
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
File: bfwUOO4IFam_i3P5p87QlPIax54.mft (raw, json)
Hash identifier: 3sDYYAmRKZXVihBgYxxzNm66SiggMpmgXwv4521lQNY=
Subject key identifier: E3:9B:A5:D3:62:14:34:0C:C2:3B:87:48:A2:63:39:15:EF:BE:CC:E5
Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
Certificate issuer: /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Certificate serial: 0199FBEBE5EC8AEF3B009AC542984E0F3FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
Manifest number: 0A32
Signing time: Sun 19 Oct 2025 10:02:44 +0000
Manifest this update: Sun 19 Oct 2025 10:02:44 +0000
Manifest next update: Mon 20 Oct 2025 10:02:44 +0000
Files and hashes: 1: D9a5tzSXaB3YCXB51ESBfxmocyM.roa (hash: PgS49lglth99HhTvLssigXqfh7TfLNAP1ou+sfSqOKE=)
2: UBhFR3OZMj_R8VlXXyVrvKRDJfU.roa (hash: rvFp0ktgwJ1/3eTonU7/7v6UyJ5UYW+gGNm92KfeHQY=)
3: bfwUOO4IFam_i3P5p87QlPIax54.crl (hash: EZJN4LDCtJdJ+lsYwHGIHA6sBrKqQuhAVxmYM1QU6eQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e5:ec:8a:ef:3b:00:9a:c5:42:98:4e:0f:3f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Validity
Not Before: Oct 19 10:02:44 2025 GMT
Not After : Oct 20 10:02:44 2025 GMT
Subject: CN=e39ba5d36214340cc23b8748a2633915efbecce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:43:7d:32:f3:6f:29:ce:ff:40:37:e1:37:
f7:f4:8d:d5:e7:80:30:e1:97:d6:ce:fd:7d:3d:a9:
cc:28:93:f0:ef:cc:c0:f4:6d:d0:14:5c:9c:b9:c5:
3e:90:25:5e:49:cb:eb:23:2b:51:a7:1f:59:b5:1a:
4e:32:48:ed:9f:59:c5:1c:28:6c:50:76:98:d4:c3:
99:80:f8:6e:04:35:a4:f2:97:49:60:ad:b1:b7:98:
76:32:ce:97:7b:f8:79:3e:60:4a:4f:29:f5:9d:d4:
6a:b9:c8:d5:77:b2:b4:41:11:16:8b:b4:ba:59:5f:
7f:ee:43:cd:95:80:e9:d5:5f:02:7e:38:b7:6b:c9:
14:a6:c6:a4:d2:99:8d:7c:01:63:2f:4a:dc:53:9b:
27:fb:7f:4a:a6:c3:bf:e3:57:cc:b2:69:fb:5c:e4:
d3:7d:68:ca:6e:f1:81:b2:91:8f:7a:49:6b:40:34:
43:3f:aa:97:6a:33:0a:6f:32:df:89:3c:b5:3c:f9:
0b:a5:04:6f:2b:68:87:63:fd:c9:71:1a:56:8a:f5:
64:0f:db:11:d0:8d:62:c3:71:2a:b1:62:3a:52:c1:
4f:41:af:ac:49:38:11:76:98:d9:d4:19:d2:cb:4b:
61:83:64:e5:c3:14:30:ca:58:bd:bd:b9:45:bb:81:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9B:A5:D3:62:14:34:0C:C2:3B:87:48:A2:63:39:15:EF:BE:CC:E5
X509v3 Authority Key Identifier:
keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c5:40:90:ff:69:ed:61:ea:be:49:65:4b:a4:25:94:58:83:
67:3c:e4:3b:43:d8:fc:6d:4a:00:6e:3d:f9:20:cd:79:89:cd:
89:1f:a1:d8:c8:6d:51:d0:34:d0:d6:d9:43:4c:47:aa:89:ae:
76:55:24:0f:f2:37:ea:1a:5f:2f:c1:23:eb:35:cc:db:a2:77:
ae:f4:a9:21:6d:82:38:c6:9d:0f:9c:33:01:12:5f:c9:65:a4:
04:40:16:84:e4:dd:42:50:54:16:0c:69:0a:9e:49:e7:c6:58:
26:f4:7f:08:c2:e2:ba:10:88:10:d6:98:cd:45:d3:f7:d3:ad:
c0:1c:a2:ec:92:9c:fd:6f:df:76:e5:fd:0f:d1:b4:2a:32:25:
7f:b3:d8:db:18:d4:f4:2c:45:97:c7:a4:d5:e6:db:98:57:13:
24:29:98:26:b7:83:22:0d:c5:93:b4:57:51:3f:e9:0c:0b:49:
9e:2c:c2:71:26:99:ab:0d:e6:32:44:b8:4b:fb:e7:bd:95:11:
27:c5:28:4a:bd:ac:ff:4b:a4:41:b9:bf:7d:ac:8f:f8:5a:0b:
71:30:6e:d9:b7:16:91:f5:dd:65:c6:8d:3d:0e:ec:ea:48:d4:
55:08:37:76:e3:6c:d7:9d:c9:92:3b:58:93:c4:32:de:eb:a1:
96:bf:58:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:12 2025 by rpki-client