Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: GdA847dWbjsNUXeIH5e+r4mpewh4Jlk7EgL8pqvTw2g=
Subject key identifier: 52:00:61:66:FE:3D:D5:E3:C1:72:FF:74:51:39:83:1A:C9:F5:97:BD
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 019874507CF84FF7A6724E22CE0B7AF27F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 155E
Signing time: Mon 04 Aug 2025 09:01:28 +0000
Manifest this update: Mon 04 Aug 2025 09:01:28 +0000
Manifest next update: Tue 05 Aug 2025 09:01:28 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: eHmzZchzsc6St+gWylkYS/i5mTSdWw+1H1l/TJV1wK8=)
2: fNJzWMxwIRs-oxYj6gVLzdXlR9o.roa (hash: 2scd04V5Cfx10HVTv5lVQAKj0cVcY+kOPgXcQil/rZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:7c:f8:4f:f7:a6:72:4e:22:ce:0b:7a:f2:7f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Aug 4 09:01:28 2025 GMT
Not After : Aug 5 09:01:28 2025 GMT
Subject: CN=52006166fe3dd5e3c172ff745139831ac9f597bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:76:7e:73:ad:62:53:b4:13:46:41:71:83:
50:ef:23:9a:f5:71:28:05:43:84:ab:22:17:fa:96:
42:6e:2f:43:01:3c:a3:07:e6:41:a6:9a:5a:88:a4:
26:e9:69:ae:8a:59:5e:79:0f:39:b2:0b:a2:0f:4f:
9e:5f:61:24:15:a1:76:c9:73:74:89:76:3a:42:e8:
9e:20:03:c0:18:24:53:94:69:77:9a:d3:d4:ac:5a:
7a:83:b3:6d:1c:1d:30:a4:dc:dd:6d:85:5e:52:23:
77:d7:fc:73:c0:30:7c:73:14:0f:f1:c1:08:2b:df:
9c:c0:95:81:e9:8e:7b:3c:53:8f:f4:bf:13:df:6d:
f0:25:08:5d:67:37:bf:92:4c:6c:32:b2:3f:3b:3f:
e7:61:5e:6b:f1:b8:d4:ad:7b:4b:46:4f:ac:0e:9a:
fc:66:32:ae:94:99:69:05:9c:6c:16:a6:7a:f6:18:
47:e8:e7:4f:b0:83:dd:48:f1:f6:7e:b6:46:c9:b0:
03:ab:6a:54:9b:05:cc:83:6e:5c:4a:19:a8:22:75:
42:37:ba:63:da:97:b6:d0:bf:49:9a:c1:7b:4b:c8:
cc:57:f9:9b:61:41:0d:d5:f3:41:5f:30:a2:1e:28:
2f:9d:da:ed:1e:af:35:1c:2a:48:6a:5c:5a:5a:5b:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:00:61:66:FE:3D:D5:E3:C1:72:FF:74:51:39:83:1A:C9:F5:97:BD
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9c:72:c2:39:e1:ed:06:1e:9e:8a:95:84:93:6a:35:62:cd:
ce:d8:1e:b1:09:99:83:fa:6e:e1:e4:3f:9e:32:c0:82:3d:ef:
21:a0:3f:df:51:50:ae:5f:7f:ba:63:95:1e:26:3a:2f:e3:33:
98:58:0e:2f:9f:8f:59:e1:6b:8b:1f:7f:bd:15:65:08:0e:9c:
1f:32:b0:e5:5a:59:89:da:c3:f1:c7:35:7a:3d:5c:1d:9b:14:
32:59:c2:13:dc:df:b6:de:e7:bc:56:f6:70:4d:3c:d5:31:67:
ca:a6:ca:04:72:1c:00:4d:48:0e:39:c5:bc:d3:dd:99:3e:88:
62:1b:8e:f9:ab:01:d6:0b:56:0f:79:e9:60:d6:63:66:50:aa:
01:16:b9:5a:5f:9f:c6:fb:b6:06:c4:b3:54:6e:f7:fc:e5:59:
9b:66:59:0a:04:6c:51:a6:9e:72:59:21:c5:b3:90:2a:c1:ce:
0c:4e:b1:f1:e4:40:9c:d2:7b:0c:ec:9c:1d:e3:d3:1a:a4:e8:
4f:51:74:37:d2:d7:35:b8:ec:1f:5f:c8:7c:0a:00:ec:d1:54:
41:96:7d:5c:0b:72:e2:95:4e:73:72:a7:71:a6:bf:62:aa:3c:
44:fc:23:f6:71:3c:fd:30:9d:7b:0e:22:4e:93:91:53:75:ef:
46:96:ba:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:20 2025 by rpki-client