
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
File: DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft (raw, json)
Hash identifier: yjzuuXJb/qtZ86mqx1hbxj3kmFPW8v4nlaixJwG4xnY=
Subject key identifier: 2E:3E:0E:E1:F9:79:4C:D1:42:C8:AE:E6:0D:75:53:D6:D6:FC:A6:2B
Authority key identifier: 0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07
Certificate issuer: /CN=0d2f81b8c17f55dcdddec54c8cceadd695d28f07
Certificate serial: 019A0147B618615852AD1922BE90C5360027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
Manifest number: 063F
Signing time: Mon 20 Oct 2025 11:01:08 +0000
Manifest this update: Mon 20 Oct 2025 11:01:08 +0000
Manifest next update: Tue 21 Oct 2025 11:01:08 +0000
Files and hashes: 1: DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl (hash: yVg8ebw7mBcTlytEV1yexgfaMpc+Y6K1k6XAwlgiGCI=)
2: lPK8fmOBXjRw9-w6K-x4RRsdXag.roa (hash: xkt3YoVHRxkDkdpPayFqDFqLd1JlrYwaOS9KFpJXY3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:b6:18:61:58:52:ad:19:22:be:90:c5:36:00:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2f81b8c17f55dcdddec54c8cceadd695d28f07
Validity
Not Before: Oct 20 11:01:08 2025 GMT
Not After : Oct 21 11:01:08 2025 GMT
Subject: CN=2e3e0ee1f9794cd142c8aee60d7553d6d6fca62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:29:65:2d:42:24:b1:a8:df:9b:e4:50:ac:
58:98:31:76:9a:67:fc:76:14:d7:6a:1a:aa:f8:39:
18:58:2e:1b:8d:fe:1f:1b:0c:4a:53:09:1a:49:f8:
b1:c4:b7:a8:8b:06:32:e3:06:e6:49:29:10:cc:70:
83:c2:5e:9b:f7:3e:e8:a7:fb:79:0d:a7:26:aa:5f:
c1:e3:23:e7:ff:ee:34:76:85:ee:94:f2:6b:7c:6e:
0d:17:e2:54:a0:65:a2:aa:46:77:e5:de:43:44:02:
7b:ea:f5:69:d7:e7:a5:9e:22:cb:22:5a:01:8a:d8:
09:7e:0a:c5:fd:38:c0:6a:1c:55:29:8a:77:49:cf:
0b:f9:57:9c:64:9d:8d:71:d9:7e:d5:5f:1b:db:56:
32:3e:7e:d3:a4:19:f9:ea:b3:9e:d5:81:bf:53:37:
75:d6:84:da:be:db:04:6f:a0:b7:0d:d1:d0:78:c5:
eb:1a:f4:f0:82:34:fe:24:ad:ad:e1:e1:8a:55:c2:
21:5f:bd:a0:6d:19:9b:f3:5a:0a:82:14:96:ab:d7:
8c:e1:38:32:5d:43:b9:8b:55:51:bc:78:cb:db:56:
ec:7a:88:8a:34:de:b0:3d:40:e1:19:31:71:48:34:
a4:04:9c:8b:27:6f:98:b8:52:fc:b0:3f:57:bd:9e:
a9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3E:0E:E1:F9:79:4C:D1:42:C8:AE:E6:0D:75:53:D6:D6:FC:A6:2B
X509v3 Authority Key Identifier:
keyid:0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f6:97:af:ac:ad:6b:c0:48:ae:76:1a:54:c8:87:4e:fd:fe:
67:6a:9e:49:a7:54:f5:4e:fa:2a:9e:b3:da:1f:5e:2b:6e:d2:
63:e7:25:82:3e:93:df:6e:ab:5e:86:e0:36:b8:9e:9a:2f:b3:
a6:b8:90:bb:75:61:c5:6a:1b:d7:12:ca:f9:2c:dc:e4:b5:c0:
34:46:32:78:4e:21:0a:9e:71:5a:8d:28:ed:70:0b:1d:a3:86:
d6:43:fd:4c:41:50:e9:2a:34:c4:48:2b:1c:f8:d0:2a:47:46:
0d:c1:3b:1a:df:3d:f1:01:a9:00:2e:c6:c3:49:f3:79:ac:0e:
a6:08:fe:d1:0f:95:3d:17:0b:1f:45:67:b9:1b:c7:1d:12:55:
9f:4a:9b:36:26:26:a1:51:c1:84:38:30:e6:69:7c:8f:6e:f5:
92:85:63:2c:c0:ee:81:54:e1:de:59:70:7b:c2:e6:78:24:0b:
e3:91:fc:06:19:76:cd:7c:7c:06:0b:a2:d8:90:3d:43:74:2d:
6c:2c:76:a7:86:95:93:c4:91:e1:13:85:71:fc:0c:9a:42:e5:
f3:5d:2b:50:0d:79:6a:12:59:9a:24:c6:52:50:1d:6d:ca:66:
3d:ac:50:25:68:33:60:50:6c:aa:52:f9:58:c0:b6:7b:c2:b9:
2f:14:cc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:06 2025 by rpki-client