Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
File: BpCRPbvu2t3pXc5HBFJihOeufMo.mft (raw, json)
Hash identifier: 6efz9YBkt8LTPBq0I65+1PP+Si1UT2lNl+9iUW/ay+4=
Subject key identifier: 9F:A8:D2:20:AB:A4:6C:FF:C3:77:2B:98:B2:65:C2:A9:61:97:C7:D7
Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
Certificate issuer: /CN=0690913dbbeedadde95dce4704526284e7ae7cca
Certificate serial: 0198D4A782BD8A7925017D4C82D72245F486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 02:00:04 +0000
Manifest this update: Sat 23 Aug 2025 02:00:04 +0000
Manifest next update: Sun 24 Aug 2025 02:00:04 +0000
Files and hashes: 1: BpCRPbvu2t3pXc5HBFJihOeufMo.crl (hash: 4+M/ExzgYS94eRXefZ86dI3tRk53vDOetZWrlYO6JqE=)
2: Iy7lkqpbyaSDL2grrU_SdETf7DQ.roa (hash: DorRUxYefmWL1rp1az3xVIzdxI7JSTisHh4gg2RZ6eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:82:bd:8a:79:25:01:7d:4c:82:d7:22:45:f4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca
Validity
Not Before: Aug 23 02:00:04 2025 GMT
Not After : Aug 24 02:00:04 2025 GMT
Subject: CN=9fa8d220aba46cffc3772b98b265c2a96197c7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:bf:ab:d3:92:bf:f6:1d:e9:d2:65:35:95:
9f:71:e6:e0:38:be:a6:70:8f:41:60:6a:29:ac:ce:
5e:8b:91:ce:45:b0:c5:24:a9:5f:00:8e:f7:2b:ce:
b1:91:b9:3c:65:76:4c:9a:ae:35:42:6b:68:0d:74:
8c:84:81:6f:29:1b:54:f5:5a:10:5c:85:5c:3c:98:
eb:b8:4f:7e:89:b5:e2:22:68:5a:d8:14:11:71:b6:
8a:b3:e4:77:55:b7:77:bf:fb:64:1d:36:5e:f7:11:
f1:26:4c:de:dd:87:3c:98:e3:8e:12:a6:18:58:2c:
df:41:b4:a7:63:a9:e5:5c:c5:59:30:e3:e0:47:a2:
90:ab:05:04:81:e7:cd:f9:dd:b7:27:0a:20:69:75:
ac:13:fe:81:72:5c:dd:c5:73:f5:08:02:0a:ac:98:
8a:0d:43:60:ee:a9:f5:ea:2a:2c:76:8f:32:4a:6f:
b1:20:e5:24:c4:88:5f:05:e4:7e:f3:e1:aa:45:25:
9e:7d:3f:12:5d:29:62:4f:3a:31:12:37:3c:b0:a4:
6c:c0:8b:66:d6:36:48:7e:cc:c6:68:84:43:6e:fb:
03:0d:ac:8b:8d:ef:ff:30:41:75:d8:7f:39:35:30:
7d:ab:2a:2f:82:79:65:fd:f2:ff:b0:fe:0c:68:3a:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A8:D2:20:AB:A4:6C:FF:C3:77:2B:98:B2:65:C2:A9:61:97:C7:D7
X509v3 Authority Key Identifier:
keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:88:d5:0b:b1:a2:73:02:3e:25:75:6d:44:84:47:1b:03:02:
0e:50:0f:cc:e4:87:ec:6f:95:20:5a:f2:a1:f9:e1:d1:ad:6e:
6a:53:c2:02:84:df:47:2c:93:e7:be:05:d1:8c:da:2c:06:f6:
44:dd:d9:fb:87:06:45:df:65:bc:d3:71:d6:49:ec:f9:47:e8:
a7:3e:3b:b2:c7:b1:43:62:e2:45:3b:c2:35:69:4c:2c:97:d2:
d7:60:74:22:0b:51:a0:c8:dc:89:ec:f2:0f:c9:33:99:00:e8:
fa:78:c0:15:2c:d5:29:9f:65:6f:5a:ed:1f:78:e2:86:b4:a9:
56:d7:77:22:f8:07:29:93:5d:3b:5d:4f:56:3b:94:99:7f:49:
3b:8e:bc:6b:81:ae:58:89:25:fe:1b:59:27:47:a0:a2:1b:1e:
82:41:80:b9:fb:1c:56:fc:8b:7e:c1:52:4d:9c:4f:a6:97:22:
3a:74:d8:77:27:6f:93:f5:75:69:1c:75:ea:45:cf:17:2c:e6:
9e:da:68:02:18:93:74:70:58:2d:cf:d3:a3:ec:08:a1:99:c0:
72:48:21:92:99:8e:a3:bb:17:f5:70:73:52:8c:bb:80:03:1e:
d1:98:aa:38:51:b4:4a:4c:dc:f4:3a:53:cf:9e:86:56:c9:b5:
74:9f:66:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:43:28 2025 by rpki-client