Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json)
Hash identifier: FR/4HQypSeVbRIEP3NA3LUbn5gm5yWZmTNyitc3sOE0=
Subject key identifier: 34:58:65:A0:73:D9:49:E8:DB:2C:5B:C6:1E:FB:01:D7:00:F2:A3:8E
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 019A4DAAE39584CA72ED9ED672BE481E45D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 07:00:36 +0000
Manifest this update: Tue 04 Nov 2025 07:00:36 +0000
Manifest next update: Wed 05 Nov 2025 07:00:36 +0000
Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: Cez8hFFSbh4rqdIeQ328MnlowY6Zl1FrwqP/Uo1QoU8=)
2: cadUElPbaF409FA_2Wg_Q_GYDPU.roa (hash: NuxwFEiNd/qBOlqeuoFPvUGS7VeCKWQWl9Silhu16kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:e3:95:84:ca:72:ed:9e:d6:72:be:48:1e:45:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Nov 4 07:00:36 2025 GMT
Not After : Nov 5 07:00:36 2025 GMT
Subject: CN=345865a073d949e8db2c5bc61efb01d700f2a38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:40:76:bf:c4:e6:9f:b5:0c:33:65:10:3d:
78:1c:b2:e0:47:2d:ff:c8:3c:6e:d4:76:74:d0:95:
7b:5f:8a:71:16:b3:40:0a:ae:16:c0:01:3d:8e:93:
88:10:a9:5a:23:9e:ef:ae:aa:ef:bf:33:eb:9a:33:
01:6b:6f:26:b0:6e:57:f7:03:2c:e0:d9:38:45:8f:
20:22:41:65:09:6e:4a:89:a0:ad:ed:4e:d5:59:6f:
aa:0b:f5:bd:f2:7a:1b:ab:ba:09:ee:c2:77:89:25:
b4:4b:c6:3c:b8:22:7c:b8:06:68:bf:b6:36:58:c3:
1a:03:33:4b:e6:81:65:35:bb:dd:08:10:f9:f4:0f:
b1:95:28:00:5a:2b:2e:01:36:77:df:ef:c6:bc:fd:
17:fa:c4:81:fb:5a:4a:93:6a:d3:f2:87:4a:5e:8f:
12:c6:5b:03:42:2f:25:0a:35:b8:01:ae:ab:8f:b3:
38:cb:3b:13:b1:d7:a5:5a:e4:ce:c9:a7:ae:da:1a:
b2:dd:32:91:66:18:1d:4b:eb:08:87:a1:8d:f4:d4:
54:ab:d9:0b:e3:d9:cd:d7:4c:c1:7b:46:34:20:c5:
e2:ba:7c:e0:54:50:8f:31:28:33:29:48:6b:e7:c4:
21:98:f1:44:e4:5b:33:65:60:35:4d:2b:b6:5e:30:
f7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:58:65:A0:73:D9:49:E8:DB:2C:5B:C6:1E:FB:01:D7:00:F2:A3:8E
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5b:b8:47:55:21:41:0b:a1:68:91:8b:17:ee:c1:ed:b7:aa:
7a:06:9c:9d:8a:16:31:07:33:9a:80:eb:48:8c:c0:6c:71:12:
d8:76:79:6d:18:d5:eb:24:4c:13:be:22:19:27:23:2e:12:48:
b8:50:b8:c0:60:4a:e0:e3:3e:9b:92:53:8c:8f:c9:48:07:6b:
74:a1:e7:41:c1:7e:c5:25:25:d5:ee:12:21:e5:6a:2c:25:fa:
46:12:7a:59:60:4f:bd:38:ca:fd:6d:06:4d:29:2d:40:b9:0b:
47:47:36:5d:c1:f8:60:4a:f3:6f:14:bb:ea:1d:18:f0:4f:9d:
ed:67:9d:1a:47:78:23:eb:b1:41:fc:b7:b9:69:d9:e0:14:74:
1f:cb:97:5c:02:69:03:06:b3:1b:5a:2c:e4:21:e7:94:fb:cd:
ee:2f:76:2a:44:a9:b9:e3:3e:d7:34:6b:09:a4:82:c9:35:74:
2c:5e:4f:64:a5:5c:35:27:a5:43:ed:11:db:b1:48:d5:c5:c2:
54:68:a9:27:bc:03:c9:4a:97:42:fe:99:46:8b:15:e3:c5:59:
47:21:92:2d:75:a0:9b:f9:77:dc:3f:df:21:4a:44:80:08:8d:
4b:06:11:fa:2f:7e:79:42:7c:0d:c6:50:81:22:10:20:ca:25:
d4:89:66:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:12 2025 by rpki-client