Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json)
Hash identifier: 4gA5yIQgDaGEirus5pUidqnorPoUADhU3M+wUucScO8=
Subject key identifier: 99:3C:54:30:88:C5:0E:68:03:AF:83:ED:ED:6D:97:26:E9:0C:1E:60
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 0198D5156161695BA6A52B7695C0FE22771B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 04:00:04 +0000
Manifest this update: Sat 23 Aug 2025 04:00:04 +0000
Manifest next update: Sun 24 Aug 2025 04:00:04 +0000
Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: uTADG0BqQhXlEusEdLIOX7VkmuweqZs3l+BsbX3RIBI=)
2: cadUElPbaF409FA_2Wg_Q_GYDPU.roa (hash: NuxwFEiNd/qBOlqeuoFPvUGS7VeCKWQWl9Silhu16kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:61:61:69:5b:a6:a5:2b:76:95:c0:fe:22:77:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Aug 23 04:00:04 2025 GMT
Not After : Aug 24 04:00:04 2025 GMT
Subject: CN=993c543088c50e6803af83eded6d9726e90c1e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9a:81:4b:ee:66:54:86:22:6f:9a:bd:1f:26:
2f:87:9d:76:87:3b:85:74:67:2d:4f:64:ff:46:50:
96:82:3a:c6:79:d3:da:38:91:15:78:ba:17:a2:c8:
6c:ae:78:76:6b:66:86:3e:7b:f9:53:a9:db:dc:92:
3e:0b:7c:07:a0:07:3f:6b:fe:24:f2:fb:bd:29:eb:
c5:5a:c8:35:f7:c6:f1:39:88:17:1f:e1:24:bb:cd:
63:a2:23:c9:47:a5:c4:5a:8a:2a:7b:8d:c9:2e:31:
27:e0:1c:a0:1e:fc:ff:97:f0:6d:24:cd:73:8f:1a:
63:84:27:b2:ff:af:bb:01:2a:65:1d:53:9c:85:5f:
ae:f1:dd:f0:3b:d5:80:eb:4b:e5:7c:33:65:ac:2b:
ca:ef:18:08:51:e1:b8:8a:b1:66:42:22:4a:35:00:
7f:45:f3:85:fd:c2:76:33:08:4e:b4:f7:cc:52:8d:
56:92:34:05:35:e2:38:8e:cc:56:11:37:d6:7d:0d:
31:89:bd:95:bc:31:ec:d2:86:5b:5c:55:18:a3:5c:
70:61:03:eb:ac:7d:f5:9c:e7:a2:23:bf:20:36:91:
6c:5b:40:af:9e:16:40:b5:43:fd:70:b1:63:29:54:
14:41:40:8c:2d:8f:11:47:a5:0d:bd:76:76:45:93:
54:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3C:54:30:88:C5:0E:68:03:AF:83:ED:ED:6D:97:26:E9:0C:1E:60
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f6:3a:41:4d:3c:c3:11:09:cc:d2:36:7e:28:c8:b1:17:df:
78:32:11:4b:fd:41:fd:d5:09:b7:4d:4c:81:00:57:b2:f6:4e:
8f:eb:f6:0e:3e:9a:40:65:7e:d0:83:0c:b8:fa:7a:b7:ad:2d:
d7:17:cc:d9:c8:9f:a4:35:0b:8b:72:d1:ba:93:72:db:5d:59:
15:3d:db:bf:e2:8e:55:a0:5a:dd:b9:0c:4f:b2:31:b2:9d:2d:
6e:3a:ee:1f:28:08:a9:03:37:58:b8:d1:df:33:21:c0:50:81:
0a:d4:bf:ec:39:fb:05:04:ee:89:93:cc:f8:58:82:01:5d:f9:
84:13:04:99:f7:54:65:c8:3f:5f:d3:c3:fd:a7:88:35:ee:62:
f1:2b:4b:4c:d8:42:0b:00:0a:22:47:0f:6b:50:89:f9:53:2d:
71:a2:2d:5a:d7:5d:dd:c0:1f:82:00:27:66:db:3d:f5:43:7f:
b5:17:6f:b7:db:5f:b4:6c:63:4a:52:b7:ca:72:33:ae:f4:37:
c9:36:10:0d:bc:92:9e:3b:c0:d4:ef:ff:14:98:96:6c:1b:bf:
8c:a8:fc:ac:90:df:a2:7b:d4:2e:e4:cd:a7:8f:17:63:3d:a5:
6f:69:78:52:5a:a2:05:87:52:34:c5:0c:f1:56:fe:43:8f:9e:
49:6d:70:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFWFhaVumpSt2lcD+IncbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjA4Yjc0ZjUxMTdlZDM4MDcyM2Q5ZTQyOWVjYjRhYTUz
ODUyNWEwHhcNMjUwODIzMDQwMDA0WhcNMjUwODI0MDQwMDA0WjAzMTEwLwYDVQQD
Eyg5OTNjNTQzMDg4YzUwZTY4MDNhZjgzZWRlZDZkOTcyNmU5MGMxZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZqBS+5mVIYib5q9HyYvh512hzuF
dGctT2T/RlCWgjrGedPaOJEVeLoXoshsrnh2a2aGPnv5U6nb3JI+C3wHoAc/a/4k
8vu9KevFWsg198bxOYgXH+Eku81joiPJR6XEWooqe43JLjEn4BygHvz/l/BtJM1z
jxpjhCey/6+7ASplHVOchV+u8d3wO9WA60vlfDNlrCvK7xgIUeG4irFmQiJKNQB/
RfOF/cJ2MwhOtPfMUo1WkjQFNeI4jsxWETfWfQ0xib2VvDHs0oZbXFUYo1xwYQPr
rH31nOeiI78gNpFsW0CvnhZAtUP9cLFjKVQUQUCMLY8RR6UNvXZ2RZNUKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJk8VDCIxQ5oA6+D7e1tlybpDB5gMB8GA1UdIwQY
MBaAFAXwi3T1EX7TgHI9nkKey0qlOFJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZDTGRQVVJmdE9BY2oyZVFwN0xTcVU0VWxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xODg2ZDgtZDg3NC00YzI0LTkyYjkt
ZDQxYWM4MWQxY2M0LzEvQmZDTGRQVVJmdE9BY2oyZVFwN0xTcVU0VWxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xODg2ZDgtZDg3NC00YzI0LTkyYjktZDQxYWM4MWQxY2M0
LzEvQmZDTGRQVVJmdE9BY2oyZVFwN0xTcVU0VWxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfY6QU08
wxEJzNI2fijIsRffeDIRS/1B/dUJt01MgQBXsvZOj+v2Dj6aQGV+0IMMuPp6t60t
1xfM2cifpDULi3LRupNy211ZFT3bv+KOVaBa3bkMT7Ixsp0tbjruHygIqQM3WLjR
3zMhwFCBCtS/7Dn7BQTuiZPM+FiCAV35hBMEmfdUZcg/X9PD/aeINe5i8StLTNhC
CwAKIkcPa1CJ+VMtcaItWtdd3cAfggAnZts99UN/tRdvt9tftGxjSlK3ynIzrvQ3
yTYQDbySnjvA1O//FJiWbBu/jKj8rJDfonvULuTNp48XYz2lb2l4UlqiBYdSNMUM
8Vb+Q4+eSW1w9Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:12 2025 by rpki-client