Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
File: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft (raw, json)
Hash identifier: xesjV5n2vnJcg3yoR0dCahao5t3P3HVcNKBxcM0FGdE=
Subject key identifier: 98:CD:29:E9:B7:9A:34:A3:48:77:A1:B2:FF:A1:B2:85:85:11:BB:EB
Authority key identifier: BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
Certificate issuer: /CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Certificate serial: 6FAC0AB1BF1872A235928692FFC0E7B6F9F35A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
Manifest number: 0308
Signing time: Sun 07 Sep 2025 04:20:01 +0000
Manifest this update: Sun 07 Sep 2025 04:15:01 +0000
Manifest next update: Mon 08 Sep 2025 06:36:01 +0000
Files and hashes: 1: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl (hash: 6httWt4Z2PsCoEZX+WenTk2U2pPF37K361MCj6x1DX0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ac:0a:b1:bf:18:72:a2:35:92:86:92:ff:c0:e7:b6:f9:f3:5a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Validity
Not Before: Sep 7 04:15:01 2025 GMT
Not After : Sep 8 06:36:01 2025 GMT
Subject: CN=98CD29E9B79A34A34877A1B2FFA1B2858511BBEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:a0:98:b4:2c:e1:ff:d4:b5:74:6a:96:43:
14:01:f5:b1:65:52:49:92:0d:30:c2:31:65:19:f9:
8e:7b:65:6a:a2:e6:bf:86:da:2e:d9:15:45:68:95:
c2:3b:e1:38:f8:95:58:ca:8f:82:4e:9a:23:90:32:
ee:b5:87:3e:40:89:a4:48:6d:09:1c:f0:cf:56:d9:
f4:4a:44:d0:1c:f5:cd:d4:d1:7b:13:3a:13:46:e4:
dd:11:f2:e8:73:1e:0e:2c:06:9b:ad:30:df:cd:25:
59:ef:c4:93:5e:ee:70:24:c0:27:60:bb:00:fc:b3:
ba:57:d3:14:19:79:ca:f3:f7:79:53:4c:b4:cc:35:
e6:47:88:43:92:df:95:16:39:f3:05:97:b6:9e:a4:
51:31:50:93:63:77:03:fe:b4:a7:fc:ca:e9:28:c9:
3a:fa:b9:59:ee:14:62:04:20:b1:31:a2:77:a3:5b:
56:7e:63:30:eb:87:15:1d:87:26:d8:c3:9a:92:c8:
b7:0c:e8:89:20:ba:75:06:d2:47:10:e9:4c:85:95:
52:8a:0f:0f:ec:8d:f7:4a:29:e2:3f:17:6c:21:97:
aa:ef:22:a6:1a:a3:d4:a8:f9:42:3e:fe:d7:8e:1a:
09:63:94:75:95:f1:65:ad:04:b0:6e:69:0a:3c:9c:
d1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CD:29:E9:B7:9A:34:A3:48:77:A1:B2:FF:A1:B2:85:85:11:BB:EB
X509v3 Authority Key Identifier:
keyid:BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b4:68:81:06:67:db:b0:9e:59:35:5d:c7:81:b2:06:02:c4:
8a:ed:78:05:19:ba:8f:5e:00:bd:0b:d0:01:c8:3f:1a:48:d1:
57:1b:ae:27:12:23:bd:f9:dc:4d:0b:75:19:e4:05:cb:de:a3:
e6:9f:1c:7e:73:c6:0a:49:b2:fb:1d:c4:0b:03:38:b6:16:f3:
08:7e:3b:8d:73:75:77:9d:3d:84:4e:c6:98:c7:1b:27:d9:e2:
3c:0b:28:9a:6c:3f:65:18:f8:c1:42:f7:f0:36:9e:1e:8a:eb:
a5:d1:46:7b:67:7d:81:cc:c1:fe:63:e5:6d:c5:31:23:76:b9:
17:c2:42:5f:01:ed:12:b2:bd:94:a0:aa:a7:60:fb:19:76:c4:
24:ac:03:ac:61:2d:db:b2:9c:73:ad:33:84:01:67:6c:08:5c:
0b:33:0d:22:aa:af:ae:01:86:61:52:b7:a1:2a:ac:62:61:14:
63:ad:06:98:f4:77:c9:4c:3d:95:62:79:1b:5e:cf:b7:af:a7:
77:6a:6a:8d:23:76:16:27:dc:d6:50:15:fd:01:60:3d:9d:7f:
e2:6c:b8:93:60:c6:c1:45:e0:50:a3:cd:d3:b8:e4:cd:0b:a4:
b2:de:03:06:90:9d:08:ce:a6:08:72:5d:16:80:50:01:d9:88:
14:1f:ef:a7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUb6wKsb8YcqI1koaS/8DntvnzWgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmMwOWYxNTA4ZTFiYzExYmVlY2I4MDhlNWIwMWU2ZjVk
YjhkODE2ODAeFw0yNTA5MDcwNDE1MDFaFw0yNTA5MDgwNjM2MDFaMDMxMTAvBgNV
BAMTKDk4Q0QyOUU5Qjc5QTM0QTM0ODc3QTFCMkZGQTFCMjg1ODUxMUJCRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo5KCYtCzh/9S1dGqWQxQB9bFl
UkmSDTDCMWUZ+Y57ZWqi5r+G2i7ZFUVolcI74Tj4lVjKj4JOmiOQMu61hz5AiaRI
bQkc8M9W2fRKRNAc9c3U0XsTOhNG5N0R8uhzHg4sBputMN/NJVnvxJNe7nAkwCdg
uwD8s7pX0xQZecrz93lTTLTMNeZHiEOS35UWOfMFl7aepFExUJNjdwP+tKf8yuko
yTr6uVnuFGIEILExonejW1Z+YzDrhxUdhybYw5qSyLcM6IkgunUG0kcQ6UyFlVKK
Dw/sjfdKKeI/F2whl6rvIqYao9So+UI+/teOGgljlHWV8WWtBLBuaQo8nNGbAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUmM0p6beaNKNId6Gy/6GyhYURu+swHwYDVR0j
BBgwFoAUvAnxUI4bwRvuy4COWwHm9duNgWgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWNiMzAzMjItOTRmNy00ZTYxLTg2OTEtNWMxYjYxMWIw
YTk1LzAvQkMwOUYxNTA4RTFCQzExQkVFQ0I4MDhFNUIwMUU2RjVEQjhEODE2OC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZBbnhVSTRid1J2dXk0Q09Xd0htOWR1
TmdXZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lY2IzMDMyMi05
NGY3LTRlNjEtODY5MS01YzFiNjExYjBhOTUvMC9CQzA5RjE1MDhFMUJDMTFCRUVD
QjgwOEU1QjAxRTZGNURCOEQ4MTY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbRogQZn27CeWTVdx4Gy
BgLEiu14BRm6j14AvQvQAcg/GkjRVxuuJxIjvfncTQt1GeQFy96j5p8cfnPGCkmy
+x3ECwM4thbzCH47jXN1d509hE7GmMcbJ9niPAsommw/ZRj4wUL38DaeHorrpdFG
e2d9gczB/mPlbcUxI3a5F8JCXwHtErK9lKCqp2D7GXbEJKwDrGEt27Kcc60zhAFn
bAhcCzMNIqqvrgGGYVK3oSqsYmEUY60GmPR3yUw9lWJ5G17Pt6+nd2pqjSN2Fifc
1lAV/QFgPZ1/4my4k2DGwUXgUKPN07jkzQukst4DBpCdCM6mCHJdFoBQAdmIFB/v
pw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:50 2025 by rpki-client