Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: YNizLFnUvAjFsQIfuDbsY4GY+B8XCgbJPFobChXOg3A=
Subject key identifier: CE:72:C2:91:8E:6C:7C:01:19:C1:4E:8B:EB:A0:4E:03:C7:5E:32:DC
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 019A5119942E75DF6486B867476405F37121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 1655
Signing time: Tue 04 Nov 2025 23:00:22 +0000
Manifest this update: Tue 04 Nov 2025 23:00:22 +0000
Manifest next update: Wed 05 Nov 2025 23:00:22 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: /rR9Zh+JUSEDNaSSdB3JvYCxUA3AzuAvMP734KO475Y=)
2: fNJzWMxwIRs-oxYj6gVLzdXlR9o.roa (hash: 2scd04V5Cfx10HVTv5lVQAKj0cVcY+kOPgXcQil/rZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:94:2e:75:df:64:86:b8:67:47:64:05:f3:71:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Nov 4 23:00:22 2025 GMT
Not After : Nov 5 23:00:22 2025 GMT
Subject: CN=ce72c2918e6c7c0119c14e8beba04e03c75e32dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:1a:78:77:7a:10:c3:87:ba:10:47:de:6d:
f0:72:3f:06:8a:41:42:cb:c8:8b:b3:bb:64:71:05:
b0:93:5c:ca:65:1e:96:1e:eb:7d:77:a7:3f:43:7c:
4c:43:76:b6:62:7c:1f:f4:e7:db:86:bb:5b:36:e9:
b2:7c:cd:8b:2a:f2:64:7b:96:6d:03:50:26:e5:bb:
5a:ba:7e:1c:b7:36:80:89:50:33:b3:6a:f0:d2:7b:
ec:f6:05:c8:c4:56:86:ab:9f:03:9c:07:69:a1:d3:
95:84:fe:77:f4:c0:85:62:72:e2:64:53:43:66:cb:
eb:02:63:d4:ab:0e:ae:5f:66:dd:30:6c:32:24:b2:
50:a5:ac:89:7f:0f:a8:8f:21:c4:e2:1e:4c:7b:0d:
ef:31:5c:8a:40:45:20:18:23:39:30:8c:69:c4:59:
fc:5c:76:57:1e:36:75:25:9d:31:3b:5d:f6:98:7e:
b4:1a:ac:54:32:19:95:c5:82:88:08:31:27:7f:35:
66:73:22:ae:48:2d:e2:3b:a0:ee:6e:8b:23:47:af:
d2:27:67:bf:f4:2d:ba:c5:c6:33:0b:5f:60:2d:00:
96:59:c4:1a:5f:43:c6:96:82:66:62:64:a8:7d:2d:
e7:74:0c:d3:71:2d:e3:59:b6:98:a5:ba:97:fa:81:
f3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:72:C2:91:8E:6C:7C:01:19:C1:4E:8B:EB:A0:4E:03:C7:5E:32:DC
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0e:ce:7b:38:af:d8:14:93:79:eb:30:0a:f9:c5:e0:bf:6b:
24:e8:89:08:6b:16:f2:d1:b5:22:fd:75:9a:c5:75:03:71:ea:
89:ae:73:95:a7:63:f4:68:c4:46:42:bc:3b:89:8a:ae:ae:a0:
49:1b:f5:49:2d:ad:de:65:14:8d:d0:d4:67:d0:f9:4e:1d:75:
c8:74:ee:2a:9d:78:d2:31:1f:20:4b:70:6b:bb:4f:c4:5c:2c:
a3:dd:79:bb:97:d3:2c:f5:60:68:56:11:34:fe:3e:e6:5e:1b:
00:5e:52:36:81:3a:31:d3:47:92:92:f8:8c:d2:ae:15:55:33:
d4:32:84:12:de:87:49:fd:fe:47:39:a2:1e:46:6d:a6:3f:d2:
bc:b4:bf:be:fa:60:02:15:1d:92:1b:b1:0e:ef:ca:01:c2:70:
76:ac:97:20:df:e9:83:21:0e:c4:a4:f1:1d:19:4a:62:e9:a0:
a2:5a:5a:7b:0b:05:25:5a:3b:6b:5a:16:e0:9c:97:ed:77:47:
15:87:e6:54:4d:b4:f3:52:c5:df:e0:22:66:d9:a9:76:46:00:
00:f1:1a:9d:b7:98:4f:78:42:fa:29:ee:a4:fa:b0:0a:0a:09:
ae:00:c7:f8:0c:21:00:c0:29:4d:ce:48:db:38:c7:d6:10:35:
f0:4c:be:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:33:01 2025 by rpki-client