Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
File: BaCPua9NbK_M-uOyjsbtScQj78Y.mft (raw, json)
Hash identifier: eK7kSY8ML26htXzQbiP1Z8AcRgcM+ISO+/jQ4oJ+y/A=
Subject key identifier: FA:A9:09:4F:B7:AA:FC:FE:80:D5:17:64:A0:2D:2E:6E:32:E7:01:57
Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
Certificate issuer: /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Certificate serial: 0198D404B73297EF0AD3BD9A538F3EE9C4A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
Manifest number: 11FA
Signing time: Fri 22 Aug 2025 23:02:15 +0000
Manifest this update: Fri 22 Aug 2025 23:02:15 +0000
Manifest next update: Sat 23 Aug 2025 23:02:15 +0000
Files and hashes: 1: BaCPua9NbK_M-uOyjsbtScQj78Y.crl (hash: 3JR7pAB7wzP1bSYjTdzCTKjhK+emu9rh4Biedx51P+o=)
2: SGQBvdPhJeyzXH46rCn1HprgoUQ.roa (hash: JigxCYquveWyuHmkXH4kT+LxBtbk4j6Ry0hBrLIoDFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:b7:32:97:ef:0a:d3:bd:9a:53:8f:3e:e9:c4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Validity
Not Before: Aug 22 23:02:15 2025 GMT
Not After : Aug 23 23:02:15 2025 GMT
Subject: CN=faa9094fb7aafcfe80d51764a02d2e6e32e70157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:d8:54:a8:f0:41:43:be:87:af:6f:93:64:
ed:24:be:0d:c8:b1:b2:5f:e7:36:2b:85:45:6e:ea:
bf:a5:89:0c:d6:31:42:5c:18:b6:21:dc:1a:d8:ea:
d3:69:46:1f:f3:3c:d5:62:71:44:4a:78:76:ba:65:
f8:66:5f:a0:c2:12:fa:fb:35:42:24:3c:19:a9:03:
76:19:3f:1f:fe:97:e1:9d:31:a9:e5:ca:6d:cb:7e:
d9:ba:a7:59:d2:6f:4d:3c:9c:23:97:6b:44:28:98:
cc:bc:18:2a:1b:5e:bf:1c:9e:4c:2e:e9:3f:9f:0c:
80:c4:39:07:8e:b3:3e:00:3b:dd:63:0f:df:0d:af:
23:ae:46:57:7e:0b:cd:69:9b:27:26:13:64:ac:5e:
64:67:e1:e1:19:53:3b:36:a8:5e:43:71:00:19:ae:
55:4a:7b:81:e9:1e:39:58:58:ce:96:00:1b:66:b1:
32:65:92:ef:c2:85:b7:a6:6d:90:0b:a6:a4:50:54:
33:67:9c:45:99:4f:85:cf:47:23:27:57:0d:0a:1f:
2d:ac:42:2a:68:80:4c:26:e0:0b:5b:66:ea:fc:9a:
6c:86:e1:0d:bf:e2:ed:ff:bf:46:3e:22:f6:8f:50:
00:e9:08:69:47:7e:52:b6:57:7f:8e:98:de:c6:fc:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A9:09:4F:B7:AA:FC:FE:80:D5:17:64:A0:2D:2E:6E:32:E7:01:57
X509v3 Authority Key Identifier:
keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:43:a5:a7:fc:77:8f:67:69:2b:41:59:e0:4c:ae:25:32:50:
95:2b:da:d2:8c:c2:58:63:94:59:63:8f:f9:12:3e:0a:78:20:
5c:00:3c:b5:27:04:a2:4d:41:0e:f6:87:68:da:fe:2a:e5:6b:
48:ea:17:95:a8:52:db:ed:14:cf:37:80:1f:b2:b1:39:5c:ad:
d3:d1:83:f6:15:5b:ec:79:2c:c0:64:a9:c1:66:a3:2a:ef:f4:
c0:ad:d9:05:42:9b:53:e0:f0:e8:d2:64:ef:f9:9f:10:bd:2f:
e4:31:1c:b0:40:df:ae:6d:28:a5:f4:26:04:71:e5:f8:5f:aa:
ee:52:9c:f4:8b:99:4f:37:e8:9b:49:40:68:de:32:13:ec:26:
91:de:0b:99:04:14:52:a3:56:cb:45:1a:78:f1:d7:0e:a0:7f:
3d:11:12:fa:fc:d1:33:6a:60:fb:1b:b1:e5:6a:79:1b:3a:9c:
ae:fa:55:5a:56:89:15:e2:b1:12:8c:6d:2a:49:a8:cc:db:bd:
c1:39:39:52:66:c5:4e:65:7b:38:32:75:68:bf:26:ce:1d:64:
27:0c:02:94:d4:cc:68:6e:5d:70:6f:49:ac:9a:43:48:3f:bc:
34:ef:37:53:df:ba:ea:99:32:56:1f:41:5d:0a:89:ba:b2:ef:
c6:f4:19:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:31 2025 by rpki-client