Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
File: BcgcgJdDfNF58xkYPAKC6mzRylE.mft (raw, json)
Hash identifier: NSub4K1uLRcCdODVHqh9//eqF/TJ1LpCCWUSxEFAuJs=
Subject key identifier: 4D:74:07:18:8F:A0:E4:6F:DB:D6:8D:77:06:BE:98:6D:1D:11:E0:4F
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Certificate issuer: /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial: 019A72932F8EB968BC181C8F79BAC6977945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
Manifest number: 06DD
Signing time: Tue 11 Nov 2025 11:00:39 +0000
Manifest this update: Tue 11 Nov 2025 11:00:39 +0000
Manifest next update: Wed 12 Nov 2025 11:00:39 +0000
Files and hashes: 1: 0eEbXaLT72xMShRX80ks6Q4d5oI.roa (hash: qA3gKPtC1PDR4pbDhy0QBVS9nz5AKV5Uc6LznPWBGvQ=)
2: BcgcgJdDfNF58xkYPAKC6mzRylE.crl (hash: TpNeYo1iS7D2JikWxna/qVYB8Q7uSb2WhRwKSjVrPqM=)
3: z0nJV6Vj9yWOU_8BIeua9e3I6JE.roa (hash: YIrDiztONnsPy57n2ZnC2YoDiFkPGBFAHQe2Pe5+Gi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:2f:8e:b9:68:bc:18:1c:8f:79:ba:c6:97:79:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Validity
Not Before: Nov 11 11:00:39 2025 GMT
Not After : Nov 12 11:00:39 2025 GMT
Subject: CN=4d7407188fa0e46fdbd68d7706be986d1d11e04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:3c:6d:83:4d:c4:03:73:a6:79:b3:66:db:
3c:bc:3a:ef:f1:ee:71:05:88:35:8d:7e:36:93:44:
88:47:c8:4e:41:46:49:0f:83:f6:a8:da:aa:3a:e2:
6f:f6:fe:0a:37:78:66:77:5d:68:84:b9:be:85:0e:
54:5a:88:1d:a4:07:54:62:84:37:3a:02:56:ec:6e:
d1:9c:50:13:85:ba:5f:eb:52:2a:fc:08:a9:13:bc:
f0:9c:ef:e9:7c:69:cd:40:e6:36:44:54:f4:e4:75:
3e:1e:06:cd:98:aa:f0:10:66:9f:aa:3d:90:79:6f:
ba:f4:39:a5:cf:59:e6:46:35:ab:e9:d4:ff:d4:d3:
ac:fe:53:6f:28:5d:21:d2:99:9a:6c:78:e8:77:bd:
03:af:33:5c:12:2b:31:a5:88:1e:75:20:21:35:8d:
35:c5:45:7f:fa:ac:f3:8f:43:89:91:10:de:91:85:
76:ad:88:3e:36:d0:a6:28:0b:56:43:e2:96:28:fd:
6e:86:96:93:cd:43:81:44:1c:82:6a:8b:49:cb:2f:
8f:d2:46:46:a9:6f:8e:db:7a:58:ec:d3:31:d4:46:
66:d6:8f:14:20:55:4c:05:7a:e3:b6:64:b8:85:d2:
5d:f8:97:da:0d:c4:a1:00:36:d7:2f:c0:e9:63:94:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:74:07:18:8F:A0:E4:6F:DB:D6:8D:77:06:BE:98:6D:1D:11:E0:4F
X509v3 Authority Key Identifier:
keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a1:88:e8:9e:23:04:59:77:60:57:72:80:c4:dc:bc:f0:46:
18:21:01:82:82:ad:ab:9c:f8:74:12:f1:5c:c8:2e:98:4f:88:
b0:65:7e:26:99:d7:c9:cb:57:43:64:44:25:cf:d1:f2:8b:ee:
c2:21:d4:81:c8:02:80:d3:c4:46:5d:29:98:11:9c:4e:0c:81:
d1:df:35:25:5b:55:81:4d:fd:33:90:c5:c6:6e:ce:e3:e9:21:
79:27:fb:6e:55:b2:3d:c1:8f:e5:12:62:e6:24:78:6c:5d:70:
fb:91:e4:8c:1c:4b:6e:c6:16:5c:4e:b4:ea:4a:3d:3f:68:18:
4c:03:cc:be:a5:ce:fa:38:91:60:c4:87:c0:e4:19:b6:d2:f1:
e6:2a:70:b8:09:98:07:05:ef:89:dd:b7:51:71:d1:33:cf:d8:
4d:6a:cb:dd:03:46:cf:f7:0a:4b:c0:5d:e5:56:c9:e6:5a:1e:
91:78:6f:f3:cf:93:88:2d:98:79:2e:ef:cd:0a:59:2e:09:b1:
cb:7e:3a:56:80:db:98:6a:16:e3:85:36:1c:10:0a:b2:e5:02:
0d:33:8b:5e:37:c7:0d:ad:f4:c5:09:9f:11:07:bb:e0:c6:75:
a6:af:a1:7a:7c:3f:49:0f:f0:16:1f:9f:df:82:1d:62:32:34:
3e:ec:6a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:48 2025 by rpki-client