Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
File: BKf5By6LMAS6CGgfse-IwD9iCog.mft (raw, json)
Hash identifier: 4rkayRGVnTcz2/m/A0F5FhusjhsLNzbrjmBfUb2V5Yg=
Subject key identifier: DC:F5:57:FB:69:75:6C:CB:76:0E:57:39:79:D4:3F:68:F0:66:71:BE
Authority key identifier: 04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
Certificate issuer: /CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Certificate serial: 019872CF9E9AF04524AC2E179F7FEDBB8820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 02:01:05 +0000
Manifest this update: Mon 04 Aug 2025 02:01:05 +0000
Manifest next update: Tue 05 Aug 2025 02:01:05 +0000
Files and hashes: 1: BKf5By6LMAS6CGgfse-IwD9iCog.crl (hash: +upHzoKC40g10r1Ce27mVveLCIykON3QBr/VKNaais8=)
2: wSs_FD2QVb_noY_pKeQvB5Nmc4k.roa (hash: C/YIn0+2EPkhhvHnwCdIJWUCCRmG0HGZx7WYVhFFx3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:9e:9a:f0:45:24:ac:2e:17:9f:7f:ed:bb:88:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Validity
Not Before: Aug 4 02:01:05 2025 GMT
Not After : Aug 5 02:01:05 2025 GMT
Subject: CN=dcf557fb69756ccb760e573979d43f68f06671be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:f0:6d:06:c0:e5:c5:e6:67:19:fe:96:df:
b4:b1:86:9b:6a:90:87:3b:ea:e9:0f:10:fa:dd:e5:
14:4b:9c:2f:90:98:ea:3f:3d:f4:a7:84:c3:88:bf:
2d:ca:0c:b1:a2:14:b5:8c:b6:a2:aa:82:bd:af:01:
e9:7b:8a:28:a0:45:5e:c7:9e:7d:22:71:56:8f:97:
82:20:22:70:03:16:48:72:16:98:66:1e:6c:e4:82:
6a:07:e1:cc:5f:34:65:6d:6f:69:20:dd:dc:c6:71:
f8:75:c9:00:12:ba:59:43:44:ad:a9:38:c3:61:fc:
99:3b:58:38:f7:32:09:d5:73:e8:c1:18:39:45:83:
f5:6d:5b:71:9c:a7:64:37:b1:fc:9d:21:be:25:06:
c2:04:f1:08:5a:7e:49:99:86:12:97:f2:2e:e0:55:
8e:1e:77:18:32:60:f5:c6:21:89:83:97:8b:02:30:
dd:8e:c2:43:aa:13:69:2b:4b:5a:b4:e9:7c:49:e8:
ce:84:c5:7d:fc:8d:91:99:d3:fc:db:12:49:1e:74:
3f:76:c4:79:93:41:a1:08:1f:a7:79:f9:61:ac:0d:
d0:16:e6:d7:7f:d1:03:a6:89:5f:aa:c1:c7:81:f8:
69:37:f3:eb:cc:f6:76:ef:e4:5d:bf:90:cc:9b:7a:
e7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F5:57:FB:69:75:6C:CB:76:0E:57:39:79:D4:3F:68:F0:66:71:BE
X509v3 Authority Key Identifier:
keyid:04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:25:a0:1e:08:8b:b2:a8:f1:6b:5e:fe:69:01:e1:e7:e9:51:
a9:c0:51:25:7e:87:42:d0:10:33:d5:7b:aa:74:d6:83:47:f9:
19:8e:6e:ed:82:8a:6a:8f:81:83:ed:2c:60:e5:09:31:e0:0a:
72:a1:62:df:32:62:fc:8b:24:c8:05:4d:56:d0:4a:09:1e:03:
6c:5e:75:53:33:05:f0:55:91:e7:0c:30:f8:55:21:21:ec:c6:
3c:39:bc:d5:1d:c5:f0:01:c8:cd:05:ae:5d:3c:28:1e:53:07:
60:7b:30:7e:58:df:2a:68:85:e2:e5:bf:91:6f:92:72:89:ee:
a2:ff:ae:6a:17:4c:99:cf:10:41:dd:48:03:7e:ac:bc:7a:48:
ef:02:ab:02:e5:05:0d:c7:e5:e5:cb:80:43:23:8f:43:dd:9d:
79:c9:09:21:24:ba:a6:67:14:66:06:ba:c6:98:20:9b:9c:15:
22:6f:f4:fa:1b:a7:90:6c:90:1c:eb:e2:9c:17:2d:94:f7:47:
f5:da:c7:e0:36:f9:4a:cf:73:21:f4:0f:1f:f9:b3:62:86:f2:
cc:34:da:35:ec:99:d6:cb:dc:ab:9e:a9:92:20:6b:53:82:68:
7f:ac:17:e7:ac:03:81:02:24:6a:83:cb:fe:d2:2d:66:9d:3c:
69:86:08:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:55 2025 by rpki-client