Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: rmDXLJMIvRuK45c5OVi9JjIde9SV7ijvjSpLVpWoTeE=
Subject key identifier: D4:9F:57:D5:25:0D:CC:F7:90:26:78:A4:CF:FF:4D:EC:83:98:C8:12
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 01988FFE87B4722A6A17E3BFA5230AA81C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 162A
Signing time: Sat 09 Aug 2025 18:01:19 +0000
Manifest this update: Sat 09 Aug 2025 18:01:19 +0000
Manifest next update: Sun 10 Aug 2025 18:01:19 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: 6d3TAr9H0biCIMxE8qnkC3EYU3fRqhq698/dkGlrFCA=)
2: Lh8yvuYECQW6dDow2L76nBGsr6E.roa (hash: 0hiYjVR3RerVN9RXXudfA5pr9cnXHHQqw5O/Jaf9Snc=)
3: vtX7rusa6fZMmF3lc_ZvTTSyZII.roa (hash: /Q3goqDnJ6EwR3K+qh2LYwfBLshEeT0YC75y12sQLG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:87:b4:72:2a:6a:17:e3:bf:a5:23:0a:a8:1c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Aug 9 18:01:19 2025 GMT
Not After : Aug 10 18:01:19 2025 GMT
Subject: CN=d49f57d5250dccf7902678a4cfff4dec8398c812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:a5:8d:18:15:f0:fd:3d:1c:19:da:77:42:
4f:49:c0:06:a9:a5:29:a6:54:6a:e0:53:1f:fd:a5:
30:27:5f:73:d0:d2:60:3f:08:91:8c:42:10:1a:06:
9a:89:3e:e8:fd:be:23:e9:54:f2:5d:3c:7e:32:02:
d6:3f:c4:d6:e1:58:15:e9:cf:b5:20:a1:f9:86:6a:
12:01:c7:b3:84:e9:61:e1:c6:03:af:02:3b:7e:a1:
0b:7d:c4:0b:a6:02:dc:2f:38:80:da:1e:92:ed:2a:
57:6f:b7:1f:5d:e0:d5:20:89:f4:eb:1c:f2:db:19:
b3:d5:db:be:87:f9:11:f9:e8:cf:c8:f1:cf:1a:66:
8e:e7:87:6a:66:2e:73:e3:0c:2f:f6:0a:d5:b1:e6:
a4:8d:28:b9:4a:a1:0d:3c:26:1a:ac:5e:d5:4f:12:
c3:7d:39:b6:f4:b0:92:c3:5a:24:b1:61:7e:8d:b0:
c0:ae:3e:88:01:60:f7:6e:ed:3a:e5:95:14:03:8c:
77:4d:1e:6a:5e:da:58:39:9e:25:8e:bb:cf:3d:1b:
da:3b:ec:c2:25:29:80:d1:95:7e:3f:2e:7f:4b:0e:
af:62:5d:5b:9a:90:4b:ea:02:fc:3b:ab:3e:f5:38:
3e:27:9c:df:99:ba:f9:4d:10:35:99:f5:38:d7:f2:
b3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9F:57:D5:25:0D:CC:F7:90:26:78:A4:CF:FF:4D:EC:83:98:C8:12
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:59:b4:7a:c0:37:6c:38:82:73:fb:9c:82:23:87:1f:3a:2e:
5e:e4:02:78:37:1a:b5:0b:32:7c:33:87:c3:05:54:b9:06:92:
31:4e:ea:2e:a8:c3:c0:67:1f:67:cd:5d:34:76:ff:63:54:3a:
57:b9:26:08:47:08:69:0b:df:50:ee:04:a0:0d:47:3a:88:28:
f5:1b:3d:90:1b:f9:7f:3a:4a:dc:72:b2:69:8e:17:af:17:c6:
52:2a:34:8a:bf:6c:44:28:2c:d9:0b:eb:91:26:ce:dd:d0:20:
2e:63:e2:15:37:97:67:d8:05:9f:e7:4a:76:87:ee:01:6f:43:
ca:31:13:37:9c:b2:57:7c:5a:1f:a7:07:46:4e:40:ac:0d:36:
4c:f9:5f:a7:07:d3:e1:f2:a3:5d:ad:d0:4a:94:4e:78:3b:ac:
03:8e:2f:c2:87:d9:10:99:8d:9d:da:ea:25:42:ed:33:a6:5e:
35:b5:f5:bb:72:6e:df:79:b8:96:ab:e9:0a:a0:10:86:9e:ee:
51:ea:fd:12:1d:83:e6:c3:30:ae:b2:38:08:17:15:b3:f4:93:
75:d4:31:f0:82:aa:3b:49:88:2c:12:e4:e8:9d:cb:8a:6f:ca:
5c:18:f3:f2:bd:0b:d7:bc:ec:13:7b:87:e1:11:ed:fb:f3:ce:
c5:b3:b7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:08:53 2025 by rpki-client