Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
File: BgPfkU3wTkf1a9li8vncPwQ0pdM.mft (raw, json)
Hash identifier: VlWxOW4BicGZgLRQ+Yeaww4GxysRnZhzmbjNX5xc8Lw=
Subject key identifier: BA:25:B1:0F:B6:89:D5:62:48:C1:DA:2D:33:F8:6F:AF:80:10:F6:A5
Authority key identifier: 06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
Certificate issuer: /CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Certificate serial: 0198D4E003F66D10B0A02A3F9180AFA1FEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
Manifest number: 0894
Signing time: Sat 23 Aug 2025 03:01:47 +0000
Manifest this update: Sat 23 Aug 2025 03:01:47 +0000
Manifest next update: Sun 24 Aug 2025 03:01:47 +0000
Files and hashes: 1: BgPfkU3wTkf1a9li8vncPwQ0pdM.crl (hash: g4VASGcPk0EfNQVeTo5ve1dnBviLnZgbimt0Btha5R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:03:f6:6d:10:b0:a0:2a:3f:91:80:af:a1:fe:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Validity
Not Before: Aug 23 03:01:47 2025 GMT
Not After : Aug 24 03:01:47 2025 GMT
Subject: CN=ba25b10fb689d56248c1da2d33f86faf8010f6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:0c:9d:f9:ce:8e:50:53:70:f2:cb:e9:87:
86:f3:9d:d0:87:88:1e:b8:fa:1b:54:f8:f7:52:ea:
05:6e:0e:a1:93:a2:fe:1f:7b:42:fc:03:75:bf:6a:
5a:08:92:02:07:37:2b:71:fe:e7:d9:a6:92:f8:f9:
65:b9:e8:b1:de:6e:c8:41:8e:16:03:81:a5:af:9a:
6e:af:25:4b:e2:5c:1b:df:3d:c9:3a:7f:4c:5c:5e:
74:ac:1b:88:72:7a:ac:e7:7c:b4:43:90:da:44:be:
36:c9:9f:34:93:4a:49:c5:3b:82:4a:49:61:79:fb:
16:7c:f1:d6:79:18:a6:6b:94:7d:94:f4:75:11:07:
5c:ac:a9:69:a3:16:54:73:ae:c3:1a:93:64:08:c8:
6c:e4:b5:9d:df:e4:96:01:aa:1c:0e:d2:93:f5:2e:
10:41:68:40:b9:64:b8:11:15:62:08:fc:12:27:c4:
e2:0d:5c:9f:54:d3:bf:ee:f3:59:73:45:64:4a:f6:
c7:e5:4a:0b:25:f9:09:27:81:5e:48:b6:81:1b:f0:
64:7b:aa:32:eb:e0:9d:d3:60:2b:1a:56:0d:64:ce:
a2:4c:1c:7b:9d:7e:76:6c:61:ef:0b:90:1c:93:54:
e5:a1:70:bd:49:f6:90:af:4c:48:71:07:23:52:29:
a1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:25:B1:0F:B6:89:D5:62:48:C1:DA:2D:33:F8:6F:AF:80:10:F6:A5
X509v3 Authority Key Identifier:
keyid:06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a3:01:a8:4c:bc:9c:20:6d:2a:d1:6c:7b:66:00:e8:e4:78:
10:9a:5e:29:c5:1c:ee:8d:50:d5:a0:a9:08:9d:16:b4:7a:9c:
3e:31:6a:93:fb:f8:26:09:87:70:a8:5c:16:e0:4b:79:8e:8e:
b4:d5:d0:b0:96:e7:69:b2:95:3b:22:75:15:3d:84:46:fa:3e:
6b:10:c3:b3:1e:25:f6:f6:25:2e:02:f2:2a:87:a2:6a:5d:5a:
12:be:57:24:bf:34:e9:63:58:1d:00:da:6a:1e:cf:57:5a:d4:
aa:ce:5c:1c:79:b7:61:09:26:79:f1:fc:c1:fe:b5:b9:f1:e4:
a3:6c:bb:04:04:a8:1b:58:4a:05:e9:c8:db:80:a3:99:06:8d:
6b:68:e6:ca:63:26:60:9f:44:37:a9:68:6c:2c:d5:da:6f:ed:
42:11:e1:f4:d0:90:fb:e9:f9:55:ba:fd:93:ce:70:07:f7:a2:
41:7f:c1:5b:22:fc:42:d2:21:03:d7:e5:d6:cd:23:74:4a:2f:
fb:2a:63:c5:13:54:18:d8:1a:50:0f:e2:50:10:a2:31:c7:17:
d2:47:8a:7d:01:92:90:47:3d:95:cf:66:ea:90:06:c0:02:f4:
aa:f0:b8:60:3c:1b:2a:c0:8e:ff:d2:aa:1c:62:3b:73:59:f6:
f0:02:54:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:50 2025 by rpki-client