Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
File: BdCJpxSLJhoFnmZv66WfkqJowWw.mft (raw, json)
Hash identifier: czLWRN/tJUtk56o/ZWxgBNMqIK2nz11T6MWXegrN1W0=
Subject key identifier: D9:D9:1B:DF:96:2A:BB:23:20:25:E1:EC:3F:D9:0F:BC:67:DA:25:A3
Authority key identifier: 05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
Certificate issuer: /CN=05d089a7148b261a059e666feba59f92a268c16c
Certificate serial: 019A73016A17E9D11532E61410107FF48B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
Manifest number: 0B6E
Signing time: Tue 11 Nov 2025 13:01:03 +0000
Manifest this update: Tue 11 Nov 2025 13:01:03 +0000
Manifest next update: Wed 12 Nov 2025 13:01:03 +0000
Files and hashes: 1: BdCJpxSLJhoFnmZv66WfkqJowWw.crl (hash: ZiO+ZCw7g+1WbjSHWKYJyfjgEOFEKJEFDXlt6gCQpvw=)
2: Q0dd8vdSkfkyu7Ca5EdjCX19qvM.roa (hash: Ja8TY9ppItEtGQ58YrEF8baZTzPApBnwUBrs1rAUdS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:6a:17:e9:d1:15:32:e6:14:10:10:7f:f4:8b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d089a7148b261a059e666feba59f92a268c16c
Validity
Not Before: Nov 11 13:01:03 2025 GMT
Not After : Nov 12 13:01:03 2025 GMT
Subject: CN=d9d91bdf962abb232025e1ec3fd90fbc67da25a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:66:77:e8:71:39:10:5a:37:a2:de:bb:3f:
16:49:2e:90:27:13:e8:17:56:c5:6a:88:51:07:47:
04:7d:3c:b8:90:3c:3c:47:ef:0a:83:23:ee:4b:ef:
8a:16:81:cd:63:9d:f0:08:9d:a0:1c:87:34:30:ce:
76:08:b8:3b:2c:71:bd:fd:aa:bd:07:b5:c3:a7:79:
18:95:d3:ba:83:2b:d7:36:17:bf:78:71:0e:90:33:
ce:bf:64:0c:1a:d9:ba:12:59:5b:8d:4c:08:75:5e:
c0:da:3d:9d:59:c0:1f:c7:20:5d:32:ab:45:bb:ca:
5f:a6:30:4c:c5:26:6e:d2:ab:4a:5d:15:32:05:cd:
fb:16:1d:1d:ab:f6:de:b9:b3:b0:5c:55:3d:0c:cd:
52:11:e7:de:4d:04:52:ac:2d:4a:82:5f:54:33:a8:
84:31:ef:d5:32:59:3b:83:cb:f9:de:f8:1f:2e:05:
0a:a9:f8:52:23:f2:d1:38:67:59:d0:2a:57:d5:23:
96:a3:7e:96:f2:85:e9:94:64:cf:57:5a:b3:0c:d1:
8d:b5:d7:0d:f3:3b:5c:3d:e4:09:ae:ad:d7:97:a0:
b7:03:b1:65:64:82:2c:cf:f5:ce:cc:29:3b:ec:98:
6f:1f:7c:0a:34:d7:25:bf:8d:ce:12:00:88:45:10:
20:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D9:1B:DF:96:2A:BB:23:20:25:E1:EC:3F:D9:0F:BC:67:DA:25:A3
X509v3 Authority Key Identifier:
keyid:05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bf:bd:9c:28:02:62:81:bd:7c:ee:3b:2d:13:e7:f7:dc:6f:
22:18:79:8b:1f:45:87:f0:d7:a7:46:e0:32:0d:6a:f0:39:a6:
98:b9:fc:96:30:6c:ea:b7:77:71:eb:f7:5e:f2:ae:9c:11:d3:
5c:ef:b0:36:bf:3c:e4:e3:19:f3:b2:72:ef:10:60:4f:d9:0f:
bc:27:f3:73:ff:a0:bd:29:8c:f7:2c:02:7c:45:66:f8:5a:3a:
66:f4:e2:00:75:72:4b:08:25:68:89:74:42:b0:ce:a7:b5:cc:
ca:c0:bb:ee:a3:a9:b7:6e:b9:7e:1a:86:77:ef:44:ff:3f:2c:
93:32:42:59:cc:f8:35:5d:73:bb:43:ca:82:72:6a:80:93:ca:
00:9c:79:58:84:cb:51:2d:51:80:15:32:b2:e8:19:cb:4b:35:
6e:6a:af:97:86:85:c6:15:85:fd:a1:b3:0b:d8:91:11:8d:04:
d7:6c:da:16:69:ac:6c:5d:7e:9d:88:96:8b:8c:27:75:65:a6:
1c:eb:a8:8e:eb:02:cf:d0:11:6a:70:fa:47:67:95:1d:aa:20:
3e:ad:a2:dd:09:d2:d2:76:8e:69:df:75:98:56:06:ea:f4:aa:
11:d7:ae:8c:9f:da:f2:ac:88:81:b7:9b:74:b2:1a:6a:fa:5f:
c7:62:ee:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:31 2025 by rpki-client