Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
File: BADXfvnqDtKVK-L2D6067MLhaKw.mft (raw, json)
Hash identifier: +xRRuY3k2f0pBRaL94uiGpmT7iQ31rnOv0XgPhQAR+s=
Subject key identifier: 21:1B:81:40:D6:E1:3E:BF:15:C3:F1:2C:00:60:41:EA:FC:2E:99:5E
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial: 019889FCAF447BBEC3E2C6311135266B8112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
Manifest number: 0943
Signing time: Fri 08 Aug 2025 14:01:35 +0000
Manifest this update: Fri 08 Aug 2025 14:01:35 +0000
Manifest next update: Sat 09 Aug 2025 14:01:35 +0000
Files and hashes: 1: BADXfvnqDtKVK-L2D6067MLhaKw.crl (hash: dwpbwUOBMsEatqG85WTJ0velJEq7o701cyp+lZQ3NYg=)
2: jgMTcyosgm7FIVLeAPtI1RSjhVU.roa (hash: g2bFBV/1uz4ha4E7siEdgYNeYk8szBDsVWWKSTGKJE4=)
3: pO3Lr4jiN61Kn49lUDVd_S0OVvM.roa (hash: mIykw56twR66Kx0cZsZgXBwa4bIpNsTJWsybM0eym2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fc:af:44:7b:be:c3:e2:c6:31:11:35:26:6b:81:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Validity
Not Before: Aug 8 14:01:35 2025 GMT
Not After : Aug 9 14:01:35 2025 GMT
Subject: CN=211b8140d6e13ebf15c3f12c006041eafc2e995e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d8:a7:d3:2d:fe:28:f3:b8:9a:66:70:81:8a:
78:f4:bd:30:d2:f0:8e:86:f6:21:f6:c2:35:ca:9d:
97:a6:c0:61:8a:48:95:6d:1e:5f:fb:21:a1:9a:5d:
da:54:6c:a4:27:b2:98:f0:db:7d:4a:46:9b:d8:66:
47:5b:7c:cb:3b:47:70:1e:e8:f1:ae:b4:84:fc:c8:
56:5e:6d:59:44:e2:42:84:55:76:2c:a3:d4:f9:f3:
a1:ca:2a:12:d4:0e:12:b8:aa:6f:af:20:1c:06:cd:
5f:37:fc:93:22:b1:c2:a1:f1:f6:b8:3d:71:88:81:
89:48:23:b6:63:77:b5:10:5a:f1:b3:2b:bc:8b:e4:
5d:dd:c2:92:39:59:b6:5e:d9:59:47:14:82:c4:40:
f5:65:5c:27:60:d8:7c:e8:72:bb:0f:e0:66:ca:4f:
d4:50:bf:4b:8f:e5:fa:ce:c6:48:8f:f1:eb:b5:47:
a2:e3:cb:3f:d3:0d:5f:07:92:51:7d:24:f1:ef:7c:
72:1a:a0:50:05:24:57:1d:a3:6c:4b:54:5e:31:ac:
8d:ac:e1:7c:42:c3:5e:c9:89:f1:69:cf:ed:f1:6d:
d1:a0:1e:8f:f3:8b:c9:8c:8f:8f:cf:69:e4:5f:c4:
df:70:42:19:b7:96:eb:48:1a:54:1e:8b:2b:37:b3:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1B:81:40:D6:E1:3E:BF:15:C3:F1:2C:00:60:41:EA:FC:2E:99:5E
X509v3 Authority Key Identifier:
keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:25:10:37:f2:58:4d:71:cf:f1:ed:a5:77:06:1b:d1:af:b4:
59:d2:56:84:66:63:4d:e6:10:8f:55:31:70:21:3e:2a:37:6b:
49:0c:69:d8:09:c0:34:bf:75:65:63:6a:55:4e:c6:ab:1c:c5:
5c:04:59:f6:eb:b7:b7:9c:6a:d1:bf:34:b4:13:ea:bf:f2:b1:
3e:3a:42:19:7f:8d:cb:d0:e0:7a:4f:06:59:bc:a9:bc:e6:f7:
96:16:e1:32:4d:08:64:cf:7e:db:44:81:65:77:0e:c3:bb:67:
0f:bb:51:04:06:43:0a:b2:4c:3c:15:ed:35:ed:4a:ae:15:e4:
0d:03:4b:db:d8:b1:85:34:64:ce:55:54:34:80:25:1f:94:c3:
55:af:f6:5c:e8:a8:e8:0e:ca:5f:32:05:7c:7a:98:b1:67:93:
14:cf:ca:0b:6d:db:44:80:a0:fd:28:eb:0a:6c:d1:48:fc:16:
5b:56:01:23:66:20:bc:f0:85:49:e1:90:e1:80:4a:cd:e7:92:
c1:55:10:d7:b1:a0:81:ce:75:b6:41:08:36:18:5f:60:92:41:
01:bd:d9:53:ce:78:d7:34:89:1d:6c:d0:dc:6d:af:a0:4c:10:
28:45:08:aa:b3:17:29:99:88:84:83:00:7d:58:5b:47:f9:8d:
c9:3c:6e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:24:38 2025 by rpki-client