Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: Lf38EuyQICqBGeKXTDxHziSeYWlrU6MVtIa1Q7RJdb8=
Subject key identifier: 63:BD:82:97:01:F6:5B:AA:E1:D4:4F:9C:72:F0:64:6D:E2:25:64:59
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 019961D9DD262E3F10F3084C7CC61F3AFB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 15D9
Signing time: Fri 19 Sep 2025 12:01:31 +0000
Manifest this update: Fri 19 Sep 2025 12:01:31 +0000
Manifest next update: Sat 20 Sep 2025 12:01:31 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: /dutqKzL7g6XJzQfgNYdCaYDvEbBiV79PaerJy17qjY=)
2: fNJzWMxwIRs-oxYj6gVLzdXlR9o.roa (hash: 2scd04V5Cfx10HVTv5lVQAKj0cVcY+kOPgXcQil/rZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 12:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:d9:dd:26:2e:3f:10:f3:08:4c:7c:c6:1f:3a:fb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Sep 19 12:01:31 2025 GMT
Not After : Sep 20 12:01:31 2025 GMT
Subject: CN=63bd829701f65baae1d44f9c72f0646de2256459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d7:dd:c4:ed:00:ef:e0:b9:e3:ca:b3:e4:74:
24:3c:6a:39:cb:38:2f:65:a8:67:9b:e3:f9:5a:50:
bc:c1:12:c7:3f:f4:ea:26:f8:6c:18:c2:cd:ff:75:
66:97:ac:62:ef:62:11:24:7c:d0:e3:18:d9:76:f9:
45:7a:ed:52:85:be:fc:bf:d5:ce:e9:8b:79:b0:ae:
80:ef:5b:55:55:12:8d:be:56:0d:17:8f:05:bc:58:
31:0e:06:17:1b:5b:09:db:bc:21:5d:d2:0d:b8:8a:
fa:bc:b7:d3:72:f2:cc:99:2a:5f:e4:1a:dc:3e:73:
8f:d7:5e:93:b3:a5:b6:2f:ae:b7:33:e6:3f:fe:2d:
e0:18:a5:71:fa:2a:71:23:ce:42:d8:9e:e9:40:79:
c5:c6:43:90:56:e2:ac:22:2e:fd:b2:3e:95:59:98:
97:f7:64:c4:0b:f2:ab:85:80:39:9c:01:ff:23:9e:
77:74:b5:3e:e1:7c:00:0c:0e:8e:98:49:95:92:c0:
10:7f:96:88:34:ff:b1:5e:d1:94:54:29:5d:34:9c:
90:37:df:c4:d3:fa:de:bd:bc:71:cd:1c:0f:77:8c:
f3:77:e5:88:83:c2:11:cf:72:23:33:a2:c4:99:a4:
6b:ea:93:83:30:fb:d3:cc:89:6c:cd:50:4b:21:38:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BD:82:97:01:F6:5B:AA:E1:D4:4F:9C:72:F0:64:6D:E2:25:64:59
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cc:d7:db:6c:7f:cd:9d:34:7c:27:33:f1:41:89:97:c3:a3:
d4:6f:ec:ba:cd:47:50:b4:b3:89:27:11:f4:23:6b:24:12:9c:
a1:b9:5d:d7:93:89:e6:c8:d6:73:30:1b:56:bc:fe:25:e5:25:
e6:0d:2e:ca:44:89:4b:fb:31:69:b8:a0:ae:91:d0:31:cc:b5:
b7:10:db:ba:23:da:b4:46:91:20:ee:19:14:88:91:4f:f3:14:
c1:f6:21:11:ca:e6:0a:b9:26:b8:64:4e:e1:40:1c:27:79:9e:
9f:4a:76:27:36:43:dd:c1:ee:a9:2f:4e:50:03:11:8b:2c:93:
ed:56:ff:03:22:74:86:3b:7d:ab:64:bc:87:44:f8:61:7f:d3:
81:a9:76:e9:fd:da:f8:06:46:15:90:74:fc:6e:47:97:55:c0:
54:a1:03:92:27:f0:f7:ec:bf:61:f9:94:c7:42:23:17:1c:df:
49:c2:45:5e:6f:ea:1d:9c:7e:92:a8:fa:0b:b4:94:ba:27:53:
9a:b5:08:95:1c:88:70:55:cd:29:d4:c2:30:f8:ec:a4:17:ff:
48:f3:1b:11:38:9b:c3:6c:c0:12:3f:b0:81:aa:97:57:bf:b2:
49:0f:55:3f:fc:fb:97:03:9f:db:35:1f:1b:67:d7:f9:27:61:
8b:53:a5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 18:28:44 2025 by rpki-client