Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: W22/N4+tS3iRN+G1EQR/oR/IetPDkOhMvGHQodJ7cxU=
Subject key identifier: C1:59:BB:99:A6:9C:E5:3A:BF:AF:13:96:31:F5:14:22:A5:6E:18:2C
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 01993424AE6E1AF9DDC317981EEE440CEBB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 167F
Signing time: Wed 10 Sep 2025 15:00:42 +0000
Manifest this update: Wed 10 Sep 2025 15:00:42 +0000
Manifest next update: Thu 11 Sep 2025 15:00:42 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: eXduWz5EO2gLw6n8jFibBSc/Pkp7yR3Y83N7JueyKzw=)
2: Lh8yvuYECQW6dDow2L76nBGsr6E.roa (hash: 0hiYjVR3RerVN9RXXudfA5pr9cnXHHQqw5O/Jaf9Snc=)
3: vtX7rusa6fZMmF3lc_ZvTTSyZII.roa (hash: /Q3goqDnJ6EwR3K+qh2LYwfBLshEeT0YC75y12sQLG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:ae:6e:1a:f9:dd:c3:17:98:1e:ee:44:0c:eb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Sep 10 15:00:42 2025 GMT
Not After : Sep 11 15:00:42 2025 GMT
Subject: CN=c159bb99a69ce53abfaf139631f51422a56e182c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2e:b3:fb:e1:dc:6b:17:b0:00:64:ba:6a:33:
c3:98:fc:e3:93:a2:e1:70:5a:5c:b5:7f:90:9a:e3:
29:f2:23:e7:95:f0:65:59:7d:2b:04:90:79:97:4c:
80:0b:69:43:38:6e:9b:69:e1:f0:6d:6f:fe:46:99:
d9:aa:13:ba:3a:71:b0:5e:2c:1f:96:8c:7b:d5:20:
25:25:8c:28:35:93:1c:6b:1d:3d:72:fa:c6:7f:93:
f7:0f:aa:17:14:36:74:7d:60:3c:b3:1f:17:e7:cd:
ab:21:8c:6a:67:a9:5a:ba:a5:2b:4f:4e:6e:b3:43:
15:06:06:a6:e3:72:b4:22:ec:22:9c:b9:ea:7a:37:
ab:78:a6:d0:b7:82:5a:c8:0a:37:d5:68:5f:1d:25:
c4:5d:13:34:2c:ed:d5:5c:87:89:3c:f4:55:1c:e3:
6a:0c:f2:66:ec:cc:e7:24:0a:cd:5c:62:bb:1f:ab:
96:b6:24:67:96:d2:98:de:1f:89:6b:61:93:d4:39:
16:59:1d:90:75:0b:15:5a:5a:fe:90:fa:46:ea:2b:
e9:67:a9:ed:ad:91:67:0f:52:ab:4e:d5:43:30:5e:
66:3f:86:f8:f4:d8:3c:b5:55:b3:c9:2d:33:cd:f2:
93:34:07:d0:b7:54:42:33:a2:7d:f2:fd:96:a6:58:
b8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:59:BB:99:A6:9C:E5:3A:BF:AF:13:96:31:F5:14:22:A5:6E:18:2C
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:20:58:6c:62:74:b6:32:c5:2b:37:5d:05:61:ec:16:b1:cb:
ea:3f:fb:64:72:a6:bf:f5:e3:88:24:cc:58:36:46:d6:75:06:
8e:de:29:3f:b6:bf:84:50:0a:2c:58:54:31:d1:b2:1d:a0:4e:
e3:0a:bb:53:12:81:d4:8e:ac:d2:b5:38:69:0c:a0:9a:22:0f:
39:34:ee:1f:29:78:25:7b:e4:16:50:d5:d1:f0:ab:35:38:a2:
35:67:63:15:e0:19:fd:4d:4a:c6:e3:cc:f7:32:92:d1:1c:a1:
21:0f:d1:46:b5:c0:c1:d0:fa:49:ea:00:74:d3:eb:1f:c7:10:
6d:ca:ea:5f:e7:9d:36:df:25:34:e0:f6:61:d1:50:83:6b:26:
e0:8f:64:27:7e:bb:bf:7e:21:45:47:76:67:94:63:73:5d:ed:
fb:e3:d2:18:16:90:65:b0:ea:0c:ef:91:42:8e:aa:df:61:41:
a3:e0:fb:16:bd:7c:4e:40:11:c8:46:0c:3d:01:77:2f:e7:59:
c7:92:80:78:6b:3a:46:18:4c:76:c1:56:16:81:76:d9:5e:b8:
c8:36:f8:ae:6a:23:38:de:c7:70:08:c9:3f:44:e4:fa:0a:22:
a7:33:bd:51:24:c7:3b:28:d7:cf:01:32:b4:ec:12:2c:01:c5:
82:59:89:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:26:32 2025 by rpki-client