Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
File: BaCPua9NbK_M-uOyjsbtScQj78Y.mft (raw, json)
Hash identifier: fsftfXriU5Bzj3LNnwNpNm3E+f1uqKVb3kMTWkwGwPs=
Subject key identifier: 65:CD:3B:74:78:B2:BC:3D:7A:12:F5:06:EE:53:EA:3F:F4:F7:4C:49
Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
Certificate issuer: /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Certificate serial: 0199233129FCA0B84380779D844D95AF7D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
Manifest number: 1223
Signing time: Sun 07 Sep 2025 08:00:48 +0000
Manifest this update: Sun 07 Sep 2025 08:00:48 +0000
Manifest next update: Mon 08 Sep 2025 08:00:48 +0000
Files and hashes: 1: BaCPua9NbK_M-uOyjsbtScQj78Y.crl (hash: EKG+NS0dpWRbw9c75J8AdBmVsiM2dMicfqfROKjtyWM=)
2: SGQBvdPhJeyzXH46rCn1HprgoUQ.roa (hash: JigxCYquveWyuHmkXH4kT+LxBtbk4j6Ry0hBrLIoDFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:29:fc:a0:b8:43:80:77:9d:84:4d:95:af:7d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Validity
Not Before: Sep 7 08:00:48 2025 GMT
Not After : Sep 8 08:00:48 2025 GMT
Subject: CN=65cd3b7478b2bc3d7a12f506ee53ea3ff4f74c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:14:96:db:d5:ba:7d:ee:62:08:ac:ac:f4:
90:92:26:b1:fb:d8:de:4f:e2:ca:30:f5:31:99:39:
09:53:08:5a:26:9c:e2:11:65:f3:54:56:87:bd:27:
11:ad:87:c1:b7:22:46:bf:1f:a2:ef:4f:1b:14:7a:
17:01:3b:2b:9f:c3:41:10:83:b7:a4:3a:69:11:93:
05:33:18:03:53:40:83:dd:88:94:d3:92:a9:0a:f4:
e5:bd:f2:17:07:4b:c4:1a:a7:c7:61:6b:e5:6d:59:
4c:86:9a:5d:ff:11:53:08:85:63:ec:0e:c6:96:88:
08:d4:20:65:f7:be:6c:57:a8:42:7c:f2:95:f8:66:
b6:a8:76:12:fa:13:86:7d:3d:54:ea:3f:86:9d:68:
7a:8e:7c:5e:53:40:df:e6:ca:20:32:6f:a8:7b:21:
65:44:fe:3c:dd:ac:93:07:0b:bb:38:56:1a:e4:e9:
68:20:4a:40:29:04:86:60:94:95:66:22:40:c3:61:
e7:d9:26:60:f0:d7:f1:05:ad:da:96:41:67:7c:75:
2f:8c:57:c6:69:c0:62:31:96:e2:78:41:65:47:ef:
bb:ce:be:de:0a:cc:ed:cb:fc:53:8e:b8:50:b2:da:
6c:93:7f:ed:26:d1:38:7c:5f:48:e7:ec:6e:4a:f6:
79:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CD:3B:74:78:B2:BC:3D:7A:12:F5:06:EE:53:EA:3F:F4:F7:4C:49
X509v3 Authority Key Identifier:
keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:85:d1:27:96:0e:54:aa:72:4a:10:e2:ab:d8:6c:3e:72:f2:
2b:d3:b2:fa:77:43:5e:ab:8a:b9:ca:ba:a2:70:55:a8:b9:a7:
92:20:0c:a2:11:ae:86:31:cd:f6:c3:21:7b:5b:3f:b7:28:75:
9f:99:64:50:20:36:c9:1b:24:3e:f0:40:7f:a0:10:c5:8f:6b:
80:2a:8d:c3:8a:34:bf:3c:0e:68:95:01:fa:d2:ad:f1:ce:16:
d8:d0:da:fa:cf:a2:57:a3:4d:30:81:c7:e4:3f:1d:3c:d7:56:
60:38:30:46:e8:1b:d7:d2:7f:35:df:a1:6c:ab:5f:d7:f8:d6:
65:23:f6:76:78:12:fc:b2:b2:5b:d3:1f:eb:a0:d8:fe:22:7a:
a4:d9:a5:3f:26:21:ad:99:eb:a7:27:95:7c:fc:07:d3:aa:a5:
8b:36:41:1e:7c:e7:8b:b7:e8:31:ba:ba:a8:58:6b:6d:e1:fc:
10:1f:81:1b:90:fc:aa:fd:53:89:6d:43:2e:8b:af:87:34:a3:
84:89:b6:2f:c4:ef:3b:22:53:ca:b9:c2:77:a3:ed:00:d7:e9:
54:72:9c:a2:8b:06:8d:3d:c7:df:c8:3f:52:73:2f:d7:30:99:
bb:f8:36:0b:84:f4:05:ee:17:a0:c8:5f:1c:13:4b:97:c8:bb:
52:ac:4e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:28 2025 by rpki-client