Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
File: bvSHSZTeehTktYT20rlrLZkbHpE.mft (raw, json)
Hash identifier: BUiCcu59Ai68q+JrRn5qJ5sgPCOAS6fSaTDSB//JjAw=
Subject key identifier: 78:45:D1:A4:9F:4D:BA:2F:D4:31:49:C0:01:58:3F:92:17:87:99:09
Authority key identifier: 6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91
Certificate issuer: /CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
Certificate serial: 019A71B8E427C2D20C4AE5A6527728343ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
Manifest number: 08A0
Signing time: Tue 11 Nov 2025 07:02:13 +0000
Manifest this update: Tue 11 Nov 2025 07:02:13 +0000
Manifest next update: Wed 12 Nov 2025 07:02:13 +0000
Files and hashes: 1: bvSHSZTeehTktYT20rlrLZkbHpE.crl (hash: Xpqcade8kGHrjDy6jbNBwzdNeae9AOXl4KvHijY2bnI=)
2: nAw-tu2iFsVUAoD3d-PCO-n0nlU.roa (hash: NhBATsK7uGGdrOKi4JXrK4LsPo0OG9umtxigUZlp7BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e4:27:c2:d2:0c:4a:e5:a6:52:77:28:34:3a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
Validity
Not Before: Nov 11 07:02:13 2025 GMT
Not After : Nov 12 07:02:13 2025 GMT
Subject: CN=7845d1a49f4dba2fd43149c001583f9217879909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:95:75:b5:68:99:d5:27:45:0f:70:39:10:
bb:f0:0e:28:7e:e1:98:d0:45:b5:d2:a5:6a:9a:66:
b3:34:58:8e:0b:bb:d8:11:80:8a:ac:31:89:41:c5:
41:97:a4:77:ad:f4:fc:27:43:fd:0e:bf:7e:01:0b:
0c:c2:11:6a:52:c5:4f:5f:ac:f0:52:e3:94:14:9b:
b1:58:66:55:d5:70:8a:07:49:7c:da:cd:c5:78:ad:
2a:e3:91:11:4d:3f:1c:ce:bc:2e:d2:1c:1f:65:5a:
20:fb:0c:4d:f7:2f:b0:28:ce:0a:e6:aa:a5:d3:5b:
e3:26:42:49:30:df:8f:03:13:21:cf:b8:02:84:35:
e4:e2:ea:25:c0:49:85:6a:50:46:21:0e:4d:4c:9a:
1d:35:59:ee:f6:a6:44:9b:e6:3f:4c:17:03:40:36:
e8:b9:0f:3a:2f:f5:46:c9:65:f2:8f:3d:8b:a4:68:
a5:63:93:79:86:de:84:a8:4d:46:a2:8d:ec:57:71:
48:d4:6e:5c:e3:88:19:c9:00:f2:0e:45:5c:59:05:
e5:b6:79:92:c3:61:e3:92:b3:86:0f:ad:46:8c:e8:
fa:d2:dc:97:d2:1a:8e:77:82:e1:46:64:df:68:a7:
36:57:02:e5:25:2a:39:66:4a:59:a7:4c:65:0b:41:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:45:D1:A4:9F:4D:BA:2F:D4:31:49:C0:01:58:3F:92:17:87:99:09
X509v3 Authority Key Identifier:
keyid:6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:70:80:2a:b5:b7:25:af:f0:4e:2f:c5:99:62:56:b6:11:fb:
01:95:79:ae:f6:de:2f:16:01:0f:7d:b2:68:8a:aa:a2:9e:88:
74:ff:82:29:ec:0b:4a:e9:e1:9b:66:a0:a9:84:06:71:53:1e:
55:a2:74:4c:03:76:d6:16:2b:87:6d:3a:92:20:25:b1:1e:9b:
8b:67:66:4d:32:3c:f4:eb:c9:af:ca:bf:d4:f5:e2:b6:07:21:
8f:83:ae:6d:9e:bb:76:5b:dc:bb:c5:ca:eb:fc:e9:80:ff:57:
32:e2:18:66:f8:01:06:ff:ea:29:18:0b:78:98:6c:99:86:c4:
05:14:4a:cc:b6:13:58:0a:eb:87:c7:43:f4:f7:eb:3a:1f:4e:
13:82:5e:b0:93:7c:e4:35:e8:08:88:16:d2:4c:b7:81:2f:f3:
ee:28:fe:5d:a0:f9:22:45:cd:e9:6d:81:b9:21:8b:50:f5:ea:
c0:ea:2d:e0:e4:6c:b5:98:83:3d:c4:e6:dd:4c:c6:69:29:7f:
7d:fc:8b:ef:ac:08:e1:d2:00:b5:7c:9f:55:3e:ec:61:48:e0:
e5:33:7b:c7:4d:d5:17:e2:17:71:3e:74:92:d7:0e:80:dc:c6:
a4:70:55:66:bf:d4:97:1f:9e:2d:b2:32:63:0f:8d:0a:6a:86:
43:cd:4b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:44 2025 by rpki-client