Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
File: BAfWwkhET2tcN42w_-wPiZJW66M.mft (raw, json)
Hash identifier: jgIuuyCG3KMXuxpXhX+gH+di7w8ImnwJw/ttg1LWf7U=
Subject key identifier: 34:84:42:97:F2:45:CB:63:BD:DE:14:87:53:5C:67:07:C8:2D:9D:E2
Authority key identifier: 04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
Certificate issuer: /CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Certificate serial: 0198469B3E03CD82E1FBC020BAB7CECDA0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
Manifest number: 08D3
Signing time: Sat 26 Jul 2025 12:00:35 +0000
Manifest this update: Sat 26 Jul 2025 12:00:35 +0000
Manifest next update: Sun 27 Jul 2025 12:00:35 +0000
Files and hashes: 1: BAfWwkhET2tcN42w_-wPiZJW66M.crl (hash: Svp793oyxio7K/et6vJZQivmkQVQIhnveqbNJA5G0lM=)
2: QpIKO4ejjPjXaNQ1_KyJkWKevB8.roa (hash: e6W0MKDyzgf7+BDF2Ho9KsY3xBRYMIFdcPH8WpxhKmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:3e:03:cd:82:e1:fb:c0:20:ba:b7:ce:cd:a0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Validity
Not Before: Jul 26 12:00:35 2025 GMT
Not After : Jul 27 12:00:35 2025 GMT
Subject: CN=34844297f245cb63bdde1487535c6707c82d9de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:aa:a8:e9:bb:1d:44:f7:97:c2:af:b5:24:f1:
b5:32:c1:5a:88:86:3d:05:85:90:45:d9:65:20:04:
5e:8d:c9:18:96:26:61:a3:6a:6b:24:8e:6e:a2:47:
fc:5f:92:64:cb:69:bc:02:1f:18:88:6e:41:14:66:
9e:26:2d:fb:71:61:23:a9:0a:83:bb:e2:8c:10:b4:
d9:f5:06:2b:75:0b:6f:e1:8d:6b:81:99:0a:af:0c:
16:b9:9e:a5:74:44:f0:8e:79:e5:13:d3:a6:b0:1a:
3f:98:43:2a:7e:74:12:1e:d2:56:ff:8d:ef:a4:f8:
27:e8:17:68:74:41:cd:25:29:f9:aa:12:94:ab:80:
9c:f1:a6:14:ee:d8:19:e1:6b:61:51:47:c3:a2:15:
8c:cf:77:e4:08:43:91:be:26:db:f8:80:c9:08:89:
54:60:b3:a9:a4:e4:69:5d:59:68:65:7b:45:ea:c7:
e9:27:53:0a:0d:4d:7e:26:5b:40:5e:6d:4b:30:c7:
6a:5a:cf:2e:f7:60:37:37:41:a5:87:b6:df:b2:7f:
48:d2:4b:c6:dc:e9:d8:c8:ba:b1:f1:19:11:0d:ff:
03:fa:73:d3:68:d0:e2:ba:af:1e:fd:0e:ac:61:34:
76:4f:8f:b6:1e:dd:0c:74:10:35:fa:5c:7c:42:a6:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:84:42:97:F2:45:CB:63:BD:DE:14:87:53:5C:67:07:C8:2D:9D:E2
X509v3 Authority Key Identifier:
keyid:04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:09:aa:dc:06:54:35:33:58:1c:71:b2:52:c0:b4:28:bc:4c:
0c:9e:17:a9:c3:0d:c0:62:98:77:aa:b6:33:2c:05:03:72:26:
e8:cd:cd:31:6d:b5:36:6f:28:97:91:8d:27:04:97:17:65:57:
63:78:19:76:5a:1c:92:e4:82:50:6b:51:bb:11:c3:c7:7a:86:
c9:f5:07:64:93:8a:5b:12:16:35:6a:f4:3b:30:99:ab:64:e4:
58:ae:0d:43:a5:3c:16:af:c9:e4:41:8c:0a:ea:7a:5e:59:f7:
0f:bc:6c:26:97:6f:3b:6c:41:da:64:7b:bf:f2:cb:48:4c:5c:
d7:fc:2b:8a:ea:a3:8f:fd:21:08:be:71:1d:11:84:1d:6c:a6:
d0:c0:31:62:fa:c7:63:93:41:76:60:78:e8:5a:01:7d:2d:af:
b0:bb:d2:0e:e4:f6:1c:af:b8:08:6a:2b:95:a2:08:e9:2b:15:
1d:68:2d:98:44:63:a9:38:2b:0d:4e:20:ed:1b:8b:15:61:38:
18:2b:ba:a5:19:e5:e3:de:a7:b5:4c:ab:41:7b:d0:d9:a3:a2:
2c:24:1b:d6:2d:06:9d:59:71:9f:82:d5:1a:9d:1a:99:1d:4f:
68:ac:c1:5f:de:28:22:f3:63:21:98:aa:91:72:2b:83:cf:6e:
c3:6b:84:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:57:36 2025 by rpki-client