Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
File: BSAFu2w9aGW4nBDzOwuZS3Svljs.mft (raw, json)
Hash identifier: pY41cdDUFQ5P9NDrsgVezSrmhVLASbQqyNuJZsJkLao=
Subject key identifier: 25:6B:7C:30:56:2C:48:25:5B:36:1B:A9:EB:75:18:0A:08:EF:95:88
Authority key identifier: 05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
Certificate issuer: /CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Certificate serial: 019873E1E879E31E6E51623C2FC8AD236F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 07:00:41 +0000
Manifest this update: Mon 04 Aug 2025 07:00:41 +0000
Manifest next update: Tue 05 Aug 2025 07:00:41 +0000
Files and hashes: 1: BSAFu2w9aGW4nBDzOwuZS3Svljs.crl (hash: lBp6wo5wA3aKaL9ZooXhisP89EhJB53aBKPHQ7zoc8c=)
2: ir1RS50i8n6-S2GFn7ZgzEJxgqk.roa (hash: c+oT6rdCWtyUihO7r4CT9JSZ34sdZ4eqqblxSm+cQz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:e8:79:e3:1e:6e:51:62:3c:2f:c8:ad:23:6f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Validity
Not Before: Aug 4 07:00:41 2025 GMT
Not After : Aug 5 07:00:41 2025 GMT
Subject: CN=256b7c30562c48255b361ba9eb75180a08ef9588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:73:9d:bf:83:21:70:5c:5e:4f:19:a1:09:
d4:ed:ae:c9:7a:46:93:a3:da:90:69:6e:5b:3b:55:
db:3f:fa:be:19:a2:ec:fc:c6:ed:fd:1a:39:55:13:
46:2b:0d:0b:3d:2b:27:94:48:74:8d:4a:96:e0:17:
19:59:87:ce:29:2c:11:ca:02:76:5e:19:f5:7b:b2:
0b:df:7a:95:39:19:1f:c0:d1:bc:50:d8:7d:03:96:
85:7b:e5:10:57:3e:38:c3:67:86:74:36:e6:37:09:
4c:53:1d:48:da:4f:16:14:0e:04:17:aa:e7:5e:9a:
94:8b:c5:b7:25:b5:62:da:ab:71:d1:d3:82:b3:cb:
15:7e:6d:ae:e8:c7:42:2c:99:55:bb:7f:d9:54:47:
38:52:a7:a0:6a:f1:b1:3e:df:de:77:40:1c:3e:c1:
93:50:bf:bc:60:c8:67:7d:40:e0:0f:3c:56:e1:70:
1a:24:cb:08:58:00:38:52:53:9d:4e:99:04:9f:b5:
86:1b:8e:7f:5f:6e:61:50:60:41:cc:61:86:97:25:
76:ba:86:8f:25:bc:d6:0e:c9:8c:53:df:3b:cd:48:
37:ed:83:ed:0c:4c:54:29:bb:9a:8f:7c:d2:b9:34:
ad:02:41:9d:48:31:f9:c6:e1:0d:f4:cc:6f:a7:ea:
79:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6B:7C:30:56:2C:48:25:5B:36:1B:A9:EB:75:18:0A:08:EF:95:88
X509v3 Authority Key Identifier:
keyid:05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:40:ce:46:e2:e9:2d:73:02:68:aa:58:9b:bc:91:63:ac:53:
35:5c:aa:e4:18:12:7d:ef:00:15:db:b1:17:ff:a4:9a:cd:f9:
63:6f:cc:06:a8:1f:6c:69:0e:a0:b0:42:d5:43:a7:76:92:a0:
