Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
File: bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft (raw, json)
Hash identifier: PUy9zLZjjVp88m01ZkjujH+7bQrTGHT4z/M3OoywTuo=
Subject key identifier: 35:EE:8C:81:93:53:4B:EC:30:56:5D:AE:50:BD:80:2B:5D:10:E1:66
Authority key identifier: 6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
Certificate issuer: /CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Certificate serial: 019A277917E6D1E1A2C294B3C00C2E84B21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
Manifest number: 0571
Signing time: Mon 27 Oct 2025 21:00:38 +0000
Manifest this update: Mon 27 Oct 2025 21:00:38 +0000
Manifest next update: Tue 28 Oct 2025 21:00:38 +0000
Files and hashes: 1: YlM9XjcdMHvYOxO8c5CJ3dERa9U.roa (hash: CmWcScHRFVyy1qyRSWQw5TEdbfc8FAZaUDEtIb/hOWQ=)
2: bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl (hash: TWmrME+5PFWJspE1l9rYtuMir1RX3defK8XUYnCx0po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:79:17:e6:d1:e1:a2:c2:94:b3:c0:0c:2e:84:b2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Validity
Not Before: Oct 27 21:00:38 2025 GMT
Not After : Oct 28 21:00:38 2025 GMT
Subject: CN=35ee8c8193534bec30565dae50bd802b5d10e166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:55:ba:b7:3b:1f:48:34:04:f1:30:d4:cb:
aa:33:17:17:82:b5:6e:c3:23:fa:eb:94:2a:84:8a:
a2:1a:0a:49:42:35:1c:5d:b8:eb:f1:0b:42:ea:5c:
97:aa:25:83:d6:5f:a6:1a:e3:91:9e:ff:63:7a:1b:
bb:d9:2e:78:7c:c3:c3:ae:0a:9f:4f:d9:bc:b4:07:
fb:74:59:7e:0c:ab:86:ac:f5:a7:16:9a:f2:67:6f:
a7:c1:e8:db:23:b3:60:75:ec:aa:62:d0:da:ea:fc:
49:b7:75:c7:f3:64:29:60:b0:5e:7c:59:16:44:a7:
7e:8a:75:99:50:30:d3:2b:8c:3d:80:fb:b1:36:34:
f5:24:88:59:8e:a0:05:59:98:95:c1:7f:81:98:3f:
7e:2f:5c:5e:b4:c4:5c:bd:2b:90:6b:14:ea:66:88:
01:3b:42:32:c0:83:f5:b2:1d:bf:82:e1:43:37:6e:
63:f5:36:6f:0f:1f:88:45:39:b3:bb:be:74:ef:5e:
de:f7:de:a5:b1:45:87:35:0b:a5:1e:78:33:f0:d8:
c0:cd:7f:07:0f:75:fd:dd:01:25:59:58:e2:af:39:
5e:07:25:be:31:ca:8b:7e:17:88:f0:bb:a9:03:ab:
79:c2:d6:fc:42:3a:9e:f8:6d:8a:04:0d:ad:bb:12:
49:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EE:8C:81:93:53:4B:EC:30:56:5D:AE:50:BD:80:2B:5D:10:E1:66
X509v3 Authority Key Identifier:
keyid:6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:90:d7:73:06:d9:ce:52:7d:a9:04:16:9d:73:19:ce:cf:7f:
49:e7:eb:0b:99:6b:08:bc:e2:ca:0e:49:4c:ca:34:60:56:ff:
