Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
File: BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json)
Hash identifier: M9fJ/yUESGxx0B/P057i9WQYQ9lb6w9eUorOoQZuFEI=
Subject key identifier: 8D:7F:12:FE:EE:7C:91:4D:78:1C:67:92:CF:DE:82:85:6B:6F:5A:AD
Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Certificate serial: 01987DF8B2E40A89336AD42A88F07B932321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
Manifest number: 033D
Signing time: Wed 06 Aug 2025 06:01:47 +0000
Manifest this update: Wed 06 Aug 2025 06:01:47 +0000
Manifest next update: Thu 07 Aug 2025 06:01:47 +0000
Files and hashes: 1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: JvTewqwhvcOQyjPs8PtL3uoKzBhVDcHX42YTWb21f8A=)
2: xRcmRRI7cJbjjDDpwXYPAzS-KSc.roa (hash: +JILVppUk45vww/N3lSTziP5G1U9pzpXHROPOpD0HAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:b2:e4:0a:89:33:6a:d4:2a:88:f0:7b:93:23:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Validity
Not Before: Aug 6 06:01:47 2025 GMT
Not After : Aug 7 06:01:47 2025 GMT
Subject: CN=8d7f12feee7c914d781c6792cfde82856b6f5aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:e0:77:54:62:d5:20:d2:b3:6f:04:7b:85:
b5:39:41:25:20:91:d0:52:c4:d3:4c:7d:58:6d:f2:
9b:9e:f1:64:00:51:4f:9c:38:9a:6b:10:19:72:70:
78:cb:0d:d0:35:c4:b6:a4:da:74:91:aa:37:e0:2b:
6d:cc:d4:e9:1b:c0:f7:ca:3e:c1:2d:1a:6f:a3:67:
b0:a7:1d:8b:e6:6a:a8:7b:d1:84:48:84:84:2c:28:
cc:89:7f:1d:b5:02:11:c6:d2:39:fb:26:6f:3f:35:
ec:93:57:3f:be:ad:98:ca:67:55:dc:94:d7:61:bc:
8f:13:89:57:d6:4d:c3:a5:e9:22:50:2f:b0:79:57:
4c:8e:fa:48:64:fc:ba:44:b2:9f:62:51:bc:bb:66:
06:7b:bd:d4:34:a1:76:eb:ca:4f:be:7b:c8:ef:4e:
ed:31:45:76:f2:46:fd:1b:d4:37:bd:ce:2e:b3:17:
45:30:41:a7:9b:96:c2:07:2d:bb:7b:ac:85:01:bb:
bf:97:d4:0f:68:0b:9a:e5:47:f8:fb:48:a4:8b:e6:
8b:12:28:df:a6:f3:6c:09:34:3f:4f:ec:52:67:dd:
de:fe:7a:ff:29:ea:54:d0:19:2c:45:a6:b0:53:15:
cf:df:21:0a:a0:00:2b:ba:05:6d:b5:29:bf:37:fb:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7F:12:FE:EE:7C:91:4D:78:1C:67:92:CF:DE:82:85:6B:6F:5A:AD
X509v3 Authority Key Identifier:
keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5e:69:56:a6:27:1f:2b:7c:f3:b9:c3:5f:bc:8c:92:29:ff:
4b:7f:0d:63:05:50:3f:be:a1:d6:93:31:cb:09:1c:0b:47:bd:
76:5f:97:79:91:6e:5b:ce:79:fa:03:c0:72:42:87:cf:14:a7:
0a:e1:12:bf:fa:0c:a3:53:cd:0f:ff:1f:27:97:2f:41:66:32:
47:69:d1:b5:2b:b5:ea:d7:f0:b5:f1:bd:bf:9d:9d:83:76:7e:
c7:90:13:c9:04:b5:98:79:c3:43:a9:9b:4e:86:b4:5d:d7:4c:
d4:75:bc:15:44:36:93:bb:f3:77:6d:09:a5:8a:fe:60:3e:24:
c0:9b:07:f9:aa:11:c6:32:3d:92:71:02:e5:c1:0e:fb:1a:9e:
7a:f1:b0:6d:23:66:da:6d:f9:b0:4d:b9:00:6b:6a:89:4a:6a:
c5:20:1d:bb:9f:2b:7f:86:7e:18:29:14:d5:bb:6b:16:47:d6:
de:85:14:da:cb:34:92:59:b1:68:01:50:aa:7a:73:d8:15:2b:
09:df:e8:ad:3b:11:14:9c:02:57:20:15:fe:d4:a9:54:37:26:
51:62:5a:66:ff:c4:18:12:c0:8c:05:5e:a6:2c:4f:5f:e6:68:
a4:ed:12:83:7f:f3:4f:c7:4d:8d:74:2f:c6:94:ba:24:1d:5c:
9b:89:55:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:11:14 2025 by rpki-client