Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: aB4HGEo4OXc80BpsTfZugVxRsNAiJzCDvBIMaoqFkY4=
Subject key identifier: B9:E4:DD:0C:96:51:91:AF:28:85:8C:22:B1:94:1E:1D:95:06:71:C6
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 0199FFFE9E884D7AF065D1118E0D8E83D78B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 162B
Signing time: Mon 20 Oct 2025 05:01:40 +0000
Manifest this update: Mon 20 Oct 2025 05:01:40 +0000
Manifest next update: Tue 21 Oct 2025 05:01:40 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: 4Sx8x+7z3pM4KZYO1wg6A+v+ABvm8g52Rw4MFmB2Pb8=)
2: fNJzWMxwIRs-oxYj6gVLzdXlR9o.roa (hash: 2scd04V5Cfx10HVTv5lVQAKj0cVcY+kOPgXcQil/rZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:9e:88:4d:7a:f0:65:d1:11:8e:0d:8e:83:d7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Oct 20 05:01:40 2025 GMT
Not After : Oct 21 05:01:40 2025 GMT
Subject: CN=b9e4dd0c965191af28858c22b1941e1d950671c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:42:c2:71:20:6a:a0:a4:f8:e7:07:a8:a2:
55:72:8e:a7:d0:56:4c:fb:3a:62:5b:b3:fb:94:63:
09:b3:1e:d2:2f:58:4e:7a:29:9b:82:94:69:82:8a:
c8:78:43:f4:11:6a:76:7c:8a:f5:60:c7:b1:1a:80:
21:63:66:28:0b:3c:20:f8:4c:32:ba:a5:ed:d9:94:
a5:8a:c8:e3:6f:a3:e1:b0:d3:9e:4b:9f:73:d0:59:
03:c0:e2:c4:c5:f8:07:27:b1:7e:ff:c4:68:90:b9:
d8:88:ad:b9:36:13:22:d1:a9:71:8f:25:b1:04:d3:
f3:e0:7d:3f:30:8c:8e:20:7e:45:80:a9:4c:2f:3c:
a3:9c:77:38:d1:09:c1:5b:05:1c:62:ca:bb:ad:f8:
20:1c:c8:1f:4e:6d:38:64:78:02:fc:70:1d:d8:16:
fa:6a:d6:a0:4b:80:43:cb:7c:e0:8a:14:db:00:32:
ea:5b:89:e3:7b:ee:81:21:55:3f:fa:a3:b7:42:75:
23:b6:31:d5:a3:a0:7b:e2:74:0a:90:03:bc:35:55:
b7:2b:ce:42:bc:f2:ab:11:6e:86:93:0e:4c:01:f7:
c7:8b:7e:47:a4:60:32:e8:0d:f4:44:27:20:4f:d2:
ee:1e:af:03:77:c2:04:bf:17:aa:8b:40:95:2f:a6:
80:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E4:DD:0C:96:51:91:AF:28:85:8C:22:B1:94:1E:1D:95:06:71:C6
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:94:e3:0a:eb:24:f0:a6:e3:29:4f:77:f8:02:29:ab:ba:23:
93:20:e2:4b:b5:28:de:d7:8d:d1:56:fa:5c:3d:ab:cf:78:52:
75:e0:9f:27:5f:a7:66:1b:a6:14:3e:e6:df:3c:20:3a:1b:93:
be:7c:64:54:45:0a:58:53:68:87:96:92:fe:57:35:a9:b8:7f:
b7:91:6c:ee:91:cc:d7:46:13:f2:b1:e4:94:47:e9:ba:d1:b0:
2c:7b:df:7e:43:26:e9:3a:7b:98:dc:bf:12:54:1a:a0:48:f7:
1e:76:74:64:e7:44:13:ac:ff:3d:33:1c:90:ef:a6:8c:67:51:
82:1e:5a:f6:f4:86:f2:39:39:10:a1:29:71:21:05:68:54:c2:
98:4a:d5:96:44:5a:6f:7d:ab:31:ce:13:28:5e:25:0d:f0:5f:
30:35:ad:45:c6:b1:d6:34:b5:ac:8e:6a:72:50:64:e7:5a:19:
e6:43:83:0b:d5:6e:d4:ba:3a:9b:4b:6f:2e:63:c9:26:e4:22:
4c:3a:37:41:e5:e2:49:64:aa:e8:97:2a:84:fa:20:89:df:16:
44:87:6a:04:90:7a:ec:90:0e:02:54:0c:c8:46:66:e7:8b:45:
02:28:76:0f:c5:32:b7:e2:76:4d:8b:7a:55:96:26:4c:08:4f:
25:fd:7d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:55 2025 by rpki-client