Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
File: BADXfvnqDtKVK-L2D6067MLhaKw.mft (raw, json)
Hash identifier: sj8GTfCnNSRtXLcJcL1IPYuxjpSBVyxY1Xap6FbTDE4=
Subject key identifier: 19:E6:A3:16:5F:E8:19:22:3B:F2:24:98:E2:27:C1:90:85:A3:08:C7
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial: 0199228D310DF417D3370519690A9822E4E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
Manifest number: 0992
Signing time: Sun 07 Sep 2025 05:01:42 +0000
Manifest this update: Sun 07 Sep 2025 05:01:42 +0000
Manifest next update: Mon 08 Sep 2025 05:01:42 +0000
Files and hashes: 1: BADXfvnqDtKVK-L2D6067MLhaKw.crl (hash: tlp9G82dW2kbw4Wg+HMB4QKQPuxKO0r12dXj4OCpOfU=)
2: jgMTcyosgm7FIVLeAPtI1RSjhVU.roa (hash: g2bFBV/1uz4ha4E7siEdgYNeYk8szBDsVWWKSTGKJE4=)
3: pO3Lr4jiN61Kn49lUDVd_S0OVvM.roa (hash: mIykw56twR66Kx0cZsZgXBwa4bIpNsTJWsybM0eym2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:31:0d:f4:17:d3:37:05:19:69:0a:98:22:e4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Validity
Not Before: Sep 7 05:01:42 2025 GMT
Not After : Sep 8 05:01:42 2025 GMT
Subject: CN=19e6a3165fe819223bf22498e227c19085a308c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5d:b0:e2:9d:77:db:ba:34:22:cc:c1:b4:0c:
5f:19:79:fd:2a:fe:82:0d:2a:3c:94:34:d3:ac:76:
3d:da:c2:5f:d8:6c:6e:54:3a:c8:60:41:7a:7e:94:
68:3c:87:88:b3:ad:38:97:a9:43:8a:33:49:73:cf:
ba:ae:14:4f:69:ce:54:b3:12:aa:b8:b9:5e:9d:90:
a2:ee:84:a5:a3:e0:cf:e0:63:1c:d1:33:c3:a7:8c:
32:3c:38:22:55:8d:bb:0d:be:72:f3:29:d9:03:d7:
e4:bd:4f:b0:e3:16:01:9d:6b:76:ad:66:04:c2:b6:
b1:96:46:aa:8d:bb:5b:72:e7:b4:81:99:72:e2:ec:
e7:90:be:ca:13:91:d0:e6:dc:cd:b7:2c:51:46:90:
d2:c2:15:8a:7f:4c:67:cb:73:01:e7:bd:0c:1e:97:
ec:44:03:63:2a:c1:82:cb:4e:5c:ff:28:05:f4:da:
1d:b0:3c:b5:23:dd:36:23:40:22:16:24:80:68:6e:
20:b9:bb:ab:ed:a5:06:98:5b:9c:81:51:d9:29:19:
4d:80:4c:2f:ea:9c:d4:78:bd:78:d8:01:4a:ce:82:
3c:2f:80:88:2f:a1:93:5c:2c:3f:48:b3:38:3f:02:
9d:3c:e0:cf:9b:0b:78:e1:45:14:38:0d:eb:18:f7:
07:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E6:A3:16:5F:E8:19:22:3B:F2:24:98:E2:27:C1:90:85:A3:08:C7
X509v3 Authority Key Identifier:
keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ec:bf:60:e9:27:ca:22:43:73:c2:82:a7:2f:ce:0e:59:c1:
94:f9:07:27:6b:62:8f:2f:ce:7c:51:08:b4:d8:12:48:93:06:
23:4d:34:94:1d:26:6f:aa:b8:90:41:78:7d:fb:0a:1a:28:1c:
a8:5f:f4:fb:8a:69:40:1e:4d:68:53:c9:4f:82:4c:4b:fe:f7:
05:b4:84:71:0f:16:07:79:f1:f2:3a:a6:fd:46:46:e6:ef:5e:
d0:8b:15:3c:03:0b:09:87:6e:af:23:c7:c2:07:da:e4:86:a7:
fd:f3:e2:98:ce:23:a5:57:07:d0:11:a4:ba:59:f9:fc:72:7e:
bd:a9:52:e9:30:fd:46:ab:db:01:a6:33:c9:7b:9e:fc:76:9b:
ab:0d:14:11:fd:1e:da:ed:dd:03:0e:0e:cf:df:0b:f7:c7:55:
4c:1b:0a:de:e1:c6:92:fe:3e:8f:cb:ae:8e:01:a8:68:8f:39:
67:42:ce:ca:fa:14:53:00:52:9e:b0:1d:b0:a0:bf:5a:01:7b:
f4:c2:14:d8:cd:86:b2:38:ad:33:2f:7d:f7:4f:e6:84:d9:22:
7e:3e:d0:82:54:3c:ef:27:85:d7:1f:3d:8b:b3:1f:e3:12:46:
20:49:83:22:8e:ba:7a:72:aa:d0:21:8c:31:a5:37:b1:0e:ed:
d3:2f:b8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:57 2025 by rpki-client