Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
File: BVYYphlfHsrLCFztOwoaF8YqLPo.mft (raw, json)
Hash identifier: x75PrU2ClZMaXV/unkEngBR/skXEL2UhKcnlJXjKObk=
Subject key identifier: FF:20:91:45:04:98:1C:42:8B:B9:86:29:B9:E2:B3:61:93:85:99:06
Authority key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
Certificate issuer: /CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Certificate serial: 019A71B81E544189C9430D8C97E631D58E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
Manifest number: 12B0
Signing time: Tue 11 Nov 2025 07:01:22 +0000
Manifest this update: Tue 11 Nov 2025 07:01:22 +0000
Manifest next update: Wed 12 Nov 2025 07:01:22 +0000
Files and hashes: 1: BVYYphlfHsrLCFztOwoaF8YqLPo.crl (hash: uXUG2kZzDfrRWTQp36iV1te1uOJ87agAltzuqU+5NNc=)
2: e_kofoKg7y1J8uLrVIeuvY2O9Mk.roa (hash: F9D5aBOFLIrm7XWZ3/0StMK2qKNaesetbFTA4limnyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1e:54:41:89:c9:43:0d:8c:97:e6:31:d5:8e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Validity
Not Before: Nov 11 07:01:22 2025 GMT
Not After : Nov 12 07:01:22 2025 GMT
Subject: CN=ff20914504981c428bb98629b9e2b36193859906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:a7:9b:19:ff:f9:39:e7:84:72:10:e1:c4:
c7:7d:bb:07:87:93:8f:26:16:b8:10:03:98:16:e9:
b3:1b:5c:90:fc:50:74:07:d4:7f:9e:a2:ad:cb:06:
27:7d:66:d5:36:6d:5d:b8:99:6f:a0:6d:2a:66:20:
70:40:44:99:e4:87:51:3e:91:f8:46:1b:09:4a:ab:
95:a7:2c:83:b9:a2:cd:d6:5a:c4:0f:a6:d8:a0:f1:
69:5b:cf:2d:b7:9b:94:d2:f5:b1:91:f2:f7:10:a0:
aa:39:29:91:86:df:82:29:7b:96:7c:5b:79:a5:1f:
92:08:b3:ee:19:21:09:b8:3a:1d:99:40:28:fc:52:
e1:1c:64:e5:bb:58:41:b1:1c:5f:c2:e4:75:43:99:
72:e5:bc:62:58:a7:3c:fd:45:a9:00:d8:10:91:d2:
72:f6:ea:76:67:6e:eb:63:76:5e:54:bf:0b:1a:b3:
b6:43:07:d4:45:88:6c:79:05:21:14:67:65:38:94:
ef:8f:da:17:2e:62:df:a7:17:34:96:67:7a:93:30:
a4:be:a6:10:20:f7:36:c6:ea:3d:9a:13:dc:7c:29:
9f:dc:10:06:f0:a7:ab:01:77:38:11:1e:d1:f8:41:
8e:79:f5:44:53:b5:ec:92:06:e9:ed:dc:fd:09:c0:
8f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:20:91:45:04:98:1C:42:8B:B9:86:29:B9:E2:B3:61:93:85:99:06
X509v3 Authority Key Identifier:
keyid:05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9c:fd:e4:08:07:27:a4:7a:2d:6f:90:84:e3:93:6b:31:2d:
e5:8d:d6:2b:87:49:c7:60:e3:7d:16:a2:61:11:fe:89:da:19:
1f:7b:96:34:52:05:6e:ef:c9:fb:e9:2d:61:01:c3:49:d4:a7:
c9:a6:a6:3c:e1:55:1f:7e:bb:c5:1c:ba:4a:27:06:86:c8:1b:
57:5f:aa:77:ee:8b:42:97:d5:b7:39:c3:9d:ef:68:9c:b2:6a:
a2:b9:fe:b8:c4:46:68:61:7e:d9:33:40:38:9c:a8:a2:29:a2:
48:27:17:42:73:e1:7d:28:6f:42:1b:1c:a5:b6:2d:0a:dd:4a:
ea:48:ca:e2:02:68:55:3a:b0:33:ce:08:ed:45:f3:c9:02:46:
8c:ef:67:85:5b:b4:2f:db:da:4e:00:09:1b:03:8f:cb:b1:9f:
9e:aa:59:7b:e3:f4:aa:17:50:14:53:1e:0e:f4:fe:9f:c1:a8:
43:4f:5d:73:a0:1f:cc:89:17:91:e6:88:f3:d2:e7:6b:57:0b:
b5:b5:98:5d:8b:b1:1e:ae:48:07:a9:05:e8:b3:ab:fb:3d:8c:
49:5b:e5:7e:a5:59:e6:6a:14:ad:2b:d6:6b:3b:c9:98:ea:5b:
9d:c1:96:a5:75:bf:f9:b7:a9:92:69:ba:77:db:ea:05:de:60:
70:c4:14:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:23 2025 by rpki-client