Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
File: bfwUOO4IFam_i3P5p87QlPIax54.mft (raw, json)
Hash identifier: 0wopOBuHNP9LNxMni6OnFA014imwSUr2AdYeamS4RRE=
Subject key identifier: 37:19:BF:C5:D0:B6:1F:A4:90:32:07:53:2B:EE:8F:92:04:C0:E3:A5
Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
Certificate issuer: /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Certificate serial: 0198D66057726E7FD323C2DC298D8779EEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
Manifest number: 099A
Signing time: Sat 23 Aug 2025 10:01:34 +0000
Manifest this update: Sat 23 Aug 2025 10:01:34 +0000
Manifest next update: Sun 24 Aug 2025 10:01:34 +0000
Files and hashes: 1: D9a5tzSXaB3YCXB51ESBfxmocyM.roa (hash: PgS49lglth99HhTvLssigXqfh7TfLNAP1ou+sfSqOKE=)
2: UBhFR3OZMj_R8VlXXyVrvKRDJfU.roa (hash: rvFp0ktgwJ1/3eTonU7/7v6UyJ5UYW+gGNm92KfeHQY=)
3: bfwUOO4IFam_i3P5p87QlPIax54.crl (hash: K2VcCwvPclKsTfwwYHhCikVFAAFmUuBbfTFF1KVIWWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:57:72:6e:7f:d3:23:c2:dc:29:8d:87:79:ee:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Validity
Not Before: Aug 23 10:01:34 2025 GMT
Not After : Aug 24 10:01:34 2025 GMT
Subject: CN=3719bfc5d0b61fa4903207532bee8f9204c0e3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:a6:7c:e6:de:01:22:71:67:40:e8:f4:05:
5f:dd:67:b8:9e:42:45:e9:bc:3d:53:c0:45:2d:64:
2c:19:56:ce:d9:a2:05:08:69:43:6f:30:eb:26:37:
25:42:bf:85:96:3a:24:27:07:64:dc:c1:2b:09:78:
9d:09:94:f1:7c:1a:76:46:c9:cb:0d:d0:3c:85:76:
f0:6a:99:7b:41:7d:61:2a:3b:b2:ea:9a:77:f9:76:
fc:f9:d9:60:ee:4b:28:9a:dd:44:25:00:5f:90:17:
d2:ef:5b:61:7a:e5:c9:34:be:dd:32:b6:ae:2c:d7:
23:70:b2:e3:ce:f8:c2:59:77:e6:a5:a0:f2:d2:39:
ab:d5:91:9f:97:f1:87:1c:1c:3d:8f:15:0e:83:ac:
1a:ed:d8:28:80:54:14:35:dd:97:9c:4c:ea:18:b4:
42:0d:04:8f:b2:8f:f4:54:67:a4:19:d7:b1:ef:0e:
84:f5:ca:eb:38:72:05:f5:5f:88:c3:a3:77:3e:82:
63:eb:82:f7:2e:91:5e:f1:d5:12:a7:2a:28:dd:29:
3d:4d:da:0e:ce:9e:48:b3:c2:d3:aa:38:6c:86:f1:
b1:9a:0a:86:d5:68:b7:42:bc:78:03:43:42:b0:7e:
c7:1e:e6:98:f8:b4:61:e7:36:9e:e9:8e:b0:5f:2b:
06:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:19:BF:C5:D0:B6:1F:A4:90:32:07:53:2B:EE:8F:92:04:C0:E3:A5
X509v3 Authority Key Identifier:
keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3f:f8:68:b6:ea:55:77:b7:74:7d:09:50:ec:17:e1:15:07:
