Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
File: Bcij-qGLbXF6ovdiIYG62L5bVaM.mft (raw, json)
Hash identifier: 9kOtX/Q7VlsYS36ctweFDk5gaAcyQM7IdlZcLTlYSaA=
Subject key identifier: 72:E4:C8:FF:BD:CE:A5:3C:CA:FA:A4:40:EF:DD:CF:9F:4C:04:81:7C
Authority key identifier: 05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3
Certificate issuer: /CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
Certificate serial: 019A2109872951B093B2CD5F81FFC7EEAF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
Manifest number: 16F4
Signing time: Sun 26 Oct 2025 15:01:03 +0000
Manifest this update: Sun 26 Oct 2025 15:01:03 +0000
Manifest next update: Mon 27 Oct 2025 15:01:03 +0000
Files and hashes: 1: Bcij-qGLbXF6ovdiIYG62L5bVaM.crl (hash: XD59trQxxkRNaqsSChQv7KmWFTTSXPpKTJP3zc928hQ=)
2: tNEEVzPUvK-ygDPmYLA5K9Cm79o.roa (hash: /IY44KTu7ulQ8DUrvEAnJ6AB/WTV2xBTm/RnCC+27ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:87:29:51:b0:93:b2:cd:5f:81:ff:c7:ee:af:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
Validity
Not Before: Oct 26 15:01:03 2025 GMT
Not After : Oct 27 15:01:03 2025 GMT
Subject: CN=72e4c8ffbdcea53ccafaa440efddcf9f4c04817c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:60:75:a2:73:0a:75:56:84:f7:6e:08:83:59:
b2:49:95:bd:59:fe:9c:20:a8:7e:51:04:69:8b:5e:
73:b1:6e:ef:4c:64:fb:c3:96:f4:d0:5d:19:f4:71:
11:3f:be:64:f5:31:0f:de:09:84:7e:cc:2e:26:81:
c5:73:6a:d6:4c:7d:07:04:45:46:31:45:be:73:dc:
6c:0c:44:a7:2a:fe:32:e4:ec:b2:f4:fa:51:bc:6c:
df:48:c7:1b:3e:a4:c9:68:ab:f3:7d:6e:53:11:5f:
3c:e9:7e:76:3b:7f:0d:f4:fa:b4:45:57:59:7f:4f:
cd:fe:2f:cc:18:ee:25:84:48:b2:7f:4d:91:85:3d:
a3:a7:7c:5d:0a:7d:7c:2a:3d:ce:c4:31:31:b4:dd:
8a:a7:4f:ec:fa:3f:b8:e0:9a:13:b8:fb:4d:d6:76:
24:28:cb:6f:fe:26:b5:4c:da:8c:bc:8b:13:f7:0f:
ab:89:7c:30:13:db:c5:a8:cc:a6:eb:0e:10:00:61:
c1:28:09:c5:b9:ff:e6:0a:4a:cb:0e:65:a1:84:f9:
31:22:a9:d5:da:9b:bd:c4:03:7e:c7:55:7e:8d:f3:
d8:85:79:27:aa:20:9b:d6:bc:b4:bc:5f:32:7e:e8:
aa:0f:42:a3:25:8b:1e:dc:cc:2a:21:3a:27:42:88:
17:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E4:C8:FF:BD:CE:A5:3C:CA:FA:A4:40:EF:DD:CF:9F:4C:04:81:7C
X509v3 Authority Key Identifier:
keyid:05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:29:3f:78:fe:56:7c:a0:a5:2c:43:85:9e:6e:5f:03:9b:f5:
a3:45:e0:90:03:f3:77:12:1e:9a:fb:b0:87:ae:ed:8b:04:1e:
6c:12:81:0d:48:4f:6b:f5:12:04:84:89:7f:5f:d1:a7:15:56:
73:9f:7d:2c:6d:36:c0:9f:df:27:0f:6a:23:87:6f:b5:e7:48:
d2:1b:7f:1a:bd:ff:12:fb:b5:98:cd:97:28:19:b4:31:a8:02:
2a:07:ea:7f:01:89:0f:de:84:33:23:66:cc:77:bd:51:b8:ee:
f6:59:f9:db:ff:ab:39:d1:79:dc:c4:e5:62:58:97:94:8c:d8:
2b:08:1d:ad:5d:e0:a7:87:e2:2d:08:4a:70:aa:b3:44:48:d4:
82:22:db:c8:58:a6:a6:1c:41:0d:fa:e2:98:78:cd:49:59:b0:
94:04:99:15:40:d7:88:6f:1d:08:35:80:65:68:82:3e:af:8b:
34:88:46:0b:85:85:ae:12:86:c0:0c:0b:00:a1:ee:8d:3b:48:
50:23:ce:86:9b:67:60:9c:c5:94:1f:99:d6:af:cc:51:1d:b4:
40:db:e9:ba:bc:e0:26:d2:06:07:0e:27:08:f8:cf:68:15:0a:
85:2d:2b:53:5c:46:91:77:9e:e6:52:0c:f3:e6:5d:17:9e:76:
47:02:da:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:44:07 2025 by rpki-client