Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
File: BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json)
Hash identifier: k95mSh/bgvbVhIWZnDJN1jZHIcOwKbuyJfZEbtcC7p8=
Subject key identifier: 08:C3:C9:5A:44:D7:07:40:E1:0E:BA:E8:65:4A:A5:EA:E8:BD:18:0D
Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
Certificate issuer: /CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Certificate serial: 019A72935053267E5F1F03F7BBF8BD424EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
Manifest number: 1558
Signing time: Tue 11 Nov 2025 11:00:48 +0000
Manifest this update: Tue 11 Nov 2025 11:00:48 +0000
Manifest next update: Wed 12 Nov 2025 11:00:48 +0000
Files and hashes: 1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: kDGItFR9RVzlmqmbBdWO1Bhior7DOCMwVUbRM5eK+0g=)
2: dXeaBJl10vB-B0zSVkLwNY_iIs4.roa (hash: F86Ia5myX5pjFnoQkxccwMDKgx5XnQXJd15fpxB0f8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:50:53:26:7e:5f:1f:03:f7:bb:f8:bd:42:4e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Validity
Not Before: Nov 11 11:00:48 2025 GMT
Not After : Nov 12 11:00:48 2025 GMT
Subject: CN=08c3c95a44d70740e10ebae8654aa5eae8bd180d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:02:eb:a0:8f:03:ad:f1:79:61:50:3d:83:
5c:f0:59:e5:e6:e7:c8:6b:1b:ff:cc:89:d5:29:b6:
65:e3:46:60:9e:3c:92:18:3f:a1:49:60:7e:a7:09:
e2:18:6b:77:9d:98:4d:3b:4c:3e:a9:8a:9b:25:2a:
f0:f7:98:28:1c:53:3d:fb:57:97:d6:8e:1e:ee:d2:
5b:36:59:d4:02:b2:72:4f:27:f5:45:c5:ce:8e:cb:
35:70:11:da:23:d5:0b:4e:53:f5:11:f2:56:fa:ee:
12:fa:40:13:b7:33:24:15:fb:d9:26:df:e4:10:14:
2a:6e:8c:eb:2f:b9:22:5d:95:d4:84:50:cc:01:b5:
48:e0:36:66:2c:ea:b6:12:84:ae:6f:1c:9f:6d:9f:
81:ae:ee:66:0c:93:13:a4:26:22:c4:2e:89:2c:4e:
f1:f4:69:02:c0:55:eb:dc:b9:fb:a2:a5:71:2a:c5:
79:d8:0b:19:ef:42:cd:a7:1d:04:11:f9:51:87:e3:
16:62:61:2b:80:e2:73:09:f7:97:40:76:60:29:13:
26:a3:fb:21:dd:66:e6:09:f1:47:8f:5d:d8:5f:b2:
13:9f:a7:2b:45:1f:01:6b:28:d2:60:7c:fd:2f:56:
05:07:34:65:e6:04:ad:26:95:6f:f0:72:74:81:fc:
d5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C3:C9:5A:44:D7:07:40:E1:0E:BA:E8:65:4A:A5:EA:E8:BD:18:0D
X509v3 Authority Key Identifier:
keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:70:bd:31:2d:8a:ba:08:ec:9d:34:74:b0:e9:ba:50:d2:15:
23:3a:b3:b3:b6:75:70:a2:ef:5c:92:9e:ba:93:cc:55:5d:b8:
66:e5:55:8d:d0:de:cf:02:f4:49:5f:79:dc:fd:67:8b:1f:d5:
ec:a0:b0:13:91:74:aa:82:1d:f8:bd:47:36:8f:59:06:63:51:
19:d5:4d:a0:4d:10:80:0e:ef:6e:bc:c5:56:09:3e:1e:49:a8:
26:f7:ca:65:06:7b:cb:68:10:c4:bb:a5:35:ae:13:60:5f:45:
b4:4d:06:06:31:93:4b:be:f4:20:1d:46:5e:2e:ca:ef:ea:09:
21:ba:17:d5:0b:79:6c:b4:b8:ee:83:89:7a:33:ee:04:50:53:
14:af:59:23:ed:86:34:37:fc:9d:1f:1c:32:1d:17:e8:54:6b:
40:e7:0b:8c:23:d7:ff:1f:c2:32:f2:ed:e4:82:ca:5d:e9:ad:
91:54:c1:15:d9:05:36:c9:e1:b7:64:9d:09:44:23:b1:d9:61:
0e:7f:f0:50:e1:b4:7e:e6:ad:46:4a:63:8b:ca:ff:13:3b:6a:
ea:d9:44:ee:35:08:a8:1d:39:6e:48:63:5d:db:5c:97:e5:17:
40:8b:48:21:c3:6f:6f:ba:16:ca:88:c5:de:79:75:41:21:2b:
56:21:ae:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:54:55 2025 by rpki-client