Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier: O7jnwNIJjPX8Ik7G/AIO9Jmq2EN5GylEmNa8NSpGRb4=
Subject key identifier: F9:5C:05:D7:50:E3:5D:E1:67:2D:4F:D8:21:59:26:75:28:AC:81:5D
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 01988B7C9146646BF6F2AEDA357669E6C0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number: 1563
Signing time: Fri 08 Aug 2025 21:00:53 +0000
Manifest this update: Fri 08 Aug 2025 21:00:53 +0000
Manifest next update: Sat 09 Aug 2025 21:00:53 +0000
Files and hashes: 1: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: Bvx3axVXCOyZU3mPZ2pBNcZxybcL5n16QBsU1AjwZek=)
2: CLXmnDFSTo8gYOSfsi36Eul40PU.roa (hash: 8Z8KtVhkqNicLx/HNFdK6oyXYk9JSXXv8S9J27mq/xY=)
3: lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa (hash: 1gPUwLHqyRYBWV9FA/ZpZB+VDiIwSRS3XaQWbg+vKSc=)
4: pzYaLDX-85nYF2riSdG9v-AKZYM.roa (hash: EygpfdGwPkKz8M66wN+etr5plBuJkHzB1mglzx/9MuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:91:46:64:6b:f6:f2:ae:da:35:76:69:e6:c0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: Aug 8 21:00:53 2025 GMT
Not After : Aug 9 21:00:53 2025 GMT
Subject: CN=f95c05d750e35de1672d4fd82159267528ac815d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:ea:f9:06:da:b8:f1:d4:5d:b9:d8:a3:6f:
8b:75:4c:e2:48:ac:43:0e:91:e3:e2:7e:de:8a:f5:
03:b0:91:77:22:db:62:56:15:26:e7:8f:23:5a:7a:
bd:09:5f:f9:cd:c2:8d:2f:e4:8a:e4:70:80:27:66:
82:26:79:c6:bc:7c:e9:a8:6d:74:8e:dc:76:f2:51:
ab:aa:37:bf:c5:50:b8:d3:5b:ba:5b:44:2d:5a:ff:
21:fc:7c:79:fc:66:3d:c3:ad:00:7e:d8:8f:c7:db:
8f:b6:f1:c0:99:3b:e6:5d:71:ce:57:60:ec:f7:73:
d0:f2:f4:c8:75:3b:6a:4c:9c:f1:5d:8b:00:f8:eb:
8a:77:62:36:78:44:05:db:44:78:2d:85:01:82:13:
d8:e8:c4:c9:05:26:8a:03:06:6b:0c:6b:07:bb:a2:
ad:ca:c4:51:a0:11:f6:a8:6c:5e:0c:93:eb:79:d2:
8a:d7:d1:32:d9:7a:c1:4f:79:1e:9e:c8:45:de:d7:
d9:98:4b:2e:6a:bf:b7:95:ec:f0:87:b5:8c:44:18:
da:0d:b2:7c:9a:38:a6:97:92:63:4f:35:72:78:93:
5f:66:c5:6a:10:5f:30:33:51:14:f3:bf:de:c0:36:
77:ae:f2:14:ca:83:b1:7a:be:dd:c2:29:aa:82:11:
73:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5C:05:D7:50:E3:5D:E1:67:2D:4F:D8:21:59:26:75:28:AC:81:5D
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:65:23:7e:08:7d:d5:9d:35:d5:df:37:93:48:a9:e9:bb:29:
b1:b3:f7:56:bf:e4:ae:68:95:e8:37:01:1f:55:e6:04:7c:ba:
73:b5:9c:4e:cc:62:3d:dd:7d:e9:60:7e:25:00:ff:9a:42:ed:
96:c0:b6:dd:0f:18:50:49:83:cf:f2:ef:19:22:dc:d3:0f:f5:
1c:ed:03:1d:d8:33:68:a6:ef:eb:2a:f2:8e:dc:2d:b4:33:b8:
8c:83:73:5f:76:8f:10:d3:7e:86:c2:62:68:55:68:e0:b4:c6:
3f:4f:84:92:ff:d8:c4:41:5c:dd:28:fd:2a:bd:e9:b9:77:6f:
fe:19:0b:a8:51:2a:13:af:fe:63:d5:ac:3c:e0:83:36:d4:5c:
e4:54:28:2d:93:3a:e3:9a:a5:21:fa:4f:c7:96:07:f7:d6:9c:
de:bf:e1:29:8d:97:f0:db:48:a6:89:26:b3:95:d8:dd:7b:c4:
5e:49:4e:93:78:1d:b6:12:f5:ed:a8:68:15:3d:0b:7f:17:e0:
49:20:38:92:0e:c7:e7:11:ec:da:d7:c2:fc:63:2b:f3:63:14:
9f:3c:51:1a:ab:f3:2a:db:94:c6:6c:f7:13:13:bb:be:36:bb:
aa:b9:0e:e7:1f:9c:3d:bc:0a:40:d9:09:9b:79:b4:03:3f:44:
4a:00:5b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:49:00 2025 by rpki-client