Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
File: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft (raw, json)
Hash identifier: PVGFAQ6/EfVeNemQWCgPmSBf9zbVO7ONBCagEozQugA=
Subject key identifier: 50:41:0C:78:C6:E8:C8:70:34:F2:FD:95:D9:FD:7C:02:2C:65:E9:4D
Authority key identifier: BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
Certificate issuer: /CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Certificate serial: 5CA2D977D8EC66397449F0007C0E2AC712C95EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
Manifest number: 035E
Signing time: Tue 11 Nov 2025 01:10:32 +0000
Manifest this update: Tue 11 Nov 2025 01:05:32 +0000
Manifest next update: Wed 12 Nov 2025 01:36:32 +0000
Files and hashes: 1: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl (hash: jNfykHUTWyZHPvONYDbglgQPDJUf7A8/yCZ0E53eP2Y=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a2:d9:77:d8:ec:66:39:74:49:f0:00:7c:0e:2a:c7:12:c9:5e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Validity
Not Before: Nov 11 01:05:32 2025 GMT
Not After : Nov 12 01:36:32 2025 GMT
Subject: CN=50410C78C6E8C87034F2FD95D9FD7C022C65E94D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:52:47:8f:c7:30:7d:fd:fd:cd:08:9f:02:ae:
f7:e7:d1:b4:4f:aa:f5:3b:5e:24:22:53:47:54:c0:
10:7f:ef:2c:a4:b6:ac:e3:1f:0f:58:2c:70:5b:e2:
d3:15:e4:fd:7e:de:92:df:e7:6b:0b:d2:cd:bb:f1:
fd:e6:14:26:cb:ec:f6:9f:ca:0c:fe:25:71:ca:c5:
8d:25:b6:ba:71:b8:0c:9c:80:a1:30:54:d1:28:b0:
5a:f4:dc:53:c9:b1:85:0c:20:b2:52:3e:8a:5f:7b:
ff:f0:70:b5:6a:c8:e0:a7:a6:08:ab:d2:60:ef:29:
9c:d6:f3:57:7f:5e:4c:b4:04:78:e7:f8:85:d6:54:
c5:08:22:f4:08:e7:9d:b1:a2:12:0a:bf:0d:91:5e:
1e:e1:f9:79:34:25:fa:d1:b1:31:11:3b:9c:1f:92:
6a:9e:86:b8:a9:28:c3:aa:47:8c:8f:e9:c3:25:62:
f3:77:34:cb:f2:9b:94:ce:8b:d1:76:97:33:94:91:
a8:4a:9e:10:17:fb:27:07:6f:b4:51:e8:f5:e2:3e:
88:26:be:cc:4f:21:39:20:65:08:5e:19:83:04:d2:
c7:44:a1:b0:af:82:c3:d7:9b:0d:13:8f:97:88:32:
1a:99:f7:90:79:94:a1:09:d2:1a:bb:26:b7:cc:39:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:41:0C:78:C6:E8:C8:70:34:F2:FD:95:D9:FD:7C:02:2C:65:E9:4D
X509v3 Authority Key Identifier:
keyid:BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3c:7b:51:7a:4a:17:fb:19:d6:a0:49:a7:4d:a4:e3:1c:bb:
ce:b5:cd:78:87:79:f0:28:72:7f:89:62:ac:4a:e5:cb:76:ef:
19:84:65:be:10:d7:5a:d0:78:24:11:69:23:f8:b3:82:aa:e8:
5b:87:82:fc:d4:58:95:04:eb:0b:c4:a9:84:80:2f:d9:fb:a3:
5e:97:86:ef:ca:79:5f:5b:7e:14:38:46:00:71:f5:52:e2:d9:
f8:73:11:d2:39:59:91:ae:9b:5b:e8:d0:ee:66:77:9a:4f:1a:
2a:d5:07:b5:8b:59:ed:da:57:b3:e0:c4:b6:7a:9d:bf:95:d7:
86:90:a3:aa:b6:ae:fc:7e:0c:2c:6d:a1:44:ed:22:f3:a0:f2:
7a:ec:24:73:56:4b:3f:b5:4e:6c:d6:8c:43:10:3a:fb:1a:cb:
7d:55:8b:9e:09:e0:96:99:35:85:f6:ec:87:e1:b4:9e:aa:3b:
7b:b1:31:a9:9f:4d:c6:08:83:c5:79:27:a7:d7:b2:d5:36:02:
6f:b1:a6:43:4a:e8:82:ed:0c:5e:ed:d4:4e:13:8e:a9:ef:c4:
69:4b:5b:16:a5:86:85:a1:bc:06:97:47:5f:5f:f8:6d:73:e9:
e1:a3:a7:15:aa:bf:fc:64:c2:3b:d6:d2:f9:f6:7e:37:b1:a5:
a1:a5:b4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:38:40 2025 by rpki-client