Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
File: BfWa7cKCluKRck95N954jichZAg.mft (raw, json)
Hash identifier: K36dJNEqzUmVR+1QnY32ZSnzb849FFHP6TW8A386Hfs=
Subject key identifier: 53:DE:1E:5D:28:FC:0F:ED:C2:FE:68:84:7E:31:DE:70:A1:9E:99:4D
Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
Certificate issuer: /CN=05f59aedc28296e291724f7937de788e27216408
Certificate serial: 019A4EF4CB572D307FBF2C94B26D720B53B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
Manifest number: 162A
Signing time: Tue 04 Nov 2025 13:00:56 +0000
Manifest this update: Tue 04 Nov 2025 13:00:56 +0000
Manifest next update: Wed 05 Nov 2025 13:00:56 +0000
Files and hashes: 1: BfWa7cKCluKRck95N954jichZAg.crl (hash: x9XOVK8sW9uYFQLKj9is1SgxiaVmEcYcFd894ktLjjE=)
2: u4-8TJgeQH4fa-D9xZl4ZB3jNoQ.roa (hash: tT+Wu4e7mtchTUuSJdCNjA8Yykw8lNY7Bv1xK7SFPsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:cb:57:2d:30:7f:bf:2c:94:b2:6d:72:0b:53:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f59aedc28296e291724f7937de788e27216408
Validity
Not Before: Nov 4 13:00:56 2025 GMT
Not After : Nov 5 13:00:56 2025 GMT
Subject: CN=53de1e5d28fc0fedc2fe68847e31de70a19e994d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:19:e2:40:5a:5f:3a:f5:cb:0b:91:b9:bf:
11:cf:b6:d3:5e:8e:26:b6:8b:cc:16:47:b3:b2:35:
38:1a:6d:5e:4c:77:13:00:31:54:45:85:f6:80:eb:
cc:48:50:9a:bd:c3:f3:57:d0:b1:c9:ec:74:b0:cb:
7c:c9:49:e5:cb:fd:3c:84:58:c6:f1:f3:44:20:83:
61:15:55:60:3c:0f:50:d3:89:7a:06:98:c7:00:3f:
6b:2a:6d:2c:b5:28:0b:2d:70:19:39:35:b4:30:a1:
36:07:33:28:01:c4:8f:96:ee:02:ba:7f:b7:8a:e9:
c1:ae:ef:12:2c:28:16:3a:7b:58:c4:f1:72:1d:72:
bf:b3:1d:8d:7a:ec:c6:0f:0c:5c:f8:68:2e:4d:ae:
50:6e:8f:b2:ce:f9:0a:29:48:57:c5:57:df:22:70:
74:fc:92:63:12:6a:22:52:17:a6:1e:d1:f2:b2:59:
22:b6:cb:23:ab:99:a7:f0:18:ae:e4:24:11:c9:a2:
90:2b:71:0e:1b:a3:8d:45:4d:1b:8a:b8:9d:36:fe:
a9:f0:10:d1:c4:97:a3:0c:3f:4a:10:3a:78:40:9b:
91:0f:d9:e6:8d:56:84:6e:df:6f:c7:ae:02:0b:61:
a2:e8:6d:e3:80:5c:83:c8:7e:a9:ca:58:91:76:c3:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DE:1E:5D:28:FC:0F:ED:C2:FE:68:84:7E:31:DE:70:A1:9E:99:4D
X509v3 Authority Key Identifier:
keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:17:29:00:da:4e:f0:94:30:1c:95:9c:09:dd:c2:95:db:35:
f7:88:d5:25:de:7e:d1:41:5a:54:5c:a5:37:43:0b:3d:97:11:
20:92:c5:ae:82:7d:b9:e3:e6:50:8e:5e:42:b4:2e:92:1f:18:
6f:5c:18:0d:16:45:6c:1c:e7:5c:58:36:1b:c1:ab:2e:0b:fb:
2e:1a:97:84:79:42:6f:f3:09:49:e4:95:70:af:cb:ce:56:fc:
1a:94:2e:57:23:31:01:ed:f6:07:30:66:2e:80:ad:4a:51:f8:
ef:48:fa:38:79:d5:b9:ff:53:1d:c8:9e:cd:76:61:96:de:c9:
65:3f:b1:32:3d:d0:50:06:ab:f6:a3:08:9e:15:ad:ef:d6:fa:
de:3f:54:d3:bf:b7:f5:a5:bc:8c:c5:d4:51:92:53:2a:68:dc:
51:df:d2:55:b1:e9:12:42:49:c6:ef:d4:dd:61:d8:bc:0d:33:
48:fc:5d:f6:9e:94:43:37:88:07:ed:ce:89:04:02:bc:46:81:
87:cc:37:2c:26:a7:ff:8b:32:2a:00:12:3c:4c:89:50:35:d5:
d4:de:64:91:4f:60:a7:37:11:30:12:d1:56:67:21:33:06:50:
91:98:38:7c:23:4d:8c:0d:ab:5e:2f:db:15:e2:33:b8:38:99:
63:ac:67:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:24 2025 by rpki-client