Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
File: BaQevhJyohyuDqGzXcCD-taKXX0.mft (raw, json)
Hash identifier: HHJHY5mTWJQOk39gmE8ZjoF8owCJUlpVaL3eNoUANCg=
Subject key identifier: 26:47:F4:8C:3F:0B:E8:A6:AC:3D:B6:51:C0:85:ED:2E:36:28:3A:14
Authority key identifier: 05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
Certificate issuer: /CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Certificate serial: 019A71B83065C9B6187AF444BFDE985DF48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:27 +0000
Manifest this update: Tue 11 Nov 2025 07:01:27 +0000
Manifest next update: Wed 12 Nov 2025 07:01:27 +0000
Files and hashes: 1: BaQevhJyohyuDqGzXcCD-taKXX0.crl (hash: bqeRHc9py9kJo224104OBIwwSKPR+WgD77CNnP1iaX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:30:65:c9:b6:18:7a:f4:44:bf:de:98:5d:f4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Validity
Not Before: Nov 11 07:01:27 2025 GMT
Not After : Nov 12 07:01:27 2025 GMT
Subject: CN=2647f48c3f0be8a6ac3db651c085ed2e36283a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:45:e2:f9:70:09:19:7a:bf:62:bb:a3:94:
47:2d:57:de:b6:64:1a:47:4c:eb:59:1d:f4:0e:d6:
67:4d:d9:a9:f1:a9:bf:c3:bb:09:89:99:68:66:9b:
e9:ce:53:a3:79:d6:e7:bc:b1:9a:b9:9b:63:58:fd:
f6:48:c7:f9:f8:1b:e4:0a:dd:db:51:06:06:0e:97:
c4:09:ce:9b:0a:04:55:75:c2:b9:8d:98:f3:ea:47:
70:1d:4c:2a:ea:41:3f:50:ec:eb:8d:c9:68:c1:c2:
78:59:8c:30:e8:59:21:84:10:73:48:0c:16:4a:7a:
e7:0a:f2:33:a1:ed:9b:e7:d3:38:2f:4d:32:9b:67:
37:72:3e:81:39:c2:68:0c:09:ab:9f:f4:f8:74:c1:
ad:b1:50:18:73:54:5b:86:93:7f:f6:80:e8:b2:88:
a6:46:32:15:9b:5a:90:cb:1b:4f:3d:f7:49:07:a5:
d5:cb:ea:e8:67:cd:4b:06:22:93:47:ea:a1:20:45:
4e:9e:83:7e:97:57:f6:49:62:02:1b:2e:e3:22:a4:
e0:e6:bf:6c:98:dc:f0:cd:7e:8b:5d:d8:24:90:9d:
6b:ec:a2:34:91:86:a3:c5:27:b3:3d:31:b8:bc:c5:
dd:6a:d8:8c:6f:d5:44:b9:6a:25:f4:9a:08:12:9a:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:47:F4:8C:3F:0B:E8:A6:AC:3D:B6:51:C0:85:ED:2E:36:28:3A:14
X509v3 Authority Key Identifier:
keyid:05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:60:2b:d2:88:61:d3:6e:31:af:2d:ab:6e:b9:18:08:c4:43:
15:6c:8c:e5:7b:0e:10:94:a0:0b:9c:0d:ce:44:3a:30:a9:5c:
4b:4f:82:4f:cc:fe:e9:9b:7f:e5:5f:35:c9:96:1b:0c:94:8c:
c1:95:5f:e2:5a:e1:eb:2d:80:6e:06:2b:2a:00:26:fa:ed:f1:
65:2b:75:ae:e6:21:db:08:ed:26:d0:fe:98:e0:f1:e0:55:5b:
cc:d1:f1:f8:29:af:3f:98:40:5f:f7:b8:f3:88:61:cb:55:a5:
e1:69:78:15:2b:76:24:08:c7:37:a4:ca:e0:14:73:6b:bc:f0:
d1:d8:d6:52:ad:9d:f0:cd:b6:86:20:cc:73:bf:de:40:9d:16:
1b:81:91:14:cb:36:f7:5e:a5:c2:47:cf:37:40:21:d6:5c:50:
00:8c:cd:98:7c:91:36:d7:3a:73:1b:5d:94:af:5c:df:62:23:
d0:30:60:a4:6a:8c:5e:82:4a:64:0e:8c:c9:5b:de:f1:85:1b:
ea:53:86:e7:cf:b5:34:0b:01:12:49:bf:0a:f5:07:62:17:29:
96:ba:8a:70:57:08:60:1e:ce:bf:8e:22:87:f3:bf:f8:b0:31:
9b:ed:35:51:53:fd:47:34:87:09:a3:0a:f6:06:5d:6a:c1:e5:
9e:ac:4a:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuDBlybYYevREv96YXfSMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTQxZWJlMTI3MmEyMWNhZTBlYTFiMzVkYzA4M2ZhZDY4
YTVkN2QwHhcNMjUxMTExMDcwMTI3WhcNMjUxMTEyMDcwMTI3WjAzMTEwLwYDVQQD
EygyNjQ3ZjQ4YzNmMGJlOGE2YWMzZGI2NTFjMDg1ZWQyZTM2MjgzYTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGxF4vlwCRl6v2K7o5RHLVfetmQa
R0zrWR30DtZnTdmp8am/w7sJiZloZpvpzlOjedbnvLGauZtjWP32SMf5+BvkCt3b
UQYGDpfECc6bCgRVdcK5jZjz6kdwHUwq6kE/UOzrjclowcJ4WYww6FkhhBBzSAwW
SnrnCvIzoe2b59M4L00ym2c3cj6BOcJoDAmrn/T4dMGtsVAYc1RbhpN/9oDosoim
RjIVm1qQyxtPPfdJB6XVy+roZ81LBiKTR+qhIEVOnoN+l1f2SWICGy7jIqTg5r9s
mNzwzX6LXdgkkJ1r7KI0kYajxSezPTG4vMXdatiMb9VEuWol9JoIEpqhPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZH9Iw/C+imrD22UcCF7S42KDoUMB8GA1UdIwQY
MBaAFAWkHr4ScqIcrg6hs13Ag/rWil19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFRZXZoSnlvaHl1RHFHelhjQ0QtdGFLWFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi85NTYwMmUtOWViMy00MThiLWJjMDAt
MTY3ODMxNjEzMTQ1LzEvQmFRZXZoSnlvaHl1RHFHelhjQ0QtdGFLWFgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi85NTYwMmUtOWViMy00MThiLWJjMDAtMTY3ODMxNjEzMTQ1
LzEvQmFRZXZoSnlvaHl1RHFHelhjQ0QtdGFLWFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWAr0ohh
024xry2rbrkYCMRDFWyM5XsOEJSgC5wNzkQ6MKlcS0+CT8z+6Zt/5V81yZYbDJSM
wZVf4lrh6y2AbgYrKgAm+u3xZSt1ruYh2wjtJtD+mODx4FVbzNHx+CmvP5hAX/e4
84hhy1Wl4Wl4FSt2JAjHN6TK4BRza7zw0djWUq2d8M22hiDMc7/eQJ0WG4GRFMs2
916lwkfPN0Ah1lxQAIzNmHyRNtc6cxtdlK9c32Ij0DBgpGqMXoJKZA6MyVve8YUb
6lOG58+1NAsBEkm/CvUHYhcplrqKcFcIYB7Ov44ih/O/+LAxm+01UVP9RzSHCaMK
9gZdasHlnqxK5Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:55 2025 by rpki-client