Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
File: Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft (raw, json)
Hash identifier: OSqd1K5+Ae12c5/W/laZORZ/1HSbQcBZLFz2HHnAw+s=
Subject key identifier: 55:D4:94:6A:67:CD:34:8C:05:A6:7D:5F:4F:41:57:66:09:26:C5:89
Authority key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A
Certificate issuer: /CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
Certificate serial: 019A71B944D975CAA98E1A4B9184D03594B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
Manifest number: 0411
Signing time: Tue 11 Nov 2025 07:02:38 +0000
Manifest this update: Tue 11 Nov 2025 07:02:38 +0000
Manifest next update: Wed 12 Nov 2025 07:02:38 +0000
Files and hashes: 1: Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl (hash: dK85z4eVE6iPix3Jisw0hbFGUCSW6g26iA6AyJLFYIY=)
2: x9qgtwMUU_-nMY5SDajHYEXNiCY.roa (hash: 6NC1NBKuG21Mjttmx4hIVvV+xQmoan4Z9cfB+7hjW1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:44:d9:75:ca:a9:8e:1a:4b:91:84:d0:35:94:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
Validity
Not Before: Nov 11 07:02:38 2025 GMT
Not After : Nov 12 07:02:38 2025 GMT
Subject: CN=55d4946a67cd348c05a67d5f4f4157660926c589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ed:d4:d6:f6:9f:8d:90:cb:30:aa:14:ef:30:
0f:35:2a:d5:32:ba:c5:97:90:fe:6a:73:0d:1a:a8:
42:74:88:7a:0a:ee:c4:df:60:b6:1c:6b:29:15:5e:
a0:08:82:95:00:18:2a:5c:0c:21:1b:20:68:54:ad:
cb:85:44:f2:e3:3e:c8:0f:ab:70:b1:b7:25:31:a1:
68:c9:de:b1:04:02:72:9f:52:52:01:e9:3a:93:a5:
f3:75:05:57:54:99:2e:5c:e2:b7:40:54:66:6b:ff:
3c:c7:cf:04:bc:78:7c:e8:08:53:bf:bd:56:3d:64:
8e:94:52:d8:fa:f6:ab:24:51:20:75:04:b2:7f:df:
d8:38:e7:58:e9:64:9a:1c:65:85:96:ef:8f:2f:6e:
02:21:8d:62:bb:73:81:cb:4a:ee:d6:d9:8f:ee:75:
ab:86:33:b2:3d:29:ae:7c:39:de:17:84:23:82:9e:
21:03:ae:56:1d:a4:2e:96:63:9d:46:b0:9f:04:fe:
8f:3a:0b:eb:46:3b:e8:67:7a:d1:b7:9a:13:3a:9c:
92:cf:33:ba:a9:d0:18:5a:1d:a9:73:1c:5e:0c:20:
c3:18:da:32:06:24:a1:ca:4f:e8:8f:a8:02:e0:f9:
43:c2:ab:16:09:4d:68:e3:16:11:a6:9d:7a:b7:43:
7e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D4:94:6A:67:CD:34:8C:05:A6:7D:5F:4F:41:57:66:09:26:C5:89
X509v3 Authority Key Identifier:
keyid:05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cf:ac:63:98:26:fa:65:1a:4d:f6:3b:c1:56:00:61:ab:e2:
ad:dd:63:56:09:ad:1a:a3:fc:be:af:ee:43:f7:bf:a9:3d:10:
4f:eb:7d:87:e8:7b:80:c9:dc:9b:a4:28:7a:fc:79:68:af:d6:
c3:6e:6f:f9:12:cc:41:93:d0:50:71:fa:ef:47:a4:11:80:1d:
e7:cc:96:90:32:e7:0e:ca:92:2b:08:97:42:b8:92:95:44:bd:
2a:be:a8:16:b1:e5:c5:43:62:1e:89:4d:4a:db:ab:9f:1c:40:
25:dd:fb:c9:c8:0d:37:7f:d2:5b:f6:8d:91:5c:f5:71:3a:fb:
b3:2b:6e:c5:48:4f:4f:6d:6e:56:35:4b:3d:d2:3a:ee:8a:98:
59:06:d3:28:18:21:a4:17:bc:a5:b3:8e:03:dc:73:f7:12:14:
cf:fe:6d:02:64:34:c0:1f:a3:74:91:93:22:14:38:7f:80:f4:
f5:43:63:09:40:d8:ad:be:9d:17:ac:ef:73:61:fb:dc:c9:1b:
fe:d5:2d:fa:2a:9a:ca:db:bf:35:e7:18:2c:04:e8:57:c6:35:
a0:3e:d9:70:d0:df:15:43:73:c5:a5:f2:da:df:78:6d:15:45:
35:24:3e:5d:32:2d:08:4e:28:44:fd:59:f3:ad:5a:c5:ba:9a:
a3:d4:2b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:53 2025 by rpki-client