Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: QxlDlw7ucCP4EHMucmgMU1BKE6NjWK7DA/UQCKUHu60=
Subject key identifier: C6:98:32:79:D4:DB:87:D6:7B:A1:1D:7E:E5:57:76:AC:E4:4C:72:2C
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 01983871C5141795F61FBA450ABFFB7A3AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 153F
Signing time: Wed 23 Jul 2025 18:00:36 +0000
Manifest this update: Wed 23 Jul 2025 18:00:36 +0000
Manifest next update: Thu 24 Jul 2025 18:00:36 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: QeUYSL+yD3JajAwa+5fitlRFZWBrNMQoWD6ux1NvvuM=)
2: fNJzWMxwIRs-oxYj6gVLzdXlR9o.roa (hash: 2scd04V5Cfx10HVTv5lVQAKj0cVcY+kOPgXcQil/rZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:71:c5:14:17:95:f6:1f:ba:45:0a:bf:fb:7a:3a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Jul 23 18:00:36 2025 GMT
Not After : Jul 24 18:00:36 2025 GMT
Subject: CN=c6983279d4db87d67ba11d7ee55776ace44c722c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:15:a8:60:cd:57:51:ca:3d:9d:75:0e:fa:
20:50:d5:f1:a5:05:6b:6b:be:ab:3d:eb:8d:54:b8:
a0:03:77:3d:f5:8e:30:f4:be:3c:48:fa:e1:b2:13:
5e:87:0f:94:2b:b5:b1:c5:0f:60:ff:17:ad:0f:ec:
50:78:e7:e1:92:f2:75:e8:f2:27:33:41:e5:7e:63:
fe:1f:40:bb:a8:13:6a:5d:3c:7d:4b:0b:7d:10:04:
46:d5:e4:54:ca:e1:ea:a9:e4:a0:cb:61:56:67:12:
a1:99:e0:81:da:f3:f0:7e:1b:ef:8f:62:3c:5b:90:
23:e5:ef:b9:d9:3b:86:71:92:f9:ea:67:3a:fa:87:
a9:5c:0f:71:2a:9f:2a:96:21:61:4c:aa:c3:0f:80:
d6:70:31:cf:78:b8:f0:2b:2e:32:31:b5:b3:5b:46:
8b:ab:34:49:9c:e1:0e:e4:92:e7:6c:92:ad:1e:bc:
79:24:0f:5d:5c:9f:ba:82:66:e4:33:47:b2:a7:e7:
5c:16:82:f4:02:5b:39:3e:fc:cb:54:e4:aa:eb:bb:
15:e4:a4:f4:ee:c1:92:1c:17:f2:01:1b:ce:5f:63:
a0:ad:22:23:e3:d1:a6:19:0f:bf:be:e8:53:64:76:
52:7d:a0:ff:60:e3:da:fb:69:06:35:7e:6b:8b:ef:
14:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:98:32:79:D4:DB:87:D6:7B:A1:1D:7E:E5:57:76:AC:E4:4C:72:2C
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d8:ea:b9:ba:e8:f8:29:c0:b3:cb:1c:10:43:60:f6:aa:a4:
16:a2:64:10:5d:43:24:9e:46:48:1a:55:e9:46:a8:31:ca:09:
c3:2b:8f:ce:c8:8d:3e:a1:82:a9:ab:a6:e2:23:a0:31:39:a6:
86:7e:f2:39:8a:73:8f:71:98:1c:b3:69:cf:e7:ed:fb:c5:25:
f1:d4:28:17:4c:0d:bb:83:29:2d:54:61:3b:ac:58:81:d6:9f:
40:67:70:ad:18:01:93:97:bb:50:7d:0f:c6:79:5b:d3:05:11:
45:d6:6a:32:f5:6b:00:1c:59:5f:7d:9b:12:96:41:96:c3:0a:
f7:f9:9c:d6:d3:98:52:0b:0a:ab:3d:5a:02:66:fc:5c:88:1b:
56:36:b8:08:0a:e6:9a:5b:4e:87:cc:dc:c2:c7:86:26:34:be:
02:80:66:9d:f6:2a:66:c5:70:7e:b1:8d:9c:69:6f:06:2d:f2:
1b:cd:61:e8:0e:70:5a:be:13:b1:ea:c3:bd:d3:81:3b:06:bf:
6b:14:ad:d6:fe:24:6c:ba:38:a6:37:7b:07:37:81:2c:36:26:
a9:8d:82:73:3a:7d:1e:a2:f3:b6:3e:b1:f4:b5:42:94:b9:9b:
57:fb:3f:c6:27:f5:59:7e:59:69:09:cc:2f:ad:55:cd:1f:87:
ed:b1:27:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:49:36 2025 by rpki-client