Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
File: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft (raw, json)
Hash identifier: 6Bb2p79/3TCd/fG4Pv+6pw2v94gzBu8SAI9HVgBxGaw=
Subject key identifier: DA:D7:CC:60:10:3E:69:A4:5A:9F:9D:D8:EE:AE:31:C6:5C:EB:A5:DB
Authority key identifier: 05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
Certificate issuer: /CN=055d6e82349472ccafd0a069f578f647c30a9846
Certificate serial: 0199239EC3936CE218CE7AD94351446E558C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
Manifest number: 09A4
Signing time: Sun 07 Sep 2025 10:00:31 +0000
Manifest this update: Sun 07 Sep 2025 10:00:31 +0000
Manifest next update: Mon 08 Sep 2025 10:00:31 +0000
Files and hashes: 1: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl (hash: NVoRAITbZHqkA4fmxf1M7Ibqc9gnJMyyZea18affGJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:c3:93:6c:e2:18:ce:7a:d9:43:51:44:6e:55:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055d6e82349472ccafd0a069f578f647c30a9846
Validity
Not Before: Sep 7 10:00:31 2025 GMT
Not After : Sep 8 10:00:31 2025 GMT
Subject: CN=dad7cc60103e69a45a9f9dd8eeae31c65ceba5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:05:75:3c:2e:6b:94:e9:0c:a4:b5:0e:a6:f9:
1b:c5:78:30:67:3e:bc:db:78:68:23:ed:1b:ba:81:
e7:e1:87:ec:76:68:65:97:cf:fd:99:d2:24:a9:7d:
6b:fe:27:5e:b4:e4:28:65:fc:9f:2e:f7:d3:58:0a:
c6:69:fe:3a:46:1c:b0:a3:72:f9:40:76:07:d5:41:
e3:d6:ad:3b:74:5b:ca:7d:4e:58:59:51:0a:8f:43:
f8:96:30:04:09:0e:a3:14:22:59:53:30:97:ff:4b:
87:75:2b:d1:bd:78:a0:4a:8f:2c:01:38:4f:05:0f:
86:87:9e:1c:03:d2:4c:16:12:32:36:5a:e1:cc:25:
f0:0d:60:98:da:e3:41:ab:4d:56:18:e6:89:1d:3a:
96:67:c7:db:40:e5:4c:8b:2b:4f:b2:cd:ee:6f:0b:
79:56:f1:7a:a0:f0:c5:df:3e:4d:ff:82:ad:45:e8:
7a:2e:12:2f:e4:5c:60:7e:6f:f4:4c:4b:95:bd:d2:
4e:6d:4d:17:5d:ac:ad:b7:77:a7:e2:cf:15:07:c2:
ba:34:52:46:bc:91:82:ed:fb:82:0d:c3:d7:94:1b:
08:cb:e0:27:20:6b:1f:e8:0e:eb:b8:a1:93:0c:41:
41:94:0c:d1:22:19:7b:58:3c:e3:f3:14:63:de:0f:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D7:CC:60:10:3E:69:A4:5A:9F:9D:D8:EE:AE:31:C6:5C:EB:A5:DB
X509v3 Authority Key Identifier:
keyid:05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:32:4f:14:8b:b9:b8:9e:b8:a5:73:0f:43:1d:0a:78:b7:16:
06:bc:56:16:5c:87:9f:32:14:12:58:50:42:4e:c8:64:cc:f3:
7f:5d:53:57:01:09:ea:00:84:da:a0:72:ff:3b:c8:07:23:cc:
80:9c:3a:df:e4:01:e6:f3:61:ee:77:93:8d:16:df:c7:f0:25:
fc:85:a1:8e:26:f6:99:65:b0:6d:27:4f:7a:3d:8a:83:16:3d:
6c:17:4b:10:33:1c:ed:05:2a:08:ca:34:90:a3:aa:b2:77:01:
15:a0:e3:97:4f:63:7a:6d:61:88:26:2a:25:63:4b:c2:69:89:
5a:d5:31:6f:49:30:18:20:d2:47:4c:ad:13:1e:cf:35:b9:1c:
b0:b5:fb:19:c1:25:a6:0b:a8:dc:83:0f:1d:bc:da:55:b0:9d:
00:1f:d6:29:15:8c:47:79:53:4a:c5:ea:59:c3:2a:a5:42:13:
bc:c1:e6:33:67:ea:5d:e6:e0:c0:0e:24:52:9b:36:8f:71:39:
fe:1f:67:ab:35:5d:1e:a2:00:45:e7:bc:16:0b:02:d1:0f:f3:
99:8d:65:c6:42:38:7c:10:39:de:03:8f:3e:74:2a:a2:66:ce:
41:6a:86:28:79:15:b1:cc:8f:fa:ff:c6:84:31:7d:17:61:c3:
ee:4c:09:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:42:06 2025 by rpki-client