Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
File: BfWa7cKCluKRck95N954jichZAg.mft (raw, json)
Hash identifier: 7YODfYC7Wi87mg1ODmx1M1ET3BPgqnYAXiTGQ0IDOes=
Subject key identifier: AC:DF:9E:4A:A2:82:57:40:C5:EE:70:6E:4F:80:2D:C3:64:EC:13:AB
Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
Certificate issuer: /CN=05f59aedc28296e291724f7937de788e27216408
Certificate serial: 01984965D0CA7CB9C4B10B40F564F9490DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
Manifest number: 151E
Signing time: Sun 27 Jul 2025 01:01:06 +0000
Manifest this update: Sun 27 Jul 2025 01:01:06 +0000
Manifest next update: Mon 28 Jul 2025 01:01:06 +0000
Files and hashes: 1: BfWa7cKCluKRck95N954jichZAg.crl (hash: j9qY32tVSvYomiXDH4Mqbfn+r6LhNYlnvrnDaKcGP7A=)
2: u4-8TJgeQH4fa-D9xZl4ZB3jNoQ.roa (hash: tT+Wu4e7mtchTUuSJdCNjA8Yykw8lNY7Bv1xK7SFPsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:d0:ca:7c:b9:c4:b1:0b:40:f5:64:f9:49:0d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f59aedc28296e291724f7937de788e27216408
Validity
Not Before: Jul 27 01:01:06 2025 GMT
Not After : Jul 28 01:01:06 2025 GMT
Subject: CN=acdf9e4aa2825740c5ee706e4f802dc364ec13ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:e2:e5:33:d0:fa:ed:77:89:f1:bd:4e:7e:
d0:b0:07:68:90:9a:15:10:58:8d:37:81:3c:d8:2b:
1f:9a:50:33:49:d0:e1:b7:a5:1d:57:0e:4b:90:e2:
97:73:84:e6:2c:ef:d4:fb:1a:11:09:88:58:2d:5a:
db:70:ec:ee:2e:b4:81:e6:9b:ce:5e:11:ac:50:a1:
a6:e3:a1:4f:1b:2a:7b:9d:c4:3d:9d:f9:da:17:c7:
28:d7:62:6f:3a:5e:c5:2f:e9:ea:22:29:dc:b6:a9:
51:df:65:5e:79:18:ab:4c:08:58:a4:3f:0b:bb:cd:
9e:9b:01:c9:2c:5b:9f:1f:e9:c4:32:0f:ef:0b:ab:
d8:c9:97:e0:e8:c1:8c:e3:be:cc:32:f5:20:76:4e:
a8:e4:b1:29:1c:11:55:a6:fd:6c:3d:06:aa:f3:a6:
b2:37:72:a6:8e:6f:ff:84:74:3c:cb:c0:1e:fe:c5:
33:05:30:82:f1:3c:d5:6d:93:4e:9a:46:03:28:d6:
52:57:bc:9e:70:88:33:05:6d:32:9c:d5:09:81:f1:
b8:6f:bd:0c:30:ec:17:cd:b1:ab:f1:e5:3d:1a:1f:
82:1c:94:f5:91:9d:ac:0f:20:9f:f3:62:8e:95:0e:
ea:a3:4f:39:c4:15:71:08:61:65:b1:9a:7b:f9:6b:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DF:9E:4A:A2:82:57:40:C5:EE:70:6E:4F:80:2D:C3:64:EC:13:AB
X509v3 Authority Key Identifier:
keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8c:4b:5d:4e:bf:f8:8b:3d:a6:90:6b:07:1b:64:03:fd:33:
1a:83:98:02:3f:b5:ab:92:c4:84:17:cf:ef:0e:9c:5b:d8:e7:
e6:99:e5:9a:6d:28:17:2c:b7:95:9a:50:03:54:64:11:93:27:
c5:52:4d:6e:16:1e:cf:1b:e2:85:48:91:24:2e:43:1b:90:09:
c0:d8:56:92:48:a4:21:f4:5c:0a:94:b7:62:58:13:67:57:75:
e2:35:7a:93:af:8c:8e:e6:bb:f1:f6:2f:b8:fb:3b:09:73:39:
63:ae:7f:81:e8:3f:2c:f4:f8:6c:b1:80:91:c5:a1:fc:54:13:
b5:10:1f:57:d8:d9:fd:a1:dd:8f:9f:ca:71:fc:a2:e6:7b:d5:
1d:1a:c1:a0:16:f3:5d:2a:72:bf:a1:77:69:29:de:9a:85:00:
1b:87:fb:76:d0:c4:fb:d8:1c:cc:75:ad:75:d0:0d:8a:d1:b4:
5a:b4:87:a5:8e:92:08:e2:00:f1:01:58:55:61:82:42:33:a8:
dc:da:26:20:9c:bc:77:e2:70:73:a4:9b:d6:57:48:ec:51:2f:
2c:2a:e2:a0:3f:ed:ee:54:17:58:3b:18:c4:1f:46:67:4b:01:
d1:f7:74:81:c8:8a:c2:0c:22:40:ff:c7:d5:10:29:b3:fa:93:
c9:7d:11:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:48 2025 by rpki-client