Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: BZ7hql9ignqOIolFZDugrnGlV47ERGoBJ2F6qz1RQuw=
Subject key identifier: 5A:6D:CE:E4:FB:CF:6C:A6:FB:6E:E7:E4:BA:88:16:1B:DF:49:59:1B
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 019A4F2B235FACCC12D88755E5C98E8C5596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 1654
Signing time: Tue 04 Nov 2025 14:00:18 +0000
Manifest this update: Tue 04 Nov 2025 14:00:18 +0000
Manifest next update: Wed 05 Nov 2025 14:00:18 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: pXye0RPKuNgAmGTbhIhAirg9eoZvTCgPtpQL7Q00I48=)
2: fNJzWMxwIRs-oxYj6gVLzdXlR9o.roa (hash: 2scd04V5Cfx10HVTv5lVQAKj0cVcY+kOPgXcQil/rZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:23:5f:ac:cc:12:d8:87:55:e5:c9:8e:8c:55:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Nov 4 14:00:18 2025 GMT
Not After : Nov 5 14:00:18 2025 GMT
Subject: CN=5a6dcee4fbcf6ca6fb6ee7e4ba88161bdf49591b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:eb:31:54:cb:c6:ad:49:4c:35:d4:33:97:88:
84:54:c5:46:2e:68:36:00:57:86:50:d4:4c:bb:51:
ca:36:1a:51:7d:7d:e5:c8:53:a1:8a:3b:0e:b1:cd:
d1:ba:fb:8a:50:85:fe:d1:cf:5b:d2:e2:fe:d4:33:
09:31:07:a0:a2:ac:a4:2e:ca:51:7d:30:93:3e:e8:
31:b5:33:ca:0b:af:0e:c6:a1:77:b3:80:27:bd:d0:
07:fb:63:5f:22:80:c6:6a:c6:c7:eb:15:21:df:82:
01:7f:92:5b:3a:2b:f5:87:20:92:88:41:fc:2a:7c:
f7:13:8c:b2:50:d7:a7:a5:cb:64:c5:91:02:c6:e9:
89:84:b7:90:44:d4:3f:d4:dd:c1:aa:16:58:19:f6:
db:f5:f9:58:7b:6d:8f:1e:10:18:00:a2:09:67:c5:
18:22:72:e4:d6:7a:11:3d:62:24:da:32:e8:42:84:
34:bd:c4:5e:be:04:d7:85:f1:e7:19:36:e1:02:18:
af:21:e7:c9:24:25:3b:1c:f7:ed:73:35:f4:3e:0c:
e1:96:07:2d:e9:6c:25:49:9e:69:16:bb:c8:bf:da:
67:dd:af:7d:38:da:1c:44:49:77:23:85:fd:6e:7a:
45:3f:d1:5c:d8:34:c2:0c:d8:e2:b8:ad:9a:c3:03:
d9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6D:CE:E4:FB:CF:6C:A6:FB:6E:E7:E4:BA:88:16:1B:DF:49:59:1B
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:43:1a:e6:1d:c6:3b:d4:90:8c:67:d7:88:96:7c:f7:9e:ee:
50:b0:8b:5d:40:2a:dd:db:0d:66:39:36:95:02:fa:ba:df:cf:
09:fe:dc:ae:90:43:f3:44:af:75:64:ae:cb:28:ae:de:44:b5:
73:40:2c:4c:89:fe:e3:9b:f6:fa:bd:1f:89:ef:72:f5:a3:a6:
71:3a:70:74:df:73:b0:32:96:9b:2f:98:17:81:39:25:93:8f:
58:61:82:11:75:cf:e0:9c:20:e1:52:34:52:c3:df:4f:33:39:
48:10:68:f3:67:4d:c1:08:e2:6c:f3:78:92:b2:ee:e4:2a:d7:
af:ff:7b:ae:ab:6a:7e:20:79:25:58:1c:ac:ca:1b:e0:a2:8d:
89:5f:df:01:e6:ff:f8:5e:4c:8b:60:6f:3b:65:a9:24:62:26:
64:6c:3f:5b:66:df:4b:87:ea:76:39:92:90:ef:88:80:04:42:
a5:a3:96:1c:a0:92:29:2f:58:f2:da:73:db:25:76:1f:f4:cb:
ce:c7:19:59:23:13:81:5d:dd:bf:77:47:0b:82:22:17:58:81:
37:31:29:d2:23:94:1b:81:14:c3:40:cf:70:ff:95:6b:4c:6c:
e1:b6:5d:e2:25:25:c2:59:0a:c8:f8:ae:bc:b4:62:d2:13:54:
4b:32:21:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:59:42 2025 by rpki-client