Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
File: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft (raw, json)
Hash identifier: jaiexbzRw7ZkFZgsf7ztRjyKIVPT3BG1rMbfpIOHeKI=
Subject key identifier: FC:F2:92:2E:40:2E:AC:EE:85:91:F9:C6:61:38:E4:C2:9E:3C:74:6E
Authority key identifier: 05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
Certificate issuer: /CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Certificate serial: 01987C4081B735B294B8BBF57BC979C84074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
Manifest number: 0895
Signing time: Tue 05 Aug 2025 22:00:58 +0000
Manifest this update: Tue 05 Aug 2025 22:00:58 +0000
Manifest next update: Wed 06 Aug 2025 22:00:58 +0000
Files and hashes: 1: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl (hash: iRy6SUWdtQv58/4QqlngZbVF/K6iB1oedF9KJFGDoZw=)
2: kZOSQmU6A2elFsqdm-zFawpP2VM.roa (hash: bGe5j2ABlU0093SdrMDiQuuHNz672BXZ6vQ6WijSw+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:81:b7:35:b2:94:b8:bb:f5:7b:c9:79:c8:40:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Validity
Not Before: Aug 5 22:00:58 2025 GMT
Not After : Aug 6 22:00:58 2025 GMT
Subject: CN=fcf2922e402eacee8591f9c66138e4c29e3c746e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:bc:99:e1:9a:72:66:85:7a:1b:dd:26:8c:
3f:4e:7c:9b:ee:07:53:0c:f8:1d:1c:15:57:6d:66:
98:70:74:d9:29:61:07:ca:3b:01:6f:a1:91:6d:57:
78:73:60:8a:91:3d:8f:32:14:6a:38:e9:00:19:77:
eb:9a:73:f8:3d:0c:c2:73:26:d8:00:a3:86:23:d8:
a7:a9:52:13:c5:88:7b:26:91:95:61:8d:f0:49:e7:
e2:db:b8:85:32:74:a1:10:48:b3:0f:27:23:b5:f3:
45:6a:90:60:dc:a7:b6:81:c6:00:16:15:9c:0b:d4:
cf:c4:23:86:5b:a5:c7:39:5e:6a:2e:ad:38:a5:f1:
fd:d4:bf:0b:37:92:69:62:81:f3:3c:57:05:3a:9c:
fe:c5:b0:69:b8:66:c9:cf:94:b3:6d:9a:0f:76:19:
6f:03:9e:d7:fc:33:ca:16:81:5c:d4:ea:0a:18:51:
2f:70:c2:39:9e:7d:1e:54:c0:f9:5f:0c:f5:85:bc:
4c:dc:f7:32:b2:1b:1e:76:98:b3:23:65:87:f7:fa:
87:13:6b:10:e0:90:26:93:e7:5d:3f:96:7f:08:73:
4f:7f:9d:5f:3a:a3:30:20:a6:35:05:bb:2a:9b:e1:
d0:80:61:64:ac:5a:44:ca:07:10:dc:aa:7b:46:3d:
12:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F2:92:2E:40:2E:AC:EE:85:91:F9:C6:61:38:E4:C2:9E:3C:74:6E
X509v3 Authority Key Identifier:
keyid:05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ce:c5:a6:9d:27:17:f2:53:fc:5c:06:c1:85:d4:68:60:5e:
57:97:0a:f4:11:c6:af:e8:26:13:ac:e1:c3:99:87:dc:fa:a5:
69:15:b9:7c:85:a0:e3:f2:d5:86:4a:35:64:39:a7:48:82:18:
26:08:0b:35:ce:f4:f5:bb:b6:1e:d9:35:49:89:13:77:76:88:
c7:f2:74:d4:b2:84:26:e5:35:d2:51:d8:aa:a0:58:e9:0b:3e:
cc:e9:49:53:04:75:a9:5d:2f:34:88:c4:ca:e7:d0:e0:1f:a8:
9c:ff:2f:88:c1:80:85:0a:f1:5b:21:fa:7c:67:b6:e2:37:89:
2e:a8:ba:36:2e:d4:6e:0b:e9:a3:c1:b8:a6:34:3c:8c:40:b3:
7d:b0:36:5d:2a:d5:a6:23:82:61:fe:22:63:fc:52:87:ca:d3:
a6:73:58:60:ac:2d:b5:b9:f2:b9:cd:f9:04:ed:95:78:d2:d8:
f5:88:e5:57:a5:0f:a5:6e:fe:b7:87:a0:a4:bf:b3:59:89:0c:
5f:e7:b6:74:04:0c:37:27:57:80:0c:ef:1a:3c:8b:79:ca:76:
60:54:18:41:00:49:32:68:32:78:25:66:ea:e4:4d:c5:14:61:
4f:6c:47:c3:7e:93:68:88:e1:94:02:0e:45:6c:6d:71:3a:21:
3b:33:e0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:51:19 2025 by rpki-client