Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json)
Hash identifier: deTE/xZRHv4MFwDcTthBJUTUNruooicgesOS+NxNrU0=
Subject key identifier: 86:D9:2D:50:4B:B7:15:6C:B2:68:10:A0:7F:D8:41:E3:59:39:90:70
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 0198729850734EC8F81269F4BE3C6123341E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 01:00:41 +0000
Manifest this update: Mon 04 Aug 2025 01:00:41 +0000
Manifest next update: Tue 05 Aug 2025 01:00:41 +0000
Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: Vu4eAIneAYh7FjtU8oyYQezxuP9HIZeamPiUgRY/t1I=)
2: cadUElPbaF409FA_2Wg_Q_GYDPU.roa (hash: NuxwFEiNd/qBOlqeuoFPvUGS7VeCKWQWl9Silhu16kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:50:73:4e:c8:f8:12:69:f4:be:3c:61:23:34:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Aug 4 01:00:41 2025 GMT
Not After : Aug 5 01:00:41 2025 GMT
Subject: CN=86d92d504bb7156cb26810a07fd841e359399070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:7d:e7:a8:08:f7:27:c4:e8:00:b7:81:90:
68:ec:96:20:5f:59:3e:a4:d5:15:19:06:cc:1f:95:
1a:92:fc:88:70:e3:eb:ae:65:17:c4:95:e3:ed:b5:
dd:1e:fb:5c:cf:9a:6e:a1:88:53:0c:89:df:37:b3:
59:55:0e:00:c3:26:50:cf:fa:48:30:d6:6d:29:de:
ff:2e:db:7b:9e:db:6d:bd:4b:e4:5a:e6:2a:68:3b:
d5:bb:a1:24:8d:34:4a:6d:f7:b6:df:78:c7:e8:fb:
d4:36:5c:c3:29:29:be:7a:dc:6d:a6:47:56:d4:16:
83:a9:a2:04:85:8a:36:0f:3f:65:08:b5:02:30:c8:
1c:59:e9:ae:bc:51:bd:60:62:27:a9:88:6c:96:dd:
e2:88:fa:e9:44:f5:c4:63:c6:3c:d1:23:c4:14:c8:
0e:6d:cf:ac:ae:ec:38:f6:53:f4:b4:76:20:ec:66:
de:e0:c9:b9:67:72:10:ea:da:e8:98:41:54:b1:72:
aa:a8:4f:83:ac:4d:22:86:84:3a:37:78:40:a7:53:
23:e3:f7:cc:82:9d:20:ce:9b:bf:0c:be:34:4b:43:
37:7b:1f:8e:25:47:d7:cf:50:9e:ca:60:77:54:62:
ff:6f:3f:6f:66:61:30:b6:5d:a0:66:bd:b9:43:07:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D9:2D:50:4B:B7:15:6C:B2:68:10:A0:7F:D8:41:E3:59:39:90:70
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ee:93:57:cc:65:92:b1:0e:c5:2d:5e:ea:66:52:0f:14:0c:
b1:ee:41:87:f9:ba:7d:5d:ce:d9:81:44:f5:3b:a9:15:2b:de:
71:d4:09:70:54:f7:f5:34:39:a7:49:b3:70:6e:d7:4a:88:fa:
b8:c3:07:c8:2d:e7:e5:91:4a:87:6a:5e:3b:48:09:2e:86:49:
aa:a8:a9:8d:9f:4d:6e:00:75:af:89:d0:20:92:8c:b3:50:5c:
ac:44:51:14:93:c7:99:a5:d6:a9:06:42:c3:bf:26:94:cb:0f:
e7:31:14:ee:cb:97:fb:88:24:53:da:45:5a:7c:b9:23:14:5c:
4a:0f:55:70:2d:a5:7b:a7:5f:6f:c7:cf:56:f7:2d:9b:4c:fe:
c4:7e:9c:e5:8e:c5:b2:69:59:0f:5e:2e:29:4c:6b:8c:3d:b9:
1b:57:18:f7:0e:a0:dc:a2:8e:f3:82:43:0c:bd:db:6b:64:0c:
f0:53:85:12:9d:ac:1c:cf:a6:54:ce:32:16:98:47:30:f5:c2:
40:d7:34:d1:62:59:d0:b2:a0:36:f2:48:20:6f:f7:82:78:2f:
b1:76:cd:fa:9e:57:ab:7c:a4:f2:ca:2f:df:c6:44:7e:eb:95:
66:03:aa:b1:0a:6b:4e:2d:a8:98:6f:c8:1e:ab:de:51:bc:c2:
e5:40:98:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymFBzTsj4Emn0vjxhIzQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjA4Yjc0ZjUxMTdlZDM4MDcyM2Q5ZTQyOWVjYjRhYTUz
ODUyNWEwHhcNMjUwODA0MDEwMDQxWhcNMjUwODA1MDEwMDQxWjAzMTEwLwYDVQQD
Eyg4NmQ5MmQ1MDRiYjcxNTZjYjI2ODEwYTA3ZmQ4NDFlMzU5Mzk5MDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplt956gI9yfE6AC3gZBo7JYgX1k+
pNUVGQbMH5UakvyIcOPrrmUXxJXj7bXdHvtcz5puoYhTDInfN7NZVQ4AwyZQz/pI
MNZtKd7/Ltt7ntttvUvkWuYqaDvVu6EkjTRKbfe233jH6PvUNlzDKSm+etxtpkdW
1BaDqaIEhYo2Dz9lCLUCMMgcWemuvFG9YGInqYhslt3iiPrpRPXEY8Y80SPEFMgO
bc+sruw49lP0tHYg7Gbe4Mm5Z3IQ6tromEFUsXKqqE+DrE0ihoQ6N3hAp1Mj4/fM
gp0gzpu/DL40S0M3ex+OJUfXz1CeymB3VGL/bz9vZmEwtl2gZr25QwfxBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbZLVBLtxVssmgQoH/YQeNZOZBwMB8GA1UdIwQY
MBaAFAXwi3T1EX7TgHI9nkKey0qlOFJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZDTGRQVVJmdE9BY2oyZVFwN0xTcVU0VWxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xODg2ZDgtZDg3NC00YzI0LTkyYjkt
ZDQxYWM4MWQxY2M0LzEvQmZDTGRQVVJmdE9BY2oyZVFwN0xTcVU0VWxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xODg2ZDgtZDg3NC00YzI0LTkyYjktZDQxYWM4MWQxY2M0
LzEvQmZDTGRQVVJmdE9BY2oyZVFwN0xTcVU0VWxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAju6TV8xl
krEOxS1e6mZSDxQMse5Bh/m6fV3O2YFE9TupFSvecdQJcFT39TQ5p0mzcG7XSoj6
uMMHyC3n5ZFKh2peO0gJLoZJqqipjZ9NbgB1r4nQIJKMs1BcrERRFJPHmaXWqQZC
w78mlMsP5zEU7suX+4gkU9pFWny5IxRcSg9VcC2le6dfb8fPVvctm0z+xH6c5Y7F
smlZD14uKUxrjD25G1cY9w6g3KKO84JDDL3ba2QM8FOFEp2sHM+mVM4yFphHMPXC
QNc00WJZ0LKgNvJIIG/3gngvsXbN+p5Xq3yk8sov38ZEfuuVZgOqsQprTi2omG/I
HqveUbzC5UCYZA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:42 2025 by rpki-client