Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
File: BFxfO7gRkXIMDd-LPPNNkdq04dM.mft (raw, json)
Hash identifier: +6rAPkJjto6dUuRApHRk4Tnfomw3VSY/ziXzqYbfRLg=
Subject key identifier: 43:ED:D8:22:E9:1C:B8:5A:F7:FF:DC:8C:DB:40:42:BA:17:6B:E7:11
Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
Certificate issuer: /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Certificate serial: 01992EC7611D10B13630FF59D828AE95DEC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
Manifest number: 1677
Signing time: Tue 09 Sep 2025 14:00:42 +0000
Manifest this update: Tue 09 Sep 2025 14:00:42 +0000
Manifest next update: Wed 10 Sep 2025 14:00:42 +0000
Files and hashes: 1: A_nsrTfQ71u0UrzEQ6SNUm_3G2U.roa (hash: SR5+osvS+osGxE2DJ2TfgoITwWWe9DsyWc/ATbIOEEM=)
2: BFxfO7gRkXIMDd-LPPNNkdq04dM.crl (hash: hokkMMZDxuf4iY1GensFRTxuFqvbEAJYlnKT+MGreZU=)
3: IDbbddFc14SqQa3mZmElYtVTmQY.roa (hash: 27Hv+jULUbGOWBtj+jEisHYpbRo4f4IxlnI8y0WtgFs=)
4: rk3ppAboxW06rE2L20ZKn9egqD8.roa (hash: 0BLnKXlmHhtn6//IbmeMPsDs46xu8jcRpBXK8EK9HJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:c7:61:1d:10:b1:36:30:ff:59:d8:28:ae:95:de:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Validity
Not Before: Sep 9 14:00:42 2025 GMT
Not After : Sep 10 14:00:42 2025 GMT
Subject: CN=43edd822e91cb85af7ffdc8cdb4042ba176be711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:3f:5a:58:f3:f7:0d:12:f1:19:77:28:fd:
2a:7b:1d:6e:06:02:3d:5c:be:7e:00:2f:06:ba:1b:
80:70:71:07:cb:ce:5d:8e:21:ca:09:f2:e9:0d:5b:
a6:f4:df:96:16:c5:f7:d5:90:ec:66:aa:c7:dc:53:
b4:86:9b:57:28:9e:41:2c:4f:93:dd:73:86:02:85:
51:65:19:01:79:07:f7:31:33:32:b2:8c:a6:e7:11:
ba:36:41:d0:0f:28:ff:9a:dd:20:ce:21:2a:07:7a:
d0:b0:5d:31:9f:20:55:ea:65:1d:ff:b9:bb:02:72:
eb:9a:3c:7e:e0:b8:fb:e0:24:15:bc:7c:92:54:41:
45:8d:2a:ef:57:f1:12:44:7d:39:82:4a:02:ba:9b:
05:fa:84:30:9e:42:0f:92:fa:0d:f1:51:6f:ea:7b:
ce:34:e7:91:9a:fa:f3:f7:5a:74:91:4a:c2:12:2c:
ab:30:89:93:09:4f:9c:85:05:f0:54:36:c6:5c:62:
15:6b:b2:b3:41:8a:1e:53:e7:ab:c9:df:8d:c8:9d:
3a:ad:80:8a:71:b9:a6:04:5a:2e:16:65:c7:78:3b:
19:4f:b5:08:92:bd:44:25:8a:57:b1:e6:bd:ef:7d:
08:ce:37:c8:17:bd:2e:73:f7:b1:b2:ab:78:bb:eb:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:ED:D8:22:E9:1C:B8:5A:F7:FF:DC:8C:DB:40:42:BA:17:6B:E7:11
X509v3 Authority Key Identifier:
keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:83:c5:4e:36:c9:66:38:4e:eb:cc:67:e7:e2:60:85:7c:96:
5a:ff:41:5b:71:a6:41:12:96:fd:9d:73:56:9a:23:9c:07:14:
d7:2b:b3:95:5d:5c:40:1c:e8:f3:4e:89:01:ee:90:de:f1:da:
ca:b2:86:8a:ba:db:83:2b:c0:7a:9d:1b:42:b8:20:ab:11:4e:
63:e1:0c:38:42:b5:89:f1:c9:7d:a0:d6:20:dc:94:30:2f:9b:
0b:1b:88:8c:83:74:66:d0:25:24:4c:b6:b2:c2:56:d3:e6:80:
52:b5:53:84:dc:f9:d0:8c:0e:52:44:2f:cd:42:ed:df:fa:71:
f3:c7:10:af:33:e5:d8:d6:df:53:23:62:1e:f5:b5:8b:fb:32:
2f:96:fd:f7:a4:84:50:4d:63:c8:fc:48:82:61:1c:15:0b:ca:
b6:fb:40:38:b4:11:ed:09:fd:d4:a0:93:40:fb:fa:72:40:85:
2a:77:00:6c:c6:25:b8:c6:c1:c8:03:57:c3:a1:a0:47:5f:98:
83:82:07:c0:f9:c1:b8:ed:d3:49:36:4c:45:34:92:34:0c:67:
c5:b2:d1:dd:72:90:fd:31:16:42:c4:6a:ec:42:ac:a1:09:ae:
49:2b:df:e2:92:4b:23:72:0d:91:e5:a8:c2:c1:77:07:19:c3:
08:1c:e3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:20:58 2025 by rpki-client