Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: 7eKhj3EeA7QzJ3+nkK4ejECK1K7tSbI1qIjMzE1fdvk=
Subject key identifier: 92:75:07:97:64:D8:61:E1:25:1E:C5:8B:E7:95:2A:08:83:13:D7:BE
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 019A1FBF069475F1412E794F891A8D080580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 16F9
Signing time: Sun 26 Oct 2025 09:00:03 +0000
Manifest this update: Sun 26 Oct 2025 09:00:03 +0000
Manifest next update: Mon 27 Oct 2025 09:00:03 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: SuDWClKe9mH5eTMguoj0h9kKEf4BNt3ITL9d3cNaCvQ=)
2: Lh8yvuYECQW6dDow2L76nBGsr6E.roa (hash: 0hiYjVR3RerVN9RXXudfA5pr9cnXHHQqw5O/Jaf9Snc=)
3: vtX7rusa6fZMmF3lc_ZvTTSyZII.roa (hash: /Q3goqDnJ6EwR3K+qh2LYwfBLshEeT0YC75y12sQLG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:06:94:75:f1:41:2e:79:4f:89:1a:8d:08:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Oct 26 09:00:03 2025 GMT
Not After : Oct 27 09:00:03 2025 GMT
Subject: CN=9275079764d861e1251ec58be7952a088313d7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e5:f4:1a:bf:13:47:f2:5d:a6:36:fd:7b:06:
f9:5a:5f:e2:c1:25:ac:27:2a:6d:f5:e1:bd:49:46:
79:59:c0:42:3f:a2:ad:40:91:9e:12:aa:a8:54:6a:
a4:4f:3b:d8:ae:49:f3:30:c9:0c:11:1c:ee:66:8b:
c7:e9:95:c7:ce:68:89:9c:27:a5:a1:6d:e3:4a:45:
dd:e8:51:d6:7b:a1:97:45:07:55:77:c8:be:0f:2a:
a0:51:13:b8:af:a4:82:6a:83:b6:32:97:ad:00:74:
a9:33:20:d2:63:05:03:d8:0c:ed:89:ed:6e:8a:a5:
93:fd:7b:59:85:65:43:51:49:50:0b:04:e0:e8:24:
6e:7e:98:cc:a5:00:53:80:c2:4a:da:0e:43:bd:66:
da:67:ea:16:24:59:44:38:cc:fa:a9:f2:48:a9:ef:
42:b5:0b:59:af:3c:c4:2b:0e:b0:40:ca:4d:1d:87:
8f:09:5e:ed:5a:c4:d1:c3:d0:8a:0d:dd:22:f8:0b:
de:8d:fb:4c:b1:13:3f:32:bf:e6:97:25:d4:1c:a0:
6d:4a:6e:07:60:0d:b4:48:65:87:f3:b4:ee:24:de:
9f:ba:d3:63:a1:3f:12:3d:ff:7d:ed:6b:90:95:1a:
13:43:44:71:2d:e5:8f:45:ce:a4:cb:50:5d:4c:50:
99:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:75:07:97:64:D8:61:E1:25:1E:C5:8B:E7:95:2A:08:83:13:D7:BE
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e1:32:09:c2:5e:63:cf:02:72:fe:e7:0a:9e:e5:7e:99:46:
10:b1:58:a5:a2:52:7a:80:fc:f9:f0:e4:80:81:dd:3d:2f:11:
d3:4d:34:9c:40:bf:f5:18:b7:02:fc:79:30:06:18:80:9b:3f:
58:cc:e2:91:98:e9:17:1f:88:12:a2:6c:ab:35:d4:8d:b7:6a:
3c:0c:99:22:bc:2f:1a:d4:a2:21:94:56:52:c5:6f:4b:d4:6e:
81:8e:ac:12:2c:51:2c:04:a4:a4:c2:9e:ac:6e:0e:cb:78:b4:
71:c8:9c:1e:fb:ef:33:52:06:15:50:6d:50:f3:c9:cb:02:96:
8c:5f:7a:e1:cd:db:5f:c5:5b:bc:e3:f4:6a:c7:46:e0:f2:5d:
70:2d:5a:98:c4:60:d1:03:52:91:31:18:6d:d7:b5:09:61:be:
ef:50:22:66:cb:ff:68:e1:e8:d0:6e:21:6e:4d:97:04:0e:dd:
e9:b6:4d:ef:5d:4e:74:a9:d6:4e:d2:4d:21:6c:7a:e9:26:53:
01:72:9a:96:f9:5c:05:c4:d5:0a:7a:5d:0a:3f:46:73:98:6a:
81:ed:08:99:25:67:0b:f1:3b:fe:be:37:53:da:c0:51:2c:a7:
9b:67:6b:38:de:9a:e4:29:6a:b5:fd:e3:6c:34:8b:8e:49:f6:
3a:79:82:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 13:20:19 2025 by rpki-client