Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
File: BaCPua9NbK_M-uOyjsbtScQj78Y.mft (raw, json)
Hash identifier: 7gzA6Wt8EMOY21IfUSqLR8geMgeRSseEfQLcB9FORgE=
Subject key identifier: 30:D7:C3:40:05:DD:BC:8A:9B:04:23:62:60:F4:2E:70:CA:BD:B4:50
Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
Certificate issuer: /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Certificate serial: 01989FDEAE7EFC697568F2EF80825C426741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
Manifest number: 11DF
Signing time: Tue 12 Aug 2025 20:00:27 +0000
Manifest this update: Tue 12 Aug 2025 20:00:27 +0000
Manifest next update: Wed 13 Aug 2025 20:00:27 +0000
Files and hashes: 1: BaCPua9NbK_M-uOyjsbtScQj78Y.crl (hash: UXZUNe6yXYIhQZjTO4+6CKNjlHZ9KIwgcEkoVZUpD+E=)
2: SGQBvdPhJeyzXH46rCn1HprgoUQ.roa (hash: JigxCYquveWyuHmkXH4kT+LxBtbk4j6Ry0hBrLIoDFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:ae:7e:fc:69:75:68:f2:ef:80:82:5c:42:67:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Validity
Not Before: Aug 12 20:00:27 2025 GMT
Not After : Aug 13 20:00:27 2025 GMT
Subject: CN=30d7c34005ddbc8a9b04236260f42e70cabdb450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:9c:41:29:3f:93:5a:91:67:ac:45:18:15:
e8:1d:18:28:83:72:56:fe:5d:7e:53:b6:cb:64:c1:
5a:7e:2a:da:57:1b:26:3c:ea:c3:09:4c:17:7c:da:
38:53:bb:69:cf:ea:36:b5:46:7e:b2:26:27:55:16:
57:4f:4a:84:06:f3:ff:d3:cf:aa:9d:e5:fb:b9:56:
24:9b:d9:e2:82:22:25:0d:a7:82:ea:ac:20:ec:65:
9b:72:b7:0b:59:b3:cd:30:bb:e4:e7:16:e7:9e:b4:
3c:d4:4a:ed:41:ea:23:fd:40:13:a2:6a:ac:62:e1:
11:1f:8e:fa:82:36:f7:b5:7a:fa:7f:30:a2:d2:cd:
1a:ef:ec:02:7a:44:c1:48:e5:38:ee:e6:d4:33:9a:
c6:28:6f:c0:64:b9:a1:4b:20:11:81:37:ba:af:8f:
50:77:70:b8:35:fa:67:81:de:df:22:80:c4:d8:b3:
e1:20:99:fb:54:2a:34:9d:c7:1d:9c:fd:31:f5:55:
61:2c:84:34:73:5e:1d:04:f2:2a:b7:5b:27:1e:2f:
98:ad:63:ab:eb:06:4b:18:96:a6:17:c9:cb:2b:5d:
eb:e7:e0:9f:b3:85:df:ba:63:0a:01:08:9d:75:37:
f3:20:35:9e:f5:29:94:92:9a:13:18:0c:30:ee:09:
70:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D7:C3:40:05:DD:BC:8A:9B:04:23:62:60:F4:2E:70:CA:BD:B4:50
X509v3 Authority Key Identifier:
keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:93:bf:84:1c:86:35:37:ad:1d:d1:b4:6e:17:4a:55:29:36:
1d:4d:99:af:3d:53:9b:1f:43:48:88:95:13:7c:77:34:5e:f3:
4f:9b:6e:f2:d5:98:a5:f3:0b:38:f9:a7:36:b7:55:c3:4e:0e:
1b:f2:de:8e:b7:f8:3c:e2:66:cc:3d:98:ee:40:84:e1:11:f8:
9d:88:26:c1:fb:f2:de:ad:da:7a:29:e5:3a:20:d6:8b:90:48:
fc:e9:33:bc:9b:53:81:88:47:68:7a:2d:40:8e:a2:03:7f:4b:
c9:c4:3a:ec:65:39:47:26:55:ad:ba:21:c5:b1:a1:a9:18:95:
92:0e:07:7e:9a:62:e2:09:8d:6f:70:5c:08:68:24:90:8c:05:
a0:e7:14:e5:ac:39:11:25:09:d5:91:21:dc:81:86:b7:fd:af:
6a:c2:3e:84:ab:12:05:9f:27:0a:81:49:33:d3:da:6a:74:3e:
ff:e2:5a:3f:34:20:43:03:6d:1a:eb:28:4d:31:b3:d9:ef:ed:
27:0b:cf:25:7b:a3:18:1e:6e:e3:98:5c:35:51:ff:5b:21:53:
6f:d1:32:d4:12:9e:54:64:21:dd:e3:6a:9c:b2:a6:ab:16:1c:
14:4d:a4:ba:83:00:f9:f1:81:3c:c2:f9:58:5c:b0:fe:05:7e:
55:94:1c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:27:34 2025 by rpki-client