Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
File: BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json)
Hash identifier: RV+EkkknjNPXLgTPt9n21u6tKFDNQxzzUhd7zF+D5u0=
Subject key identifier: 57:77:23:46:E6:53:45:9F:0E:DA:D8:35:52:8D:78:95:69:49:23:08
Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Certificate serial: 019A72258B0DBC306DC4B11F12F1BCBC271D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
Manifest number: 0440
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: quwfSG9PUGWnHyH8g7GW516uA3cpEO/MC3BPqUVdlbA=)
2: xRcmRRI7cJbjjDDpwXYPAzS-KSc.roa (hash: +JILVppUk45vww/N3lSTziP5G1U9pzpXHROPOpD0HAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8b:0d:bc:30:6d:c4:b1:1f:12:f1:bc:bc:27:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=57772346e653459f0edad835528d789569492308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a4:4d:61:39:48:72:b4:b4:4d:74:38:c6:03:
9f:89:de:7c:c9:ae:1f:21:f1:ef:69:c4:c1:16:ba:
73:84:73:3a:36:07:f1:9a:e8:0e:6d:55:d5:30:45:
2e:18:b0:1a:ee:05:21:89:8d:43:20:88:c9:f6:d5:
e4:12:ee:f1:a7:dc:a3:5c:4a:fd:f8:1d:e7:f7:ef:
d0:8b:cd:bf:6b:0e:f3:fc:60:3e:98:78:9a:7a:9a:
3c:b9:43:c2:ae:72:92:0b:9c:48:4c:1a:71:f3:3e:
cf:7c:0b:ce:b6:85:31:47:dd:4f:ef:27:ba:47:82:
75:35:30:de:04:80:f0:c1:cd:c5:a2:f4:7f:14:5e:
f8:6f:a8:dc:1f:0a:64:21:d7:20:54:7c:a1:e5:fd:
08:d5:79:52:c6:9a:68:0d:f7:3f:c7:c4:5c:59:34:
d7:0b:02:14:92:80:18:2d:36:0f:95:16:ae:3f:3f:
49:13:07:79:4b:8f:9a:4a:89:58:2c:b8:f3:65:53:
64:cc:be:46:d2:80:9c:ae:ff:6b:50:a5:67:99:2b:
97:ef:da:6a:73:50:3b:67:7a:2e:a3:fb:65:84:8a:
5e:6a:ff:11:3b:66:99:1b:75:ea:10:cf:ba:f6:5b:
70:f0:1a:50:d0:98:e3:48:c5:55:e8:4c:6e:9f:80:
e6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:77:23:46:E6:53:45:9F:0E:DA:D8:35:52:8D:78:95:69:49:23:08
X509v3 Authority Key Identifier:
keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ea:96:f4:00:9b:0d:57:cb:32:1d:7c:64:1d:2b:26:45:d8:
66:99:1d:33:6c:0d:5b:6b:d4:f2:ec:c9:c5:c1:5b:65:63:87:
12:35:49:57:b7:d1:cb:dc:cf:24:dc:5d:f9:bb:ab:05:ca:5a:
94:8e:98:b3:ed:50:b5:cf:b4:3a:8f:51:23:6b:63:48:92:6c:
3a:df:55:9e:52:06:45:6d:0f:1d:0e:eb:96:39:bd:11:da:f2:
2d:ef:47:a9:fa:74:08:c8:7e:df:6a:7b:6f:64:e2:d8:8b:3c:
87:e4:be:99:d7:5d:43:e7:20:4f:dc:34:3b:17:fd:0f:b1:db:
d7:5a:a3:26:92:73:01:dd:c7:5d:8c:bd:11:e8:4a:60:1b:be:
9f:66:26:fd:5f:aa:54:cb:19:41:16:45:07:d5:ef:bf:7f:2f:
ad:53:26:0c:58:a3:0b:26:e0:6d:2a:69:31:65:66:1a:d9:ef:
01:9b:7c:23:70:e8:4b:14:c5:2f:c8:01:f9:3d:6f:fb:be:b9:
46:7a:a8:94:cf:eb:86:6d:7d:d0:dd:f4:4f:3e:94:21:2e:12:
8c:6e:34:29:aa:e1:41:74:af:92:51:c2:51:fb:06:59:17:a0:
07:63:9c:0d:da:8d:8b:79:cf:58:ce:13:ed:ad:5a:3f:f8:28:
3b:25:16:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:40 2025 by rpki-client