Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
File: BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json)
Hash identifier: GeZWJhld4Nk47X5nmDSzHeA3/i4Jepei4PQCXXqi7YM=
Subject key identifier: 63:E8:6F:7D:14:6E:0A:9B:6E:62:18:58:97:BB:89:51:C1:A1:0F:CB
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial: 0198D5BBE6E099E25CD3641BA00B32E48658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
Manifest number: 103F
Signing time: Sat 23 Aug 2025 07:01:57 +0000
Manifest this update: Sat 23 Aug 2025 07:01:57 +0000
Manifest next update: Sun 24 Aug 2025 07:01:57 +0000
Files and hashes: 1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: UamcpR5wIZZyTwovIxelaJai5LMm1QEGHuIRj8RwjAM=)
2: elV1APoKiSk_9XkOBJQhYkqxHiw.roa (hash: 8zT6bhkdxlFlI+FWNJggqU5g/ZNnR60ACpbk2nou4yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e6:e0:99:e2:5c:d3:64:1b:a0:0b:32:e4:86:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
Validity
Not Before: Aug 23 07:01:57 2025 GMT
Not After : Aug 24 07:01:57 2025 GMT
Subject: CN=63e86f7d146e0a9b6e62185897bb8951c1a10fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:54:6d:79:55:7b:44:c5:d8:63:83:d3:fc:2d:
88:42:23:37:66:fe:67:78:1c:ef:b9:3a:a0:06:60:
fc:73:48:08:ad:e0:9a:bb:66:be:91:a8:43:6f:ce:
0c:6f:d6:bf:2b:f5:44:70:39:e8:63:b9:14:b8:5a:
75:e3:a0:c9:fa:e4:ee:d4:f6:ae:0e:09:2e:b3:40:
ff:87:d6:1a:af:21:9c:dc:21:48:be:e4:b0:29:dd:
80:1d:3b:cb:46:c0:39:b3:fd:b9:73:6d:32:86:83:
62:41:ba:3a:c6:e4:2b:1b:38:0f:f1:ad:44:2a:5b:
8c:bc:31:33:34:e9:04:2c:b5:24:da:f2:5b:0b:3e:
93:1a:2e:3e:42:1a:f8:43:b9:a8:26:87:f0:d5:f2:
f1:37:98:5d:90:00:46:ff:d3:3f:7e:bf:20:f1:33:
29:5b:6c:d9:d0:24:53:a2:a7:27:39:d7:77:55:f7:
79:31:e6:d1:ce:62:25:5c:e9:89:19:f4:50:ab:ef:
bd:86:09:ff:d8:82:44:1e:53:90:c7:d0:83:84:9f:
7d:6a:6a:e7:b9:d6:0b:5c:b6:d2:8a:8d:58:2e:5b:
3f:1b:53:0a:60:23:2c:0b:3f:f9:e8:b5:17:3a:3c:
a2:fc:63:13:d2:cf:2d:1b:9d:85:55:06:89:e9:37:
c2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E8:6F:7D:14:6E:0A:9B:6E:62:18:58:97:BB:89:51:C1:A1:0F:CB
X509v3 Authority Key Identifier:
keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:aa:7b:27:59:aa:de:4c:e8:db:b6:9c:59:89:8c:3e:d1:d8:
49:02:07:8d:7f:ef:5a:0d:53:b3:64:f5:b6:fe:69:7f:73:a1:
77:bd:2c:1d:33:25:9a:2a:2b:07:86:bc:79:2b:cf:09:36:0f:
90:72:c1:f1:1e:3c:48:93:85:96:a8:f4:90:b1:b6:11:83:c9:
65:ab:ca:63:03:87:34:69:bf:81:7a:15:bc:77:c9:d3:65:e9:
fb:7c:9b:7e:b0:5f:5b:a9:1f:73:1c:13:60:66:fd:1e:8c:99:
c5:5a:4c:0d:bc:4c:a4:d7:a4:39:bc:23:25:27:61:48:c7:bf:
5d:cf:80:bc:24:46:7f:47:28:e1:9b:5f:2b:86:fb:30:f5:a0:
a7:6d:a0:ae:05:8d:9a:a2:6b:ec:fd:96:cf:db:99:d0:fc:07:
fb:15:09:bd:e4:eb:b6:1a:0b:21:b4:f2:41:5b:84:8c:91:3c:
07:a3:02:c3:f2:0f:fd:1f:66:1c:1b:11:7d:61:c9:58:d8:4a:
23:50:e6:23:f3:dd:77:5e:fb:14:b8:65:a6:36:a0:3c:06:49:
fe:0f:3d:1d:57:a0:84:76:d1:32:7b:e9:04:dd:e2:a4:12:ca:
f6:3d:98:f1:d1:5b:b4:64:25:ec:d7:a2:77:7b:c7:fd:06:60:
e1:53:fd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:44 2025 by rpki-client