
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json)
Hash identifier: x82Thd6uylKshfbGnk+0aIpGCTiQ7HbUt6o9wJzRdNI=
Subject key identifier: 04:75:D8:D8:0A:2E:33:EB:43:36:1D:C8:E5:34:0E:AD:02:96:AC:54
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 0198481B8D7AACD6562BAF87B7BC11BD0CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 19:00:21 +0000
Manifest this update: Sat 26 Jul 2025 19:00:21 +0000
Manifest next update: Sun 27 Jul 2025 19:00:21 +0000
Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: xBC8+9m18asZcjnUyawxF2uA2swXNuixJ3Lquuv8jwQ=)
2: cadUElPbaF409FA_2Wg_Q_GYDPU.roa (hash: NuxwFEiNd/qBOlqeuoFPvUGS7VeCKWQWl9Silhu16kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:8d:7a:ac:d6:56:2b:af:87:b7:bc:11:bd:0c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Jul 26 19:00:21 2025 GMT
Not After : Jul 27 19:00:21 2025 GMT
Subject: CN=0475d8d80a2e33eb43361dc8e5340ead0296ac54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:ac:6e:e5:0e:bf:f3:5f:0f:9f:0a:7a:75:
33:27:c7:07:5c:a5:23:0b:9a:3b:15:ab:7f:9a:3f:
54:54:34:ab:be:09:ad:4f:da:25:c9:7f:df:79:63:
db:5c:70:47:b0:e5:da:80:31:25:0c:a0:91:69:63:
b3:b4:98:48:9e:f4:33:81:e2:e5:85:9b:99:1b:f1:
43:c0:70:fa:88:f0:0f:ad:74:54:8b:a3:71:97:c0:
0d:05:f3:3f:6f:0b:7f:c4:79:1a:64:b9:5a:46:b1:
f3:8e:36:50:28:89:96:78:88:76:d5:4a:81:c3:cd:
f2:18:e7:f2:bf:0a:33:21:74:92:eb:76:9c:28:55:
93:2c:8f:8c:bd:2e:f4:cb:41:8d:c2:0c:b1:46:4d:
16:3e:61:e4:46:f5:a7:29:a2:49:e0:25:61:fb:1e:
2d:7a:55:01:3d:20:2b:b0:20:87:18:09:b6:e3:2c:
69:19:56:c3:78:00:75:f1:36:3c:bd:08:34:d7:06:
8f:ca:02:3b:d1:b6:26:9d:ac:c6:f3:6f:48:21:4e:
f5:ed:ee:3d:0e:29:6a:80:8f:f4:b2:37:04:0d:56:
11:9d:ea:6b:05:e9:01:a9:ed:e9:e0:77:c7:69:9d:
88:8a:e1:26:27:5e:50:f5:06:5c:ed:4a:70:2d:d9:
8b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:75:D8:D8:0A:2E:33:EB:43:36:1D:C8:E5:34:0E:AD:02:96:AC:54
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:94:f1:c3:44:dc:91:94:75:79:a5:36:86:ad:6c:31:c0:1c:
25:50:e4:eb:b5:e0:e1:ac:35:83:26:4a:48:0c:39:3f:ad:87:
9d:8e:8a:9c:15:66:b6:82:8c:99:47:c0:52:45:7e:71:76:de:
17:55:a4:7f:6c:f4:15:89:bf:47:b7:af:47:c7:4d:51:bc:88:
20:c9:5e:9b:9f:52:91:4b:ae:3c:f1:74:1a:21:ef:df:9c:71:
11:26:f2:f1:9a:bb:f8:9b:af:3b:9b:7f:0d:e9:b2:27:78:8e:
ae:0a:17:89:d1:75:a5:c1:aa:bb:c8:4a:0e:e2:9a:ee:97:da:
fe:50:ef:30:2c:a7:25:a2:63:6a:9c:41:9f:fa:14:da:a6:af:
1a:9f:9e:24:d8:a3:9b:4c:dc:4e:e3:0a:97:10:16:31:b5:e1:
0d:c1:24:0f:ad:dc:e6:71:29:03:45:f0:79:bf:bb:42:a6:89:
14:63:56:12:44:89:4f:97:a7:09:43:0a:e9:de:69:4d:07:3c:
54:f1:b7:4b:a6:83:b2:24:fb:db:fb:43:b7:4c:7a:e0:bd:ef:
ec:6f:6d:ad:83:dd:29:26:ce:11:b5:8d:92:26:ed:e4:54:64:
fb:23:83:1e:f2:61:75:5f:d8:df:2a:49:73:91:a9:3a:ed:1b:
ae:65:d8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:00:10 2025 by rpki-client