Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
File: BAfWwkhET2tcN42w_-wPiZJW66M.mft (raw, json)
Hash identifier: BVDII9+up/ypM1ldvSjE2QTvIHPqNAYY4FKGnz6xxJY=
Subject key identifier: 5A:2C:96:FA:AF:03:D6:D5:15:FA:E1:03:49:8A:82:E3:DA:C8:54:BD
Authority key identifier: 04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
Certificate issuer: /CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Certificate serial: 0199FCFD482D55C311A6FFA2248957F088E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
Manifest number: 09B6
Signing time: Sun 19 Oct 2025 15:01:21 +0000
Manifest this update: Sun 19 Oct 2025 15:01:21 +0000
Manifest next update: Mon 20 Oct 2025 15:01:21 +0000
Files and hashes: 1: BAfWwkhET2tcN42w_-wPiZJW66M.crl (hash: KLDxwZ7vz8LL0WLqcJ5Q9qqzz1yA2+fbdHuCe/GWQ/4=)
2: QpIKO4ejjPjXaNQ1_KyJkWKevB8.roa (hash: e6W0MKDyzgf7+BDF2Ho9KsY3xBRYMIFdcPH8WpxhKmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:48:2d:55:c3:11:a6:ff:a2:24:89:57:f0:88:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Validity
Not Before: Oct 19 15:01:21 2025 GMT
Not After : Oct 20 15:01:21 2025 GMT
Subject: CN=5a2c96faaf03d6d515fae103498a82e3dac854bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a8:e1:48:25:11:32:44:54:c5:57:21:28:c0:
6e:2a:07:a8:ae:02:33:33:35:2f:e4:96:16:e9:1c:
fb:82:5e:e0:dc:19:1e:49:a9:91:75:a4:27:33:61:
a9:fe:4d:9e:cd:e9:52:7e:4a:bc:93:63:89:54:28:
a8:e7:21:72:07:2e:24:ac:6e:87:5e:b4:d5:f7:f9:
df:82:93:97:d0:35:d5:8c:45:d1:6f:54:cf:0f:43:
f5:56:54:d7:21:0e:23:e0:c6:8f:2d:49:05:ff:a3:
ba:2a:58:67:ec:aa:3f:ea:b3:12:c0:39:a3:5e:2e:
7e:71:76:0a:fd:44:8d:d9:c7:19:f2:02:c2:72:e6:
91:e1:19:66:08:5f:3c:71:4d:f2:5f:60:35:01:9c:
87:7a:7d:4f:c9:60:79:70:a7:5f:5b:c0:0b:5a:1b:
7c:19:76:5f:6e:e3:6f:ab:8d:94:b6:cd:31:46:97:
0a:47:50:b0:63:c6:90:20:af:1b:7d:30:ca:bc:ec:
ef:81:90:58:50:f8:00:35:a5:c8:38:44:a9:c8:7c:
02:99:a8:8b:2d:ea:cd:4e:9a:e5:aa:98:90:ae:9e:
98:ec:8f:4b:14:c0:c5:8d:55:1d:75:bf:80:2b:03:
24:e4:e0:8a:9c:04:2a:fc:58:d5:8b:b6:33:3e:d2:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2C:96:FA:AF:03:D6:D5:15:FA:E1:03:49:8A:82:E3:DA:C8:54:BD
X509v3 Authority Key Identifier:
keyid:04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b0:b4:35:fe:d2:d9:5f:51:3c:f3:a1:de:1a:43:5e:c6:01:
fb:f5:29:b8:24:bd:3e:65:a8:d4:4d:ce:86:23:ab:52:d5:4e:
b7:b8:62:f2:11:2b:77:a4:25:82:ff:b1:b7:73:7e:42:45:dc:
12:b4:e7:d8:40:20:a2:fe:6c:f7:cd:1c:81:f6:70:ea:46:2f:
4f:53:e2:9b:39:f4:a0:ea:3e:81:bf:c0:55:5f:c6:4f:a3:eb:
bf:74:e0:22:87:c0:60:bd:ef:fb:cf:ae:e8:54:60:37:54:7f:
d2:19:01:a8:2f:6d:81:52:d7:6e:ed:7f:ed:cd:3e:7d:ac:74:
a4:65:9c:c4:7d:66:d5:55:46:83:b0:b7:2e:06:97:10:75:71:
de:c8:37:51:03:b2:da:2a:d2:4f:cd:9a:e2:55:8c:b7:34:2b:
98:3a:e0:a0:d5:fd:18:89:e4:41:95:20:a0:b7:cf:ad:a0:2c:
8d:33:2e:83:ef:e0:eb:b7:9d:ae:9e:1a:10:8c:4e:31:30:17:
64:08:d0:33:38:8d:e2:62:45:0d:0b:26:9f:27:9d:53:4e:62:
40:50:37:9f:05:65:ee:d7:ae:97:8f:44:76:da:24:04:33:59:
16:6c:24:ae:72:7c:36:d8:22:6a:ad:49:3f:bd:94:d2:cc:bc:
01:59:22:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:35:10 2025 by rpki-client