Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
File: BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json)
Hash identifier: Lhfhi8AGoF6HOgAW1dEL6OgqGJ2rCdcpAA8wN17vfrk=
Subject key identifier: 11:42:11:46:C7:64:F7:54:EE:FA:E3:09:AA:FB:A5:20:1B:E1:5E:A4
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Certificate issuer: /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial: 019A70A5267BFAAE196CECC94BF262354915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 02:01:02 +0000
Manifest this update: Tue 11 Nov 2025 02:01:02 +0000
Manifest next update: Wed 12 Nov 2025 02:01:02 +0000
Files and hashes: 1: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: cXoIj+B11bc1qNR1QnfGQFtNkK+/7R6R1FRg4U40P5M=)
2: LjpB0wqPDlAY2LkZEeFhm2QXKMA.roa (hash: 90iV42vsD6bXusmrjQ9UcKOk5lPPv2pkCMxcdhSqD2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:26:7b:fa:ae:19:6c:ec:c9:4b:f2:62:35:49:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
Validity
Not Before: Nov 11 02:01:02 2025 GMT
Not After : Nov 12 02:01:02 2025 GMT
Subject: CN=11421146c764f754eefae309aafba5201be15ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:95:c0:06:e3:50:be:5c:91:db:04:3f:e0:a0:
02:71:83:d9:aa:5e:fe:e8:d3:62:0e:1c:e8:ac:f8:
93:e6:9a:22:22:1b:04:82:85:3c:9f:a6:a7:a3:08:
40:be:49:de:5b:df:7a:3b:80:79:ba:97:a1:78:8c:
a2:00:52:61:f0:93:69:ac:61:ed:d8:bf:0d:64:da:
29:61:9d:79:a0:78:92:82:12:6d:72:4a:23:af:54:
e7:bf:e5:5e:c5:be:de:de:81:d4:fb:33:ad:30:cd:
c1:89:04:8a:92:cb:b6:2f:d2:ee:ed:22:8a:ff:4f:
30:ef:07:5e:8b:88:7d:29:0f:2e:c0:a4:c5:86:cf:
e6:e7:78:22:ec:e2:b5:9d:a9:23:92:1f:a2:e7:89:
41:88:34:e4:4a:8f:13:46:cf:d8:46:e2:5d:17:c5:
04:e0:77:12:33:16:db:27:d9:8a:29:cb:89:47:9a:
89:a4:6a:2b:7e:1f:dc:b3:48:cb:30:78:05:48:66:
5c:44:4a:80:d9:7a:eb:00:ee:a6:1a:13:3b:ee:12:
b1:36:ea:5e:ab:6f:87:f5:fd:7e:72:11:69:ab:33:
0a:49:c3:3e:20:6e:c1:9b:1e:ef:7a:89:5f:dd:4e:
e7:3b:9f:27:4a:a7:d5:ca:3c:52:df:5a:fc:e2:72:
a9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:42:11:46:C7:64:F7:54:EE:FA:E3:09:AA:FB:A5:20:1B:E1:5E:A4
X509v3 Authority Key Identifier:
keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:30:e7:cd:ce:cf:e6:28:bf:d5:9a:9b:c0:6f:e0:75:24:24:
91:40:39:38:bc:b0:84:e5:c6:e4:1c:87:de:33:5c:73:b7:84:
81:e1:e3:04:88:44:23:62:d7:55:e3:46:6a:67:27:1b:fe:e4:
89:69:68:70:2f:e9:a5:29:ed:83:7c:9b:9c:48:59:34:0b:43:
a6:0c:86:74:a3:94:89:e5:a0:ee:2b:b3:3e:5e:d5:29:a4:f5:
02:cc:86:bf:a4:46:a8:8f:e3:3c:c5:78:7b:a3:c2:17:43:ad:
fe:a5:00:72:4f:5e:ab:36:d8:e2:9a:85:5c:a7:27:cb:86:b7:
e4:69:92:00:c7:f0:1f:86:6f:80:87:1c:d9:9b:a0:d3:b3:b8:
88:2c:b3:4e:24:1c:c3:69:30:23:ca:8e:58:b2:64:a1:d9:7e:
bf:91:0c:aa:b3:cf:00:5e:18:3b:e7:e9:e7:ec:75:2f:4f:0f:
c1:51:74:24:7b:c2:21:a4:3f:93:ad:85:69:99:65:94:23:dd:
80:be:d5:07:76:9c:9a:3f:73:5d:dc:87:70:d7:34:32:ee:b9:
32:ca:0f:23:53:6d:cb:cc:5e:07:49:7b:aa:58:bf:54:7b:52:
b2:1c:4b:c4:dc:53:b3:d1:f9:11:9e:d7:cb:ac:58:b6:c5:5e:
16:b2:7f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:47 2025 by rpki-client