Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
File: BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft (raw, json)
Hash identifier: 07f8YMm94rV9nqjBr/rgq27drc198Ol6rKP16p12MCU=
Subject key identifier: D5:4E:68:BF:68:EF:26:68:AC:AC:4A:00:B6:FA:F5:FE:0A:FD:03:EF
Authority key identifier: 06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
Certificate issuer: /CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Certificate serial: 019922FADFCF05C39A45D4F0AEEDC28DCFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 07:01:30 +0000
Manifest this update: Sun 07 Sep 2025 07:01:30 +0000
Manifest next update: Mon 08 Sep 2025 07:01:30 +0000
Files and hashes: 1: BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl (hash: FvbUWroPeaQzHlKrPL8IQ2rhzc/Tn15HZw776dJX1XE=)
2: pa3jfF65O1LeusJmZP9_Hq2CHUA.roa (hash: DB5zR9clFk0B3PVw7uwrAY7t9bq1MxHbsRq/+LHkr9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:df:cf:05:c3:9a:45:d4:f0:ae:ed:c2:8d:cf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Validity
Not Before: Sep 7 07:01:30 2025 GMT
Not After : Sep 8 07:01:30 2025 GMT
Subject: CN=d54e68bf68ef2668acac4a00b6faf5fe0afd03ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:da:63:0d:9d:d0:88:b5:b3:35:0a:fb:d8:
d3:a4:8d:60:cc:eb:40:98:c5:4d:73:f9:06:65:d4:
b2:1c:0e:62:f7:80:20:f5:26:ef:93:8a:0b:61:0b:
e6:b4:07:a4:68:de:7f:7a:70:79:25:a5:6a:e2:a7:
7d:cb:64:c7:f9:ab:fa:ef:fa:d1:f2:3c:36:6a:1f:
93:49:0e:2f:c6:82:b7:5d:f6:76:57:fc:a5:ed:7b:
a3:19:0a:fe:e6:a9:3a:e4:01:c8:0f:1a:98:b0:84:
2a:56:25:00:05:d6:40:a1:9a:72:35:25:9a:04:ae:
47:ae:a0:50:0c:68:8f:d6:6e:84:b9:63:90:8e:e4:
43:f7:7a:92:bb:22:f3:7f:de:a6:56:7c:7d:97:cd:
63:78:a2:d0:be:9c:2b:45:c2:f8:a0:b7:05:99:13:
61:a0:fe:66:af:ee:71:bf:20:e8:68:9c:09:5c:2a:
9b:cc:22:2a:25:13:31:a3:0c:b2:4a:8f:41:a5:5c:
48:50:4a:5d:35:3f:60:e3:29:45:7d:77:41:91:d7:
78:26:c4:6b:c3:ba:08:46:d4:d2:c5:3c:1e:a0:c0:
6a:63:e0:03:2a:db:78:f9:40:7c:bc:51:64:3d:c4:
a4:c3:32:4d:14:cd:71:a5:f0:2a:6e:82:1b:a9:6a:
ef:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4E:68:BF:68:EF:26:68:AC:AC:4A:00:B6:FA:F5:FE:0A:FD:03:EF
X509v3 Authority Key Identifier:
keyid:06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:21:97:bc:54:a3:2b:13:0a:64:04:51:09:3f:06:f6:92:b8:
50:95:72:22:bc:cc:33:48:a2:83:fa:7d:f2:43:03:3f:c6:01:
f8:92:46:f4:34:5a:88:25:67:51:94:95:ff:48:f7:b1:de:46:
1b:f6:43:a9:ab:21:1b:dc:c8:20:dc:3a:21:1a:57:1a:ef:dd:
b7:a9:e4:33:9f:77:35:2c:a8:e8:39:5f:86:39:70:a0:29:2e:
af:69:c4:7f:a2:70:c8:14:25:f6:86:db:10:de:19:e6:12:85:
42:8a:ee:0f:14:c3:60:28:d3:2a:0d:c9:b0:b0:b1:10:f5:ba:
4a:1e:21:ee:2f:f0:d8:1c:8e:30:02:e8:d7:a2:0f:2b:73:b8:
1a:be:e4:5a:94:3c:19:59:c9:54:ee:ff:15:00:9c:95:32:5c:
71:5b:b7:18:2c:b2:d0:46:6e:90:6f:01:67:2d:bc:9f:2d:37:
77:e8:ab:57:d6:e6:7a:29:3b:58:7e:57:7c:4e:f2:f2:2d:f7:
e4:2c:67:36:8b:0a:94:4d:4d:f7:9c:af:fc:df:85:45:29:e2:
6d:b2:01:4b:59:f8:34:0c:38:f6:f6:34:78:ba:a6:2b:6d:fc:
a6:7e:d1:58:1b:e5:d4:2c:15:a3:d3:b4:57:29:f5:c9:0b:cb:
21:d7:ab:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:38 2025 by rpki-client