Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
File: BSAFu2w9aGW4nBDzOwuZS3Svljs.mft (raw, json)
Hash identifier: 9SQ9N/NEaOk1j8MW1ea0w2qsSTI2S1rRocz0ZxrxcOY=
Subject key identifier: 32:55:B0:A2:F8:15:FB:21:B1:E1:B9:C1:AF:9D:76:64:CA:2E:00:21
Authority key identifier: 05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
Certificate issuer: /CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Certificate serial: 01984776921E8790EE8DFD8A9EDED6775E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 16:00:09 +0000
Manifest this update: Sat 26 Jul 2025 16:00:09 +0000
Manifest next update: Sun 27 Jul 2025 16:00:09 +0000
Files and hashes: 1: BSAFu2w9aGW4nBDzOwuZS3Svljs.crl (hash: 878IaWflj15+JYI5Wd9VtFZfBoAwOZgCRjBLNsAOixU=)
2: ir1RS50i8n6-S2GFn7ZgzEJxgqk.roa (hash: c+oT6rdCWtyUihO7r4CT9JSZ34sdZ4eqqblxSm+cQz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:92:1e:87:90:ee:8d:fd:8a:9e:de:d6:77:5e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Validity
Not Before: Jul 26 16:00:09 2025 GMT
Not After : Jul 27 16:00:09 2025 GMT
Subject: CN=3255b0a2f815fb21b1e1b9c1af9d7664ca2e0021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:66:7e:24:30:ff:a7:2b:60:5b:55:b2:bd:
4a:9e:d0:bc:55:94:22:88:54:45:81:be:2f:8e:8f:
fe:cf:83:22:3a:e3:31:df:fc:f4:ee:21:92:5d:1e:
c0:3f:8c:53:02:f0:01:0e:b3:b5:6c:e7:f7:ec:1e:
58:11:c1:a5:42:79:18:d1:5f:fe:9f:54:61:08:12:
65:57:a6:e6:1a:6e:06:ce:ce:8c:b9:6d:65:10:cc:
98:dc:f2:9f:a7:1c:c4:6f:27:88:33:9e:72:4f:3e:
77:7a:16:6e:4c:c2:f7:ad:aa:f5:1a:ce:2f:bd:86:
5d:9f:47:47:df:94:5f:5a:f4:72:02:4f:7c:6b:b0:
c2:2a:a5:11:05:c9:b2:6b:7c:42:29:c1:cb:08:30:
7a:25:26:43:7b:2f:71:22:de:51:c5:24:f4:19:e2:
6c:48:3e:3a:9c:c9:32:db:f6:ab:04:45:e5:bf:4c:
0e:75:a8:f6:d2:56:25:a8:c9:a3:d7:83:ac:59:cb:
58:d0:ac:21:45:57:bf:2d:e3:de:27:6b:c1:38:4e:
66:e1:fc:ba:8e:30:81:db:f3:c4:f9:4c:e3:36:76:
f3:c3:e7:44:8f:c7:a7:e6:34:37:a8:25:fc:04:73:
a7:55:62:f4:23:6d:f3:b5:c6:4a:34:81:30:6b:08:
2e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:55:B0:A2:F8:15:FB:21:B1:E1:B9:C1:AF:9D:76:64:CA:2E:00:21
X509v3 Authority Key Identifier:
keyid:05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:13:55:13:b7:12:a0:40:92:17:37:b0:bc:e6:15:fc:2a:dd:
b0:21:30:e6:07:ce:02:ea:fc:f3:98:9a:23:3b:d6:ec:06:b8:
4e:f0:5d:3a:1a:63:d3:90:50:bd:03:e4:d2:69:8f:cc:3e:ef:
ed:56:ec:4b:a9:e9:f2:69:aa:dd:a2:9e:89:f6:be:f8:71:33:
0a:26:e7:8a:05:3f:28:75:e2:5e:a5:51:44:30:89:e1:63:e7:
59:8d:cb:ff:c9:ce:d2:55:c9:b0:4d:0a:07:04:d7:0c:3d:f7:
cc:8b:4f:b9:69:f6:7a:43:fe:16:6d:e4:99:4f:c5:27:de:74:
e3:16:53:f6:17:a7:25:75:d8:d7:e8:04:73:14:e6:35:72:36:
84:8a:2d:c9:57:46:b2:c6:39:b2:96:d0:65:c2:d5:7a:81:6a:
b7:78:5a:68:43:f1:ec:97:43:83:95:05:4a:7a:dd:33:94:d0:
37:96:4b:29:1d:5e:36:c1:10:37:01:48:16:5e:c0:b2:79:29:
4e:a9:28:3c:00:c1:19:15:9e:9e:99:4d:b8:6b:db:70:98:7c:
ce:d7:99:69:33:30:02:fe:9b:97:9f:8b:8e:0e:22:c5:65:ae:
f5:c6:43:3a:3a:ff:42:35:72:63:0a:a9:bd:53:e0:13:02:b2:
f6:b0:d4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:16:59 2025 by rpki-client