Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
File: Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft (raw, json)
Hash identifier: TgyBtBPrqJLJbJJFsiInIPxblYcEyaQkdoWVO0nHupM=
Subject key identifier: 02:C5:78:E5:A0:DA:8C:47:FE:AD:37:4A:6C:DF:A7:4C:E8:DB:A1:1A
Authority key identifier: 06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
Certificate issuer: /CN=06f766f1de13aec7fb050193f8329a6609e0095d
Certificate serial: 019A7149BBE8DA77C424813C20969A1012D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:00:48 +0000
Manifest this update: Tue 11 Nov 2025 05:00:48 +0000
Manifest next update: Wed 12 Nov 2025 05:00:48 +0000
Files and hashes: 1: Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl (hash: IFK3dFjfT4AMB4hMDsEncVZi6sv2w+kp1u0M8/AGH50=)
2: oGJ3VwT7Kor9HUj6Ls93pR91zps.roa (hash: aLxAJ/2BMqLJ72HUFwwNF6sObyfI6ewUQ19ZgSavYnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:bb:e8:da:77:c4:24:81:3c:20:96:9a:10:12:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f766f1de13aec7fb050193f8329a6609e0095d
Validity
Not Before: Nov 11 05:00:48 2025 GMT
Not After : Nov 12 05:00:48 2025 GMT
Subject: CN=02c578e5a0da8c47fead374a6cdfa74ce8dba11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:09:e4:d0:ae:ad:6c:25:78:44:77:7a:06:
b7:b0:fd:4c:87:61:67:c7:3c:09:a2:c5:c0:f7:c4:
2d:da:d6:30:bb:c5:fa:a1:d0:1d:94:2d:c3:27:34:
59:58:56:9a:21:02:17:bb:b3:c8:4a:37:9c:1b:d7:
e5:91:a7:73:ac:d3:58:61:68:f4:f3:b3:45:15:08:
2f:16:bb:6a:a2:c5:8f:05:b6:f5:1e:63:9b:32:0c:
a5:d6:82:23:fc:b5:a1:71:d3:3f:d8:fd:0f:1c:0f:
fc:bc:a6:87:7d:c6:b7:7b:17:5a:8a:ef:e3:4f:89:
36:e2:40:4d:70:8b:fe:aa:dc:69:ef:4f:0c:2e:6b:
0a:4a:14:d6:0c:6d:b7:56:bb:85:97:3d:f1:09:76:
31:b4:fb:a3:d1:ae:6d:f6:ae:cc:e7:cf:a4:87:f1:
3e:a9:c1:cd:db:ae:97:ea:1e:10:fb:30:43:22:56:
be:29:1a:d8:e8:af:18:1a:71:71:38:5c:2e:25:c4:
fb:6f:a6:e2:59:b6:ff:cf:2b:ef:67:ab:37:e8:5d:
47:cc:4d:70:38:23:33:b8:32:e6:19:1b:f0:03:a9:
b8:d8:ce:32:67:dc:61:ab:37:62:14:cc:f8:bd:35:
14:35:76:2a:2c:7f:03:f7:f0:1b:40:32:9a:1b:ee:
71:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C5:78:E5:A0:DA:8C:47:FE:AD:37:4A:6C:DF:A7:4C:E8:DB:A1:1A
X509v3 Authority Key Identifier:
keyid:06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1c:5c:32:53:e7:a9:3b:80:1b:be:44:b8:84:08:52:7e:ca:
60:11:12:3b:98:25:ca:73:9b:f1:6d:54:a5:30:3e:78:0c:7a:
d6:1f:3a:7b:e3:aa:1b:a2:f7:0d:6c:10:79:e7:0d:cb:32:ac:
90:df:fa:fe:4a:a7:ed:d3:db:97:a8:25:99:0c:5a:bf:19:2a:
22:bd:02:47:72:be:60:85:ee:32:89:50:44:89:40:d2:e6:fe:
32:dc:01:5f:f5:bc:53:24:99:7f:ee:33:2f:36:05:04:47:d3:
a1:4b:d3:2a:40:ca:a6:97:50:60:e3:8b:ca:5d:ec:7d:c3:f1:
f7:43:02:b0:63:a2:75:d5:9c:6e:69:c6:17:8e:70:c8:b8:a4:
57:c2:29:2a:48:71:a4:63:6d:55:11:fe:09:75:91:5d:88:46:
b8:78:ae:24:c5:ab:c7:5d:09:53:b2:28:f8:75:51:5a:6f:9c:
36:d1:76:c4:de:66:a5:74:ef:6b:cd:b7:b4:87:74:06:01:1e:
69:26:ed:d1:82:31:9f:5f:2c:ca:c5:08:c9:36:65:40:85:0e:
8a:6f:cc:cb:fc:48:9e:bc:61:1c:5e:c8:fc:7f:cf:08:f8:0c:
95:cb:35:70:38:e3:7c:2c:5f:55:f8:60:99:a5:fc:48:1c:02:
8e:2e:e2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:58 2025 by rpki-client