Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
File: BCTBFlgYpDL3l8jd9LUwex5a73Q.mft (raw, json)
Hash identifier: du1AJP7ifrjfpoDEj3Eqo+jR0LAF6hPf7l4im4AhyKA=
Subject key identifier: 65:1E:4F:6D:DB:62:97:D0:61:7A:F0:FF:A5:3F:65:A7:B0:B4:8A:89
Authority key identifier: 04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
Certificate issuer: /CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Certificate serial: 019A71B7FA0DA2F10011ACE8A7A6D43C54B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:13 +0000
Manifest this update: Tue 11 Nov 2025 07:01:13 +0000
Manifest next update: Wed 12 Nov 2025 07:01:13 +0000
Files and hashes: 1: BCTBFlgYpDL3l8jd9LUwex5a73Q.crl (hash: dhacM6yXyrdElLs+fXnL5s4BOfHFRI62Y2C7LANYjaA=)
2: etJJULXuEpA4QGWaRQ6bhvJFlYY.roa (hash: bLfeWna6CHVgTNdnQXDkU5zoQ0SXs8EuETZb9amfVlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:fa:0d:a2:f1:00:11:ac:e8:a7:a6:d4:3c:54:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Validity
Not Before: Nov 11 07:01:13 2025 GMT
Not After : Nov 12 07:01:13 2025 GMT
Subject: CN=651e4f6ddb6297d0617af0ffa53f65a7b0b48a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:7c:f0:88:97:a9:51:4d:31:cd:e0:68:ab:
44:ab:d0:cb:03:90:a4:af:73:90:e9:7b:84:d5:dc:
15:22:29:ac:52:15:82:19:c5:7d:62:25:ed:5c:5b:
20:58:d7:4c:42:b8:73:24:fa:ef:bb:4e:e9:07:8b:
f7:54:f8:92:4b:e9:d7:ac:0d:60:67:ed:b8:42:06:
29:8f:d5:b7:ff:53:db:0d:25:b2:86:03:b6:c8:d0:
ba:0b:97:08:5b:69:56:09:8a:ae:aa:c3:13:df:c6:
a5:4b:0b:93:f7:aa:30:b1:9c:1d:c5:a0:6f:ab:55:
87:4a:82:6f:f8:06:a8:01:88:32:ff:06:39:5b:48:
3b:9c:22:56:b2:9c:96:b3:ef:17:b5:b3:8d:b2:cb:
f9:d5:4b:d8:4d:d3:a8:2c:31:e1:54:91:a9:62:21:
a0:0b:6b:88:9a:99:9a:d7:97:63:24:a9:52:cf:ba:
0f:1d:c7:45:3f:cd:11:59:9e:1f:ee:93:c2:4b:2f:
43:93:23:07:fa:44:5d:26:c9:be:4c:c4:12:b5:4a:
f9:78:5b:0a:fa:ed:c7:06:db:c0:dd:ae:1a:58:1a:
7f:76:95:1f:23:af:2d:08:6b:15:60:55:49:20:e9:
21:ee:cc:1c:b7:ad:1a:8f:c1:33:5b:7b:af:ba:25:
08:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1E:4F:6D:DB:62:97:D0:61:7A:F0:FF:A5:3F:65:A7:B0:B4:8A:89
X509v3 Authority Key Identifier:
keyid:04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:ac:3b:95:8a:a4:81:e6:8a:a5:e9:8a:20:f6:26:5f:e0:c7:
72:15:64:dc:1a:a8:5b:96:13:e4:2b:b9:11:54:84:3f:6b:90:
9a:c5:39:c7:71:5b:df:aa:50:57:82:3a:72:90:86:49:d3:88:
