Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
File: BFxfO7gRkXIMDd-LPPNNkdq04dM.mft (raw, json)
Hash identifier: 6RNqVMg+9lIiMMc0LK9JtN1bV/i7uNzE2Xl6jpgMtzs=
Subject key identifier: 65:95:BA:AD:74:90:A9:AC:6B:75:CD:60:FC:64:AD:4B:83:C9:AB:6B
Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
Certificate issuer: /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Certificate serial: 01987750D88A577D11AC7B0D81E9ACEBE2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 23:00:43 +0000
Manifest this update: Mon 04 Aug 2025 23:00:43 +0000
Manifest next update: Tue 05 Aug 2025 23:00:43 +0000
Files and hashes: 1: A_nsrTfQ71u0UrzEQ6SNUm_3G2U.roa (hash: SR5+osvS+osGxE2DJ2TfgoITwWWe9DsyWc/ATbIOEEM=)
2: BFxfO7gRkXIMDd-LPPNNkdq04dM.crl (hash: DSKwjgpQL5uIw6NAtfZbA8DRQ1CShEU88DIU27dR0ZA=)
3: IDbbddFc14SqQa3mZmElYtVTmQY.roa (hash: 27Hv+jULUbGOWBtj+jEisHYpbRo4f4IxlnI8y0WtgFs=)
4: rk3ppAboxW06rE2L20ZKn9egqD8.roa (hash: 0BLnKXlmHhtn6//IbmeMPsDs46xu8jcRpBXK8EK9HJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:50:d8:8a:57:7d:11:ac:7b:0d:81:e9:ac:eb:e2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Validity
Not Before: Aug 4 23:00:43 2025 GMT
Not After : Aug 5 23:00:43 2025 GMT
Subject: CN=6595baad7490a9ac6b75cd60fc64ad4b83c9ab6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:b4:0a:db:ce:58:51:12:8f:76:69:d8:f6:
81:9f:c2:b3:ca:83:88:e3:3f:5e:01:27:fa:17:8f:
f5:6b:de:a3:71:d8:58:8d:69:61:8a:4d:b4:f7:b3:
0e:fd:08:0f:ff:04:96:9a:3a:3c:09:a4:02:78:06:
41:db:04:e9:4d:4f:1d:8a:ff:7e:4e:f2:89:ab:68:
b4:20:ff:cb:7e:99:97:ed:6b:c1:72:6d:56:bf:39:
6f:a9:97:42:ad:fc:d8:cd:58:f5:42:fc:7d:57:bc:
c0:2e:1e:a8:cb:39:70:ef:59:ec:9b:53:7d:ea:c3:
22:77:72:1e:0c:20:c3:24:f9:09:98:fc:06:d4:fb:
b2:68:81:f7:e9:9b:a0:58:e0:14:a6:11:53:2d:0c:
61:87:0d:47:ee:55:2b:b3:66:3d:63:b8:0a:c3:5e:
a3:98:39:11:c9:1b:d2:00:54:23:db:18:ad:22:0d:
93:65:25:92:2b:0e:c3:b2:e4:72:24:c8:8b:f3:07:
7a:85:23:8d:df:cc:64:fc:10:a1:3d:6a:59:e7:f6:
db:5b:d9:04:2b:9a:c7:50:ea:cd:43:06:3f:1d:49:
f4:a0:36:78:cb:1b:e5:14:ed:2d:18:7b:b4:21:49:
2b:33:bb:1b:82:30:dd:2f:3c:d7:57:40:82:e7:98:
7b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:95:BA:AD:74:90:A9:AC:6B:75:CD:60:FC:64:AD:4B:83:C9:AB:6B
X509v3 Authority Key Identifier:
keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fd:5a:88:8a:93:1c:b5:2b:9a:da:5e:2c:20:cd:28:74:f9:
5c:b8:87:23:2c:86:8b:0e:a9:4b:2f:24:2a:48:a9:15:05:97:
71:e0:d8:e1:2e:a0:90:cd:2f:1f:d9:67:8f:3a:45:ea:cc:31:
8e:3c:87:02:69:f2:de:54:0a:92:98:6f:19:51:38:a2:65:3a:
9e:2b:49:c2:79:1b:30:56:4c:eb:9f:37:a6:5a:cf:d1:0d:cd:
b0:61:5b:3a:14:ac:7e:84:bd:0e:bf:be:92:74:a2:ab:30:de:
db:97:2f:82:87:32:99:e6:f2:d8:fd:4c:71:08:e6:e7:62:4d:
d6:aa:d0:b6:c5:6d:8d:6a:56:9c:a5:c9:1d:f7:87:46:21:24:
b6:d4:5b:a1:81:9c:17:9f:36:11:3c:c7:95:8e:67:c8:47:66:
1a:8a:50:c8:6d:8b:2c:e9:1d:86:b4:93:cf:cb:cb:ce:fc:03:
2a:18:f7:d7:73:1d:ac:49:a4:a8:19:f1:f3:5b:da:e0:e1:54:
1d:ce:ec:cb:5f:80:81:ef:d0:d8:0f:0b:07:f2:bd:d2:26:1d:
d4:b2:4d:6f:49:7d:98:98:d4:16:b6:fb:5b:72:90:d0:37:02:
52:f2:e7:1f:e4:4b:a8:a9:d0:14:72:65:0f:70:29:71:41:3f:
40:5f:cd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:14:30 2025 by rpki-client