b5:0d:21:c2:c3:59:26:13:04:51:ae:f4:5e:2b:6d:79:d9:7f:
f5:d4:b8:2b:43:be:57:32:ca:6f:8c:73:6d:c6:c7:e4:9a:c8:
f9:59:fe:84:18:22:c9:97:f1:32:b9:d3:95:5a:a0:93:81:8d:
d4:66:d0:58:6f:f9:46:96:c1:12:e7:c1:73:99:0c:5a:b2:8d:
57:28:00:27:f8:b1:02:8e:30:33:59:51:57:a2:3c:40:3e:2e:
c7:35:e4:35:ef:00:cb:c3:54:0f:cd:a2:20:53:3e:ba:de:40:
27:08:be:06:c0:00:af:b4:88:ef:36:c9:18:43:74:f7:68:32:
5e:28:35:e3:97:8e:9d:4d:6a:12:76:4f:8f:4e:ef:fd:53:c4:
8f:b5:63:3d:c6:3b:a4:ce:8f:85:68:22:7c:f1:cb:71:35:c1:
06:00:85:28:e1:c7:bf:a2:58:d7:bf:22:de:3e:a5:63:ae:48:
1a:c0:ea:ef:50:08:45:39:7a:12:e5:cf:be:c0:61:71:fe:cb:
c7:aa:1d:dc:fa:22:a5:51:a5:6a:aa:a2:72:2a:00:19:b4:c1:
12:5d:22:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoneRfm0eGiwpSzwAwuhLIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGQ0MmZmZGI3ZTgyNzcwMjNmMTAxOWI1NTRmZWIxOWY1
YzNmMjMwHhcNMjUxMDI3MjEwMDM4WhcNMjUxMDI4MjEwMDM4WjAzMTEwLwYDVQQD
EygzNWVlOGM4MTkzNTM0YmVjMzA1NjVkYWU1MGJkODAyYjVkMTBlMTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9lVurc7H0g0BPEw1MuqMxcXgrVu
wyP665QqhIqiGgpJQjUcXbjr8QtC6lyXqiWD1l+mGuORnv9jehu72S54fMPDrgqf
T9m8tAf7dFl+DKuGrPWnFpryZ2+nwejbI7NgdeyqYtDa6vxJt3XH82QpYLBefFkW
RKd+inWZUDDTK4w9gPuxNjT1JIhZjqAFWZiVwX+BmD9+L1xetMRcvSuQaxTqZogB
O0IywIP1sh2/guFDN25j9TZvDx+IRTmzu750717e996lsUWHNQulHngz8NjAzX8H
D3X93QElWVjirzleByW+McqLfheI8LupA6t5wtb8Qjqe+G2KBA2tuxJJ7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXujIGTU0vsMFZdrlC9gCtdEOFmMB8GA1UdIwQY
MBaAFG3dQv/bfoJ3Aj8QGbVU/rGfXD8jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmQxQ185dC1nbmNDUHhBWnRWVC1zWjljUHlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mMWMzNzUtNDFkYS00ZWE2LWFjZDEt
MDliYzkyZDRlZDk2LzEvYmQxQ185dC1nbmNDUHhBWnRWVC1zWjljUHlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9mMWMzNzUtNDFkYS00ZWE2LWFjZDEtMDliYzkyZDRlZDk2
LzEvYmQxQ185dC1nbmNDUHhBWnRWVC1zWjljUHlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5DXcwbZ
zlJ9qQQWnXMZzs9/SefrC5lrCLziyg5JTMo0YFb/tQ0hwsNZJhMEUa70Xittedl/
9dS4K0O+VzLKb4xzbcbH5JrI+Vn+hBgiyZfxMrnTlVqgk4GN1GbQWG/5RpbBEufB
c5kMWrKNVygAJ/ixAo4wM1lRV6I8QD4uxzXkNe8Ay8NUD82iIFM+ut5AJwi+BsAA
r7SI7zbJGEN092gyXig145eOnU1qEnZPj07v/VPEj7VjPcY7pM6PhWgifPHLcTXB
BgCFKOHHv6JY178i3j6lY65IGsDq71AIRTl6EuXPvsBhcf7Lx6od3PoipVGlaqqi
cioAGbTBEl0i4A==
-----END CERTIFICATE-----
Generated at Tue Oct 28 07:30:38 2025 by rpki-client