c7:d3:71:8c:03:e1:f4:c1:5b:38:2e:9b:18:0d:22:6f:a4:ee:
34:67:45:75:3e:66:97:ce:95:69:87:b7:d2:1c:39:f9:26:fe:
ac:0f:41:32:e8:d4:d1:f5:3d:60:ac:d3:43:7d:46:a1:9e:c8:
96:e5:bc:2d:7b:c8:df:cf:b7:95:cc:a0:fe:68:f4:13:ec:b2:
44:e9:18:6f:c4:76:42:ab:71:37:a9:bd:5b:72:99:85:97:03:
5b:01:26:49:45:9c:8d:a0:e4:78:99:8c:95:c3:8a:ef:04:32:
dc:65:cd:e7:8b:aa:0f:d8:c0:35:63:35:b8:77:86:37:53:31:
85:db:d6:7d:17:4a:bc:af:de:c7:38:52:9f:26:96:4d:47:67:
14:a0:ed:81:7b:3b:af:ca:b3:3e:fb:b1:6c:77:f8:25:92:11:
a4:59:78:56:42:9f:fc:78:1d:87:eb:13:81:4d:c4:e3:da:27:
30:78:20:be:9e:2d:ec:4d:ca:6d:82:eb:b5:3d:72:ac:29:d5:
05:26:c6:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4eh54x5uUWI8L8itI2+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MjAwNWJiNmMzZDY4NjViODljMTBmMzNiMGI5OTRiNzRh
Zjk2M2IwHhcNMjUwODA0MDcwMDQxWhcNMjUwODA1MDcwMDQxWjAzMTEwLwYDVQQD
EygyNTZiN2MzMDU2MmM0ODI1NWIzNjFiYTllYjc1MTgwYTA4ZWY5NTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB9znb+DIXBcXk8ZoQnU7a7JekaT
o9qQaW5bO1XbP/q+GaLs/Mbt/Ro5VRNGKw0LPSsnlEh0jUqW4BcZWYfOKSwRygJ2
Xhn1e7IL33qVORkfwNG8UNh9A5aFe+UQVz44w2eGdDbmNwlMUx1I2k8WFA4EF6rn
XpqUi8W3JbVi2qtx0dOCs8sVfm2u6MdCLJlVu3/ZVEc4UqegavGxPt/ed0AcPsGT
UL+8YMhnfUDgDzxW4XAaJMsIWAA4UlOdTpkEn7WGG45/X25hUGBBzGGGlyV2uoaP
JbzWDsmMU987zUg37YPtDExUKbuaj3zSuTStAkGdSDH5xuEN9Mxvp+p51QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVrfDBWLEglWzYbqet1GAoI75WIMB8GA1UdIwQY
MBaAFAUgBbtsPWhluJwQ8zsLmUt0r5Y7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlNBRnUydzlhR1c0bkJEek93dVpTM1N2bGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84M2ViMDktM2ExNC00NTViLTg4OTUt
YmEwYTc2ZjQzNzA0LzEvQlNBRnUydzlhR1c0bkJEek93dVpTM1N2bGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84M2ViMDktM2ExNC00NTViLTg4OTUtYmEwYTc2ZjQzNzA0
LzEvQlNBRnUydzlhR1c0bkJEek93dVpTM1N2bGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUDORuLp
LXMCaKpYm7yRY6xTNVyq5BgSfe8AFduxF/+kms35Y2/MBqgfbGkOoLBC1UOndpKg
x9NxjAPh9MFbOC6bGA0ib6TuNGdFdT5ml86VaYe30hw5+Sb+rA9BMujU0fU9YKzT
Q31GoZ7IluW8LXvI38+3lcyg/mj0E+yyROkYb8R2QqtxN6m9W3KZhZcDWwEmSUWc
jaDkeJmMlcOK7wQy3GXN54uqD9jANWM1uHeGN1MxhdvWfRdKvK/exzhSnyaWTUdn
FKDtgXs7r8qzPvuxbHf4JZIRpFl4VkKf/Hgdh+sTgU3E49onMHggvp4t7E3KbYLr
tT1yrCnVBSbG/Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:01 2025 by rpki-client