA658C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
Manifest number: 0B79
Signing time: Sun 07 Sep 2025 10:00:28 +0000
Manifest this update: Sun 07 Sep 2025 10:00:28 +0000
Manifest next update: Mon 08 Sep 2025 10:00:28 +0000
Files and hashes: 1: BV14S5ASZjw0C_Z_rLYb--EIcbg.crl (hash: xlQRWCD/EdiP+A9naLHEVK7gChFJn0XrABFtMePTxkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:ba:8f:c8:27:7f:ea:81:39:49:a9:5e:da:65:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055d784b9012663c340bf67facb61bfbe10871b8
Validity
Not Before: Sep 7 10:00:28 2025 GMT
Not After : Sep 8 10:00:28 2025 GMT
Subject: CN=69515db909b4ec683b2594668d2a28f628e73665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:18:78:01:3a:c2:7c:7c:b0:5b:c4:a0:a5:c5:
23:aa:32:ba:12:2e:b5:3b:29:c4:ac:f5:67:c5:42:
3a:ff:bc:85:23:d4:0d:80:83:a3:51:54:b3:34:38:
61:1c:ea:31:ed:29:57:82:e6:6c:ca:51:82:54:46:
63:95:2d:42:af:5f:04:b4:f0:9b:cc:2d:67:0f:1c:
2e:ad:41:98:8a:db:1b:42:5a:ba:91:60:fb:5d:87:
ba:ed:59:ad:5e:03:06:41:4e:a5:31:0c:48:f9:94:
b7:45:c2:ec:ad:a1:53:0c:65:02:41:50:3c:3d:4a:
37:ba:87:9d:28:41:84:16:4e:c5:bf:24:86:cb:ae:
e6:e9:d7:23:a3:cd:bc:5f:78:ab:e0:c8:1a:7b:84:
29:5d:ff:a1:4f:93:4b:19:3d:93:58:bf:53:e2:8b:
49:ff:f4:32:ad:ad:d3:2f:17:73:9a:ad:d0:94:a2:
f3:70:48:10:6a:d8:6b:52:7e:92:aa:6d:f1:f4:3c:
31:aa:40:3b:24:65:fa:bb:d8:c5:a5:aa:cc:6e:ba:
f2:bd:9b:36:3c:d5:f3:e4:54:38:63:50:d3:6d:08:
b3:0c:b2:1e:49:88:c9:58:7c:86:c6:d5:38:fa:78:
96:b2:64:e3:6f:b4:65:0e:fe:1d:0f:2e:14:05:c1:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:51:5D:B9:09:B4:EC:68:3B:25:94:66:8D:2A:28:F6:28:E7:36:65
X509v3 Authority Key Identifier:
keyid:05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7b:93:1b:9b:29:cb:f0:2f:65:f5:0a:b8:63:61:23:5c:75:
40:78:52:d1:74:15:fa:70:e2:b7:74:b9:3c:a7:7c:2f:c5:c8:
70:24:1f:f4:be:2a:bb:c9:f7:d2:df:bf:89:ad:59:1e:7e:10:
42:5d:79:d7:11:3b:c9:5a:55:08:44:ab:8f:19:f2:51:06:c3:
07:31:e5:e8:71:bc:ec:3f:05:3c:6d:9b:86:8a:04:ea:36:3f:
64:81:86:3a:4f:df:8f:6a:70:db:9e:cf:64:af:48:de:08:24:
1d:83:93:7b:a4:f4:71:5a:b8:6b:2e:d9:5c:c8:ee:ee:60:23:
95:50:95:9d:0a:3b:e6:dd:12:5a:62:53:c5:fb:33:67:6d:65:
9e:74:fc:02:bf:30:5d:c4:f7:35:ef:1c:c0:0b:0d:b4:73:fb:
93:43:5e:93:8b:70:e8:52:71:12:9a:cb:45:c5:a8:a5:a1:7f:
24:a0:14:e9:af:6d:33:67:f5:df:5c:c8:ba:e6:a7:e8:19:06:
36:be:22:3e:a7:7d:8b:cc:73:36:b9:f8:b8:e4:f7:94:fe:1f:
e0:ff:b2:d1:be:3e:a6:7d:8b:72:27:e6:43:0a:cb:84:d5:6e:
d0:9e:c0:44:a3:91:64:31:1f:6f:72:15:96:18:cd:4b:8d:67:
d2:c4:ad:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:12 2025 by rpki-client