Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
File: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft (raw, json)
Hash identifier: cUId/jr0kK5YLWhODePU3OtMZf43SwVyS6J8Uxq2rMI=
Subject key identifier: 39:F1:58:D9:18:D7:3E:1A:57:0E:BB:AC:60:75:0F:23:ED:AA:C0:63
Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Certificate issuer: /CN=047ee74ac490e31f1d40764f092411ee25eb1665
Certificate serial: 019A71EEEA6D9A2BEEAA93701A621488EC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:01:14 +0000
Manifest this update: Tue 11 Nov 2025 08:01:14 +0000
Manifest next update: Wed 12 Nov 2025 08:01:14 +0000
Files and hashes: 1: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl (hash: 2oF7mJwYug3X442pZkOGmbJs+PrVjmcuLjDNZ/9PRxY=)
2: lTisVzPeiPslXlhHYnIYv10zoj8.roa (hash: nI5Tne3/W5S4/3jqutx+PLa3bngqaYEDH1hjjV/uGx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ea:6d:9a:2b:ee:aa:93:70:1a:62:14:88:ec:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665
Validity
Not Before: Nov 11 08:01:14 2025 GMT
Not After : Nov 12 08:01:14 2025 GMT
Subject: CN=39f158d918d73e1a570ebbac60750f23edaac063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a5:a8:98:37:0a:2e:41:af:55:4c:35:22:28:
35:00:4e:2a:21:44:99:43:ce:6a:a1:b2:1a:a9:40:
99:d9:2c:20:f2:06:87:a5:04:5a:b6:4d:14:ef:09:
c2:3e:59:9b:13:c3:21:7d:89:af:87:91:bd:94:70:
3b:4a:f5:18:62:73:0a:13:5a:db:95:de:91:52:01:
df:3b:b6:69:2f:c4:fc:c5:6e:2b:26:3d:71:91:7b:
11:09:a8:25:bb:1b:44:f7:2a:ed:79:78:77:93:5c:
a4:49:2e:fa:f0:59:d4:f6:7f:cc:8f:2a:38:a9:43:
49:36:62:c6:1e:8a:97:55:33:eb:34:50:9c:50:3f:
01:05:d6:52:d6:26:26:57:a6:e0:e0:48:42:47:0a:
c3:77:31:e0:55:5c:13:4f:95:21:68:e4:65:4c:40:
74:6a:02:e2:05:28:b0:ed:59:9d:6c:a6:74:ad:85:
8e:05:e2:23:01:55:83:03:f6:40:63:9b:52:4a:2b:
eb:25:f7:5e:11:58:bf:16:bc:09:06:fa:43:fb:1a:
fc:1d:4f:5f:27:92:74:f9:cb:ed:96:c1:ab:d5:41:
db:26:26:f7:e7:ec:4d:2e:31:ad:c4:c3:8a:31:d5:
2f:76:f2:9c:79:ee:12:ab:8a:5e:f1:17:df:78:19:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F1:58:D9:18:D7:3E:1A:57:0E:BB:AC:60:75:0F:23:ED:AA:C0:63
X509v3 Authority Key Identifier:
keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:37:f8:b3:69:a7:bf:57:e1:38:ae:3f:8f:32:b7:c9:80:06:
c4:91:1c:89:40:7a:80:7f:75:ca:5e:e9:fb:15:27:4a:30:b8:
b2:71:3b:6d:02:1b:00:13:5c:fe:d8:3a:f0:09:b9:08:65:1c:
fb:4a:1f:11:aa:c5:d0:9d:ab:a7:ec:dd:e0:b2:4f:43:29:1a:
e7:cd:bb:6c:37:4c:5c:e3:d3:67:3a:4d:69:51:c1:b4:b1:d5:
01:40:82:68:9a:68:8b:fb:ab:11:11:00:aa:1c:31:a6:0b:ea:
fd:0b:3a:21:c7:6c:35:92:e1:38:fb:ac:59:a6:05:0f:90:43:
4d:af:7e:59:ca:25:83:d2:28:47:25:d2:91:bc:05:30:5f:ec:
9f:5e:fb:af:ec:33:09:0b:77:43:1f:46:f1:2b:b2:fc:65:69:
2d:9b:ef:b6:08:70:0f:e3:d7:fc:33:22:65:a6:d9:e9:54:ab:
46:9f:e6:3b:2c:ee:be:66:a1:a0:5e:10:dc:de:a4:2b:76:30:
40:87:5f:ec:a7:ce:a4:dc:6c:d9:0b:8f:b9:73:d4:6e:f8:b7:
9c:9f:36:93:96:96:1b:24:5f:a4:71:d3:79:f2:db:b6:c6:24:
b4:59:26:fa:d7:e0:0d:c1:88:1d:d5:9a:f2:0c:d6:2c:3d:a6:
a5:58:9e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:42 2025 by rpki-client