Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
File: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft (raw, json)
Hash identifier: 3oWswPfXx8iJ7w6mf3VFuuUOlXucExMNU5kWp7Fjle0=
Subject key identifier: DC:76:4D:C0:5B:6E:1C:1F:CA:C0:A5:71:EE:9E:0D:69:A2:22:D6:12
Authority key identifier: 05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
Certificate issuer: /CN=055d6e82349472ccafd0a069f578f647c30a9846
Certificate serial: 019A73A657DC7E5B5013744E883F01F0FE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
Manifest number: 0A52
Signing time: Tue 11 Nov 2025 16:01:12 +0000
Manifest this update: Tue 11 Nov 2025 16:01:12 +0000
Manifest next update: Wed 12 Nov 2025 16:01:12 +0000
Files and hashes: 1: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl (hash: wE2idEAfotymm9oV4Q+ThII/XEOAhCciEaSCVpMQeI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:57:dc:7e:5b:50:13:74:4e:88:3f:01:f0:fe:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055d6e82349472ccafd0a069f578f647c30a9846
Validity
Not Before: Nov 11 16:01:12 2025 GMT
Not After : Nov 12 16:01:12 2025 GMT
Subject: CN=dc764dc05b6e1c1fcac0a571ee9e0d69a222d612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:0a:3b:05:5c:f3:5f:b9:14:3d:86:58:34:
fe:ca:d0:3b:c2:4f:ee:2c:d1:d6:39:30:b3:f6:e8:
59:97:80:fe:a5:08:06:19:23:cd:23:ed:8b:6a:9c:
95:08:0e:53:a0:6b:6b:45:ad:8e:0f:fd:d9:23:10:
e0:cb:dd:ec:d4:5d:bb:e6:22:1c:7f:1e:b7:cb:0f:
f4:f2:24:77:f5:e0:3e:74:6a:56:aa:bd:aa:c2:53:
4e:2a:ae:9e:da:8f:6f:d7:8a:c0:ea:4b:c0:12:47:
6c:98:63:ae:49:22:e7:1b:36:8e:7d:1d:40:f0:e7:
94:6b:08:9a:51:5c:b9:d2:17:9e:6d:de:ba:21:6b:
fb:dc:50:f0:b2:d1:df:1e:f8:e8:3c:f4:bf:5e:48:
3d:fc:c3:a6:c1:cf:d8:e0:98:1b:74:72:f6:5a:cd:
39:14:d2:cf:f3:6f:22:ef:e6:0f:20:28:1d:3e:fe:
1a:d6:df:9e:9f:b2:3e:61:d6:39:6e:9f:7f:6e:79:
c8:b8:e7:bd:f2:e7:76:21:d0:18:b0:6f:02:96:e0:
22:71:f7:41:be:1a:f3:c9:fe:e2:f5:60:d6:44:94:
2a:c9:ea:6a:4d:a6:9a:b3:fd:35:ea:f8:76:6d:92:
8c:4f:5f:ad:7a:93:81:c0:5e:7b:1c:f9:f2:60:94:
d1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:76:4D:C0:5B:6E:1C:1F:CA:C0:A5:71:EE:9E:0D:69:A2:22:D6:12
X509v3 Authority Key Identifier:
keyid:05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:bc:8c:37:ca:98:22:b2:20:25:8e:8c:c0:7b:51:af:b3:17:
6b:10:23:b8:ca:7d:4d:14:de:cb:43:d4:60:d3:38:b9:a1:e9:
6a:77:1b:65:9c:37:eb:38:f8:2b:d6:f1:99:01:58:4c:58:93:
b0:cd:76:1d:e2:8e:b0:59:a9:de:c2:4f:30:21:79:ba:9e:38:
fc:1b:36:7d:bc:9d:6c:af:6a:ba:6a:80:c8:64:ff:d1:96:51:
ea:ad:80:ea:97:3f:e0:15:be:58:f7:f8:11:46:c1:52:24:98:
0a:a7:2f:89:3a:dc:cb:ea:f7:7d:e8:ff:55:72:97:1b:3d:65:
90:fe:32:15:cb:55:66:0c:c2:2d:44:66:f1:ff:df:ca:c8:72:
ff:27:9f:ab:98:a0:fa:48:7d:bc:3b:4b:e1:18:1c:6c:25:63:
2b:a1:98:3a:9b:8e:07:df:86:5b:94:6e:72:72:33:9b:ae:ed:
82:85:96:79:c4:b8:fb:fe:4c:94:dc:af:01:59:7f:3b:53:ac:
27:77:06:a7:b9:cf:93:01:7e:ec:98:59:cb:e1:de:f8:cc:21:
7c:31:d6:5f:fa:69:24:1c:f8:25:a7:fb:f9:1a:88:01:f1:1c:
25:5d:71:af:e1:8a:43:8a:1a:11:2e:83:94:4e:8e:bf:fc:41:
71:c5:9c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:11:31 2025 by rpki-client