Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
File: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft (raw, json)
Hash identifier: I5nTm4zAbF7fSZZBFIm2OqIAiN3J2cVL4hmuEcoRWZY=
Subject key identifier: 5C:B3:B5:93:6E:41:53:2A:AF:52:52:0B:16:E0:79:96:53:82:DC:99
Authority key identifier: 05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
Certificate issuer: /CN=05f2748cb43862a104b56f8c6204b6209706558c
Certificate serial: 019891EC45D29DC255F9CC9724297E090361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
Manifest number: 0D11
Signing time: Sun 10 Aug 2025 03:00:37 +0000
Manifest this update: Sun 10 Aug 2025 03:00:37 +0000
Manifest next update: Mon 11 Aug 2025 03:00:37 +0000
Files and hashes: 1: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl (hash: rIzHeg30CnQ0Pqpi1A5syS+vfSE3p2HefCnP6DngMdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:ec:45:d2:9d:c2:55:f9:cc:97:24:29:7e:09:03:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f2748cb43862a104b56f8c6204b6209706558c
Validity
Not Before: Aug 10 03:00:37 2025 GMT
Not After : Aug 11 03:00:37 2025 GMT
Subject: CN=5cb3b5936e41532aaf52520b16e079965382dc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:17:b5:01:eb:e1:ee:81:53:27:83:0a:82:
76:e8:f2:22:a9:8e:c0:80:4f:bd:bf:2d:5f:de:71:
df:49:99:d6:72:1d:36:57:85:53:45:68:79:cf:c8:
55:f4:9b:ab:55:86:38:81:5c:e8:08:a3:05:b4:5d:
b0:4a:bc:85:3d:7d:9a:1a:7a:e9:37:e7:05:39:e5:
0e:4e:4a:c4:56:63:3e:ef:eb:da:e4:60:67:e1:2a:
6e:d7:95:56:45:ab:ee:d0:a9:5e:ac:2c:bc:e4:44:
a7:b0:dd:e1:63:e2:ca:08:4b:41:c9:cc:96:79:9e:
49:c7:02:b3:79:b8:6c:6f:56:3e:22:0b:69:52:0f:
5b:4c:60:52:bd:4f:37:61:48:3f:98:67:82:ee:37:
72:a7:1a:04:5b:92:93:e6:4d:91:f4:ed:7d:89:6a:
5a:73:e5:21:83:a2:88:1e:ab:81:ef:8e:90:6f:46:
5a:e1:c7:1d:32:22:b8:9e:ad:a4:f5:bf:87:61:48:
4d:7f:ab:18:d6:f0:b0:2d:a6:e3:7b:22:3f:ac:f6:
df:9b:41:45:2a:a5:6c:d1:c5:a3:cf:a2:bd:40:d8:
90:c2:4d:f0:08:9c:5c:13:03:59:30:2f:c9:5c:fa:
54:21:73:44:81:5c:0e:7f:b4:80:a8:68:0c:54:14:
9c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B3:B5:93:6E:41:53:2A:AF:52:52:0B:16:E0:79:96:53:82:DC:99
X509v3 Authority Key Identifier:
keyid:05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ca:91:1e:55:ff:c4:5c:2c:75:4b:a0:40:7b:6d:1b:03:e0:
9a:64:91:d3:8a:c6:6d:67:c1:79:7b:ee:74:f2:56:d6:6f:58:
ba:10:dc:a1:42:8f:54:cb:56:01:4c:7e:02:29:27:18:1f:f6:
19:35:17:ab:81:05:bd:63:f4:fe:55:b5:e3:49:ba:d7:a7:dd:
3d:c5:bf:c1:79:42:92:8a:58:ee:2a:d9:57:e1:56:8b:b0:38:
b5:df:b9:6f:c7:9e:b5:3c:7e:57:c3:3e:e2:14:a0:ce:f3:c9:
7b:f9:a6:e1:3b:c0:31:cc:ef:9a:d5:72:9f:fb:49:c9:d3:2f:
4d:97:b1:5c:58:45:44:db:90:f4:07:0d:73:02:ab:c2:45:c9:
53:1a:5e:38:0b:8d:32:76:db:34:87:e0:8e:14:17:82:30:db:
46:3b:01:f1:01:23:9c:4f:9e:67:ba:7a:0f:88:04:d0:b1:46:
f4:24:46:ab:a9:5c:8c:6f:ba:ae:7c:ef:a7:0e:f1:38:b8:22:
84:63:4b:d3:0d:43:0a:3a:4f:08:4d:46:83:60:e4:5f:9a:50:
c5:b0:d5:d0:09:86:51:f2:2e:9c:f1:03:48:8e:35:59:48:bd:
13:ee:a3:7d:0e:96:68:5d:e6:ce:10:17:38:a4:33:f3:65:20:
f8:75:ba:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:47:18 2025 by rpki-client