67:93:fd:8d:c2:96:06:d4:a2:7e:27:ef:8f:42:2b:a5:b7:e2:
c9:d5:9d:18:a2:81:3f:e0:2d:e9:2c:71:b6:1b:fa:c1:fe:b7:
2a:ce:cb:6d:a6:dc:08:64:57:38:31:d8:7c:82:1b:93:77:d2:
5d:1e:65:82:1c:93:da:fd:18:7c:ae:0a:7c:c7:4f:4b:7c:da:
5f:43:f1:64:31:6f:99:66:bb:89:c5:53:eb:6c:ae:e4:78:28:
0f:21:e5:50:46:f3:40:9b:c0:a7:5a:87:17:8a:a6:06:9f:40:
a6:6e:c3:a8:ca:58:ee:5b:d5:7d:84:a8:0e:4f:06:c9:6a:b6:
bd:f7:29:f7:36:e0:87:a1:9c:89:44:36:d4:c5:2e:dd:63:75:
50:a7:c6:87:17:38:56:76:cb:41:31:ce:f0:77:f9:5c:e9:2d:
e4:27:da:88:22:b3:fe:67:3e:81:92:f9:8f:82:ff:6f:7c:82:
87:95:09:a5:e0:a0:d3:e3:03:12:c6:1a:6d:63:48:6f:5b:5d:
90:74:25:f5:2c:1c:43:de:23:c8:96:ff:d0:ef:45:91:52:ab:
79:ef:48:5d:33:52:08:78:1f:79:c1:64:32:97:8d:c1:09:85:
37:8e:40:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYFdybn/TI8LcKY2Hee6mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmMxNDM4ZWUwODE1YTliZjhiNzNmOWE3Y2VkMDk0ZjIx
YWM3OWUwHhcNMjUwODIzMTAwMTM0WhcNMjUwODI0MTAwMTM0WjAzMTEwLwYDVQQD
EygzNzE5YmZjNWQwYjYxZmE0OTAzMjA3NTMyYmVlOGY5MjA0YzBlM2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkemfObeASJxZ0Do9AVf3We4nkJF
6bw9U8BFLWQsGVbO2aIFCGlDbzDrJjclQr+FljokJwdk3MErCXidCZTxfBp2RsnL
DdA8hXbwapl7QX1hKjuy6pp3+Xb8+dlg7ksomt1EJQBfkBfS71theuXJNL7dMrau
LNcjcLLjzvjCWXfmpaDy0jmr1ZGfl/GHHBw9jxUOg6wa7dgogFQUNd2XnEzqGLRC
DQSPso/0VGekGdex7w6E9crrOHIF9V+Iw6N3PoJj64L3LpFe8dUSpyoo3Sk9TdoO
zp5Is8LTqjhshvGxmgqG1Wi3Qrx4A0NCsH7HHuaY+LRh5zae6Y6wXysG3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcZv8XQth+kkDIHUyvuj5IEwOOlMB8GA1UdIwQY
MBaAFG38FDjuCBWpv4tz+afO0JTyGseeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yZjk4Y2ItNmQ5NC00OGExLThkYmEt
ZDY0Njc2N2M1ZjEzLzEvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8yZjk4Y2ItNmQ5NC00OGExLThkYmEtZDY0Njc2N2M1ZjEz
LzEvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUD/4aLbq
VXe3dH0JUOwX4RUHZ5P9jcKWBtSififvj0IrpbfiydWdGKKBP+At6Sxxthv6wf63
Ks7LbabcCGRXODHYfIIbk3fSXR5lghyT2v0YfK4KfMdPS3zaX0PxZDFvmWa7icVT
62yu5HgoDyHlUEbzQJvAp1qHF4qmBp9Apm7DqMpY7lvVfYSoDk8GyWq2vfcp9zbg
h6GciUQ21MUu3WN1UKfGhxc4VnbLQTHO8Hf5XOkt5CfaiCKz/mc+gZL5j4L/b3yC
h5UJpeCg0+MDEsYabWNIb1tdkHQl9SwcQ94jyJb/0O9FkVKree9IXTNSCHgfecFk
MpeNwQmFN45A3w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:36:52 2025 by rpki-client