Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier: eKhgmYQJGCyAeyjg0cpcKLepLAtlXYOhv6f98qp12AQ=
Subject key identifier: 9D:1D:0D:A5:04:4D:2B:21:FF:F0:62:D4:1C:68:3A:E9:5F:A9:29:12
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 019A8BAEB91E72C3F16BAAADA122F30B343B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number: 172D
Signing time: Sun 16 Nov 2025 08:01:14 +0000
Manifest this update: Sun 16 Nov 2025 08:01:14 +0000
Manifest next update: Mon 17 Nov 2025 08:01:14 +0000
Files and hashes: 1: 0pJ-rwxVG5S_Uu-XF3E61P1dlA8.roa (hash: dUKNac33kPa6HT3Uru5uUtqJz9KxFM++FuLr8tWIwQw=)
2: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: YJEb5wU1E/ghfN518ECm3uIdOl6ztm1HHOAyM+LZKss=)
3: C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa (hash: py0bRoLaWPaWD7mBA8fr/sS/KCotH7gRuFvSUFDN9Vk=)
4: H0pXo5dsrJce4F8oF2aIhMCPMVs.roa (hash: ZGDB62uG+S6SJD7pxCgAYxf3KDMdMuMZc4Ygah4Ns68=)
5: NUPQRS0ooRsar2f147MR7z_4vbA.roa (hash: CmMZuOujUXhdqhz27/qbC9mkinQYp7izfWsg278vT1s=)
6: SY-0R9mhRAOxVSEqgVexZv7lI7M.roa (hash: 6QqgZClw2wSt67aU88jN6fAOVu+vkIOWukLNHCc1CkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Nov 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:8b:ae:b9:1e:72:c3:f1:6b:aa:ad:a1:22:f3:0b:34:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Nov 16 08:01:14 2025 GMT
Not After : Nov 17 08:01:14 2025 GMT
Subject: CN=9d1d0da5044d2b21fff062d41c683ae95fa92912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:b1:f5:e5:c8:44:7c:5b:e7:2f:99:ca:f4:
25:57:77:22:4f:93:6c:d8:1d:29:53:b9:d7:7d:5e:
ce:03:6a:44:47:37:bd:8e:12:0b:80:9f:96:0e:0a:
72:15:3c:a2:85:29:c5:dc:6a:79:fe:56:f3:b7:37:
15:8b:45:52:60:61:5b:36:55:1d:56:79:48:51:36:
7a:2e:cf:ed:66:4d:06:0b:16:48:e4:44:c8:09:60:
e0:69:bd:2f:a1:a9:b1:27:86:aa:37:f0:f2:a5:6c:
fa:7b:23:f0:03:16:f1:c7:71:bc:5f:f6:9e:b7:94:
b4:8f:9f:82:b6:ef:16:2a:06:76:8f:fe:1e:ad:62:
a1:84:3e:ec:d0:d6:6d:d1:85:b2:3e:3e:bb:1c:e9:
4b:f7:0e:20:d5:1a:57:98:0e:d8:08:f8:2d:62:49:
19:49:a3:ac:4c:8d:f8:41:4f:e7:25:2a:10:3c:f4:
bd:32:de:8e:77:4f:69:26:c0:08:22:b9:08:d5:17:
01:31:88:73:a1:38:50:62:da:e0:a7:1a:dd:6c:55:
fc:ba:42:51:30:8e:52:4b:fc:50:18:6b:02:a1:90:
00:a9:a8:58:61:85:4e:ae:f3:82:e0:54:f0:35:f3:
ed:f6:96:c9:57:ff:c1:14:b1:fd:a1:84:12:72:ce:
21:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1D:0D:A5:04:4D:2B:21:FF:F0:62:D4:1C:68:3A:E9:5F:A9:29:12
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:92:37:c0:98:ba:63:3e:11:a5:48:f0:23:b2:aa:7c:3b:a5:
c8:d7:9d:3a:ed:dd:c5:24:98:8c:d6:d0:e1:7a:e9:e2:90:ac:
30:83:57:9f:f9:51:98:c0:60:c5:10:5a:06:e1:18:38:0c:ba:
b2:94:49:88:f5:c4:b1:f6:22:c6:9b:1e:ae:91:9a:77:d9:a9:
48:c3:7b:35:7d:43:60:b6:65:ce:de:94:28:ce:f0:29:0b:62:
d2:8f:7d:2e:b0:92:be:c8:a9:b2:ed:64:bb:83:0c:12:ed:f0:
5e:5e:b8:12:ab:fa:7d:33:78:6f:bd:3d:f5:d5:36:89:65:c4:
c8:32:c1:1a:0f:2a:a6:c3:06:11:8e:e9:4d:b0:bb:c3:66:b2:
6e:6f:e0:7b:bd:ab:33:c1:41:bb:66:55:02:95:b2:95:de:30:
a3:50:9c:de:1d:43:a7:52:f8:5a:0f:d0:83:90:26:03:c5:5d:
3c:30:b0:4d:6c:7f:19:69:5d:d9:b3:8d:78:d0:e9:9e:a2:55:
89:97:d2:bb:03:51:5a:db:42:d3:55:26:b2:9d:d7:8b:c0:7b:
a9:71:b2:d5:9b:a9:4d:f1:77:ec:88:3f:b3:b9:d4:9c:2c:3f:
52:2d:50:c1:0c:8d:6a:2c:21:0d:e9:a5:55:09:c3:3f:2e:bd:
6b:d6:02:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 11:04:09 2025 by rpki-client