40:8a:ad:91:08:63:34:5b:01:22:45:35:cc:b6:f2:48:ea:ad:
0e:49:a2:24:07:bf:43:7c:4b:00:98:0c:a9:a2:96:c4:07:a9:
bd:fe:e4:4f:22:5c:1d:a7:b9:a5:51:ea:9b:b7:46:b8:87:ce:
f5:93:4e:a0:08:2e:23:f3:1e:c6:b0:a0:cf:ec:73:45:dd:c3:
1d:ca:5b:7d:4e:ad:b0:87:34:b5:8e:ca:72:84:f7:39:f4:09:
0a:cd:8b:57:ca:e6:f0:91:c8:c7:db:70:4f:73:31:7e:c7:9a:
1c:3d:60:4a:fa:9a:e4:1c:88:ed:55:96:01:95:f1:c2:44:bd:
2e:76:da:49:ee:6b:12:5f:ab:28:e7:84:4e:cc:d9:1d:65:63:
45:31:16:fc:de:83:12:0d:7b:0b:32:6a:26:6b:40:1a:39:4e:
2d:3d:77:99:df:99:40:6a:ba:7d:d3:a8:30:c3:06:b9:a5:89:
88:b9:44:7a:ef:c2:72:c6:93:89:bd:c2:d3:1b:66:96:5f:69:
7c:29:11:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt/oNovEAEazop6bUPFS1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MjRjMTE2NTgxOGE0MzJmNzk3YzhkZGY0YjUzMDdiMWU1
YWVmNzQwHhcNMjUxMTExMDcwMTEzWhcNMjUxMTEyMDcwMTEzWjAzMTEwLwYDVQQD
Eyg2NTFlNGY2ZGRiNjI5N2QwNjE3YWYwZmZhNTNmNjVhN2IwYjQ4YTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc988IiXqVFNMc3gaKtEq9DLA5Ck
r3OQ6XuE1dwVIimsUhWCGcV9YiXtXFsgWNdMQrhzJPrvu07pB4v3VPiSS+nXrA1g
Z+24QgYpj9W3/1PbDSWyhgO2yNC6C5cIW2lWCYquqsMT38alSwuT96owsZwdxaBv
q1WHSoJv+AaoAYgy/wY5W0g7nCJWspyWs+8XtbONssv51UvYTdOoLDHhVJGpYiGg
C2uImpma15djJKlSz7oPHcdFP80RWZ4f7pPCSy9DkyMH+kRdJsm+TMQStUr5eFsK
+u3HBtvA3a4aWBp/dpUfI68tCGsVYFVJIOkh7swct60aj8EzW3uvuiUISQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUeT23bYpfQYXrw/6U/ZaewtIqJMB8GA1UdIwQY
MBaAFAQkwRZYGKQy95fI3fS1MHseWu90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkNUQkZsZ1lwREwzbDhqZDlMVXdleDVhNzNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jNzVhMzktYWZjYS00ZmJkLWFiOTkt
YzMzOWNjYWYzYTFlLzEvQkNUQkZsZ1lwREwzbDhqZDlMVXdleDVhNzNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9jNzVhMzktYWZjYS00ZmJkLWFiOTktYzMzOWNjYWYzYTFl
LzEvQkNUQkZsZ1lwREwzbDhqZDlMVXdleDVhNzNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7aw7lYqk
geaKpemKIPYmX+DHchVk3BqoW5YT5Cu5EVSEP2uQmsU5x3Fb36pQV4I6cpCGSdOI
QIqtkQhjNFsBIkU1zLbySOqtDkmiJAe/Q3xLAJgMqaKWxAepvf7kTyJcHae5pVHq
m7dGuIfO9ZNOoAguI/MexrCgz+xzRd3DHcpbfU6tsIc0tY7KcoT3OfQJCs2LV8rm
8JHIx9twT3MxfseaHD1gSvqa5ByI7VWWAZXxwkS9LnbaSe5rEl+rKOeETszZHWVj
RTEW/N6DEg17CzJqJmtAGjlOLT13md+ZQGq6fdOoMMMGuaWJiLlEeu/CcsaTib3C
0xtmll9pfCkR5A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:39 2025 by rpki-client