Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
File: bfwUOO4IFam_i3P5p87QlPIax54.mft (raw, json)
Hash identifier: fsYIN/IzItOuRx5VCzZHCVUZd8S6Nur9yHWFAja4t5U=
Subject key identifier: 86:55:86:EA:D1:31:A2:7D:61:7E:C7:71:C6:2A:09:4C:10:F0:74:0E
Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
Certificate issuer: /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Certificate serial: 0199239ED418A57D842D81F4E0808D513F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
Manifest number: 09C2
Signing time: Sun 07 Sep 2025 10:00:35 +0000
Manifest this update: Sun 07 Sep 2025 10:00:35 +0000
Manifest next update: Mon 08 Sep 2025 10:00:35 +0000
Files and hashes: 1: D9a5tzSXaB3YCXB51ESBfxmocyM.roa (hash: PgS49lglth99HhTvLssigXqfh7TfLNAP1ou+sfSqOKE=)
2: UBhFR3OZMj_R8VlXXyVrvKRDJfU.roa (hash: rvFp0ktgwJ1/3eTonU7/7v6UyJ5UYW+gGNm92KfeHQY=)
3: bfwUOO4IFam_i3P5p87QlPIax54.crl (hash: kt8q6XAcKQ3GGy7x/OEMTtk/rsjqqVV4HE8cti3PjfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:d4:18:a5:7d:84:2d:81:f4:e0:80:8d:51:3f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Validity
Not Before: Sep 7 10:00:35 2025 GMT
Not After : Sep 8 10:00:35 2025 GMT
Subject: CN=865586ead131a27d617ec771c62a094c10f0740e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:fd:b5:af:5d:83:0e:fc:8d:a0:81:ff:6d:
80:8e:da:b6:db:71:f9:76:c1:74:27:d6:24:16:c5:
a8:35:4f:98:65:ca:aa:43:2a:1a:48:03:e0:c7:cd:
e7:05:ca:83:c8:1e:97:86:c2:9b:f3:43:40:92:54:
4e:99:97:41:57:d3:73:c5:72:ec:a7:fc:b3:a8:d6:
f1:1c:65:17:51:35:d5:98:5d:ea:7e:52:9b:d1:cb:
4b:42:15:b8:97:c5:5a:fe:3d:af:11:8a:6c:93:fe:
89:8a:86:cb:ea:7f:c5:13:75:f8:ed:6b:ab:fa:f5:
4d:5e:e5:96:d8:9a:aa:42:80:58:fc:80:90:fc:c7:
72:88:2b:df:1a:bd:37:e7:40:27:5f:53:9c:01:2c:
75:33:de:27:27:3e:67:59:7f:08:c5:f2:7f:7f:63:
94:61:f7:e1:29:b4:0e:bf:22:c6:85:64:b2:85:26:
fb:8c:3f:b5:6d:a5:a4:97:4f:30:21:63:bc:03:86:
ea:b4:5a:08:4b:8a:74:bf:6e:88:c5:dc:a3:6b:dd:
84:56:32:d3:0c:1b:a0:cd:76:fe:e1:c9:bc:17:b7:
11:a6:b4:dd:d8:b3:5e:45:06:81:19:05:cc:80:66:
12:7c:18:46:32:1b:74:dd:88:bf:25:92:cc:4b:6a:
ad:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:55:86:EA:D1:31:A2:7D:61:7E:C7:71:C6:2A:09:4C:10:F0:74:0E
X509v3 Authority Key Identifier:
keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:55:51:1c:cf:23:85:db:1a:ba:db:42:97:19:20:60:fe:73:
de:18:f3:1e:6d:a5:17:f9:33:0f:97:56:0a:26:59:18:e2:f6:
65:d6:dc:7b:7a:d8:bd:ab:6a:f9:4e:7e:a7:d0:57:c5:53:a6:
29:ee:28:d2:ad:f3:a6:58:f0:72:6a:f7:f8:24:13:26:81:41:
d4:f3:c8:f2:91:ce:8b:b4:80:5c:93:4b:9c:6d:a3:df:ea:0e:
ce:33:09:a8:66:9d:28:79:9d:27:bd:d4:41:99:2b:52:ea:c0:
55:18:fd:aa:51:65:27:73:b1:8a:ef:87:09:dd:af:6f:da:bd:
d9:34:be:54:9d:4d:ef:68:8c:0f:3f:5c:0e:75:df:c3:a7:83:
07:ad:5e:af:2e:cb:95:5e:3a:bd:f2:d0:48:e3:16:6c:60:d0:
bf:fd:e7:b8:7e:86:1f:74:25:9a:b5:f3:6d:73:65:95:fd:68:
66:f2:1c:d8:a5:a2:92:95:8d:d8:d4:38:5c:20:87:96:a1:d2:
42:59:33:57:bc:8b:88:1c:89:97:eb:99:e2:9d:87:e1:7e:3e:
29:31:d3:56:b5:65:2c:85:18:85:cf:1f:d8:5a:9c:5c:7b:0b:
b4:68:18:46:8a:68:e9:ce:88:57:15:b1:b2:63:c1:28:55:76:
cc:fc:c7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:36 2025 by rpki-client