Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
File: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft (raw, json)
Hash identifier: WHS0/q17KhCzDmR02kL4uE/TTwMVQx4E8+c7dwpNDGA=
Subject key identifier: 1E:48:56:7E:91:FD:58:75:0B:E6:FD:4B:09:02:B0:22:CE:4D:EC:F4
Authority key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
Certificate issuer: /CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Certificate serial: 019A21ADAF8BE0EDC51E8D4E9D8628046AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 18:00:22 +0000
Manifest this update: Sun 26 Oct 2025 18:00:22 +0000
Manifest next update: Mon 27 Oct 2025 18:00:22 +0000
Files and hashes: 1: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl (hash: u4nh+AGHZLD0Quqg9WWv5pqbHuUcDZZg91nzoSLX49A=)
2: FNPjMOoGw_qr5syHiMbZO5lzjMQ.roa (hash: 5qw3tWosyd4KlYSn8mbGOq7ldklrf0oZDzLLsc6wFlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:af:8b:e0:ed:c5:1e:8d:4e:9d:86:28:04:6a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Validity
Not Before: Oct 26 18:00:22 2025 GMT
Not After : Oct 27 18:00:22 2025 GMT
Subject: CN=1e48567e91fd58750be6fd4b0902b022ce4decf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:de:5e:e0:93:16:8c:de:c3:3a:6a:47:b3:1a:
3b:5e:05:32:3e:39:46:86:d6:05:51:dc:4c:da:86:
f8:9c:34:c3:5b:55:35:bb:65:71:df:4d:80:11:aa:
b5:d0:34:58:09:d0:e4:87:55:5b:fc:6d:6f:a5:a6:
ae:0f:9c:81:f2:25:69:a5:a8:23:f7:8c:63:37:98:
55:81:80:b6:3b:6b:66:01:8f:d4:5e:9d:f6:ed:01:
c3:e2:10:4a:1b:b3:2a:c1:71:df:6f:49:a6:59:bf:
af:00:e0:8c:86:77:4e:ac:fc:f9:dc:a0:2f:e0:bd:
55:d4:94:3f:cd:2b:1a:f3:80:94:37:d8:c2:a4:64:
bb:16:e8:9b:84:25:2f:17:74:1e:c3:eb:57:1f:6b:
d8:6f:81:14:37:8b:62:fd:42:10:ad:23:e7:3d:db:
53:aa:35:bd:e3:04:b1:6e:16:72:70:9e:8a:74:cd:
e3:fe:ce:a3:ff:1a:26:f7:c9:ce:3f:a8:55:35:e5:
81:b6:2a:8e:36:39:1d:bb:37:0a:3b:f3:10:6b:4b:
93:99:ad:80:bd:f9:6e:68:a6:af:b8:31:df:11:20:
0f:be:6c:4d:e2:da:fc:04:15:62:e2:9a:67:95:9c:
4a:9f:63:5e:2c:0c:d9:98:71:30:95:d3:49:29:a8:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:48:56:7E:91:FD:58:75:0B:E6:FD:4B:09:02:B0:22:CE:4D:EC:F4
X509v3 Authority Key Identifier:
keyid:05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f5:d7:39:30:cd:51:8b:89:40:de:3c:6d:e3:7f:55:ea:9b:
e6:8f:61:d6:2e:b4:2d:16:6d:87:f2:0a:a6:06:f8:38:e7:3a:
47:53:ff:86:bc:e6:b1:63:2b:ba:1e:32:61:9d:70:cd:a9:50:
cf:b9:53:da:f8:61:ac:45:c7:81:f1:76:6f:43:8a:7a:bd:d1:
69:ea:a9:79:d4:fe:d6:17:4a:de:2e:ec:e0:af:45:ae:1c:63:
2d:85:ec:6e:d3:81:f6:2a:cd:73:4f:f4:6c:06:4b:06:44:74:
cc:ca:4f:69:8a:e4:48:b2:b0:29:45:ad:fa:1e:51:00:84:4c:
0b:c3:73:dc:45:89:25:75:1b:3f:e3:97:2f:4a:25:32:26:1a:
64:fd:d2:f4:5d:f9:5f:75:6a:d0:af:47:88:9d:3f:59:41:ff:
af:15:69:22:bb:a3:c2:ff:b1:8c:d0:f4:ae:62:5b:ba:d0:e5:
ca:5b:14:72:5b:6b:c0:65:c0:e0:58:db:d7:34:8e:bf:d3:1e:
b3:e6:99:04:81:6f:60:48:3f:20:64:f4:db:65:48:6f:7e:21:
4f:69:c7:4d:32:d7:d8:db:16:14:b6:78:43:f4:b8:95:79:f0:
a4:a8:55:82:d9:40:f9:b5:c8:42:bb:18:16:61:b3:cb:6a:86:
a9:fe:7a:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohra+L4O3FHo1OnYYoBGrXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZGYxY2EzYjY2NWYyNGNiZTEwMWNmYzJmMzgzNDRkYThi
MTc2OGQwHhcNMjUxMDI2MTgwMDIyWhcNMjUxMDI3MTgwMDIyWjAzMTEwLwYDVQQD
EygxZTQ4NTY3ZTkxZmQ1ODc1MGJlNmZkNGIwOTAyYjAyMmNlNGRlY2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt5e4JMWjN7DOmpHsxo7XgUyPjlG
htYFUdxM2ob4nDTDW1U1u2Vx302AEaq10DRYCdDkh1Vb/G1vpaauD5yB8iVppagj
94xjN5hVgYC2O2tmAY/UXp327QHD4hBKG7MqwXHfb0mmWb+vAOCMhndOrPz53KAv
4L1V1JQ/zSsa84CUN9jCpGS7FuibhCUvF3Qew+tXH2vYb4EUN4ti/UIQrSPnPdtT
qjW94wSxbhZycJ6KdM3j/s6j/xom98nOP6hVNeWBtiqONjkduzcKO/MQa0uTma2A
vfluaKavuDHfESAPvmxN4tr8BBVi4ppnlZxKn2NeLAzZmHEwldNJKajHbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5IVn6R/Vh1C+b9SwkCsCLOTez0MB8GA1UdIwQY
MBaAFAXfHKO2ZfJMvhAc/C84NE2osXaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjct
ZDAyYWFmYjgzMmM0LzEvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjctZDAyYWFmYjgzMmM0
LzEvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPXXOTDN
UYuJQN48beN/Veqb5o9h1i60LRZth/IKpgb4OOc6R1P/hrzmsWMruh4yYZ1wzalQ
z7lT2vhhrEXHgfF2b0OKer3RaeqpedT+1hdK3i7s4K9FrhxjLYXsbtOB9irNc0/0
bAZLBkR0zMpPaYrkSLKwKUWt+h5RAIRMC8Nz3EWJJXUbP+OXL0olMiYaZP3S9F35
X3Vq0K9HiJ0/WUH/rxVpIrujwv+xjND0rmJbutDlylsUcltrwGXA4Fjb1zSOv9Me
s+aZBIFvYEg/IGT022VIb34hT2nHTTLX2NsWFLZ4Q/S4lXnwpKhVgtlA+bXIQrsY
FmGzy2qGqf560w==
-----END CERTIFICATE-----
Generated at Sun Oct 26 22:54:18 2025 by rpki-client