Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
File: BfWa7cKCluKRck95N954jichZAg.mft (raw, json)
Hash identifier: fwKlMQm4ndE0AmvqJYVGnU4sBfzS86tVDSIr0/H8XP8=
Subject key identifier: 83:F0:C7:71:07:1A:31:10:FC:90:44:E6:88:4F:CC:14:CF:00:12:8F
Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
Certificate issuer: /CN=05f59aedc28296e291724f7937de788e27216408
Certificate serial: 0198835530DB4080C95DAF63972CF6463077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
Manifest number: 153C
Signing time: Thu 07 Aug 2025 07:00:54 +0000
Manifest this update: Thu 07 Aug 2025 07:00:54 +0000
Manifest next update: Fri 08 Aug 2025 07:00:54 +0000
Files and hashes: 1: BfWa7cKCluKRck95N954jichZAg.crl (hash: InEYv4hjlaprs4V8QgWBizaFZmhcVmLo/BQ1Cnj7BLI=)
2: u4-8TJgeQH4fa-D9xZl4ZB3jNoQ.roa (hash: tT+Wu4e7mtchTUuSJdCNjA8Yykw8lNY7Bv1xK7SFPsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:30:db:40:80:c9:5d:af:63:97:2c:f6:46:30:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f59aedc28296e291724f7937de788e27216408
Validity
Not Before: Aug 7 07:00:54 2025 GMT
Not After : Aug 8 07:00:54 2025 GMT
Subject: CN=83f0c771071a3110fc9044e6884fcc14cf00128f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:38:96:80:73:f1:9f:1b:07:44:e5:64:71:
cb:98:a2:27:78:70:4f:0f:d1:20:4d:95:d1:de:6c:
83:82:ad:b8:8a:a4:ee:8b:d3:3b:49:b6:90:81:17:
30:5c:40:98:ef:fe:a4:39:d0:5f:30:f8:89:4a:92:
bd:ef:d2:00:de:f5:9f:3b:1e:80:e9:f0:ef:66:55:
2a:65:a2:4a:ca:33:5f:d1:96:cc:b4:d3:98:91:2c:
f1:70:8c:13:c6:2c:ab:7b:97:6a:3f:d5:7c:fb:d3:
43:0c:84:cf:bf:5f:b7:32:3f:a1:ff:c5:38:1d:79:
69:d6:8c:0e:2e:a6:a2:b0:b5:8a:e9:e4:fc:ad:2c:
f5:c3:e4:d8:44:02:a8:74:e6:fc:7c:99:13:a4:3c:
55:55:f8:a4:3a:df:cf:dd:c9:1a:55:ae:7d:2c:7a:
6b:12:fa:5f:d0:3a:32:71:d6:7e:cf:c1:55:42:3f:
f0:ab:08:68:8e:ae:d4:b1:e8:93:72:88:a3:92:13:
31:5a:a6:d9:19:4c:a2:11:bd:a3:df:bf:95:5e:aa:
49:52:3e:50:4a:ed:1c:dc:4c:7c:e6:17:67:aa:a7:
67:3d:62:b0:90:10:02:5d:04:60:35:b9:c8:e8:39:
4d:6c:79:4d:95:a2:cc:cf:0c:61:8a:88:2a:25:0c:
32:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F0:C7:71:07:1A:31:10:FC:90:44:E6:88:4F:CC:14:CF:00:12:8F
X509v3 Authority Key Identifier:
keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:04:1a:57:6d:f4:f1:44:fa:ea:91:3d:0e:45:67:ab:57:98:
88:2a:15:22:cb:e0:8c:e0:6c:b7:2a:ed:97:3c:32:c5:4b:84:
82:9a:a9:df:42:d6:62:f1:c0:2b:f5:8a:68:ba:84:dd:ae:53:
b4:00:56:da:90:24:c2:45:2b:26:e8:9f:80:c8:9f:ed:12:24:
38:67:d8:81:36:64:9e:2d:06:4f:82:91:17:b6:eb:c7:f0:76:
c3:31:87:df:52:9a:f2:57:78:dc:3c:19:83:0f:9a:03:dd:3a:
f9:6f:ef:d2:7e:38:91:15:cd:d9:6c:ed:04:28:59:e4:98:a6:
1f:ca:b3:a4:32:15:c2:06:db:22:7e:6b:03:c7:3c:77:a1:e5:
74:44:4b:7d:b2:aa:9a:0b:09:ac:04:a2:81:30:69:09:cf:03:
ba:ce:ce:4e:44:d9:ad:1f:a6:88:fc:d7:81:71:f9:c9:84:1b:
28:6e:7b:8a:d3:13:cc:59:b9:fd:1e:06:6d:44:f1:d6:78:e0:
32:d6:23:7d:db:32:8d:dd:f6:f0:d8:0a:8e:7d:19:47:f4:98:
e9:8e:9e:7b:7b:c4:bf:50:96:24:a3:35:b1:6b:46:4f:23:5d:
4a:ab:43:ad:4c:7b:93:34:fc:11:80:ae:0c:fa:e3:23:5c:d3:
3a:de:0b:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDVTDbQIDJXa9jlyz2RjB3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjU5YWVkYzI4Mjk2ZTI5MTcyNGY3OTM3ZGU3ODhlMjcy
MTY0MDgwHhcNMjUwODA3MDcwMDU0WhcNMjUwODA4MDcwMDU0WjAzMTEwLwYDVQQD
Eyg4M2YwYzc3MTA3MWEzMTEwZmM5MDQ0ZTY4ODRmY2MxNGNmMDAxMjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7s4loBz8Z8bB0TlZHHLmKIneHBP
D9EgTZXR3myDgq24iqTui9M7SbaQgRcwXECY7/6kOdBfMPiJSpK979IA3vWfOx6A
6fDvZlUqZaJKyjNf0ZbMtNOYkSzxcIwTxiyre5dqP9V8+9NDDITPv1+3Mj+h/8U4
HXlp1owOLqaisLWK6eT8rSz1w+TYRAKodOb8fJkTpDxVVfikOt/P3ckaVa59LHpr
Evpf0DoycdZ+z8FVQj/wqwhojq7UseiTcoijkhMxWqbZGUyiEb2j37+VXqpJUj5Q
Su0c3Ex85hdnqqdnPWKwkBACXQRgNbnI6DlNbHlNlaLMzwxhiogqJQwy+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPwx3EHGjEQ/JBE5ohPzBTPABKPMB8GA1UdIwQY
MBaAFAX1mu3CgpbikXJPeTfeeI4nIWQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi81ZTFkNDItMzU3NS00ZWMxLWJjN2Mt
ZDY0MzY4MjA4MTMxLzEvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi81ZTFkNDItMzU3NS00ZWMxLWJjN2MtZDY0MzY4MjA4MTMx
LzEvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0wQaV230
8UT66pE9DkVnq1eYiCoVIsvgjOBstyrtlzwyxUuEgpqp30LWYvHAK/WKaLqE3a5T
tABW2pAkwkUrJuifgMif7RIkOGfYgTZkni0GT4KRF7brx/B2wzGH31Ka8ld43DwZ
gw+aA906+W/v0n44kRXN2WztBChZ5JimH8qzpDIVwgbbIn5rA8c8d6HldERLfbKq
mgsJrASigTBpCc8Dus7OTkTZrR+miPzXgXH5yYQbKG57itMTzFm5/R4GbUTx1njg
MtYjfdsyjd328NgKjn0ZR/SY6Y6ee3vEv1CWJKM1sWtGTyNdSqtDrUx7kzT8EYCu
DPrjI1zTOt4Lew==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:25:55 2025 by rpki-client