Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
File: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft (raw, json)
Hash identifier: RuJEZsBY2FfjOziKB3GRM3CUkO2M+ywXUxis1qzzNWI=
Subject key identifier: F4:01:FB:C9:4F:AE:DC:3B:E2:A0:3D:69:2B:E2:1D:52:81:E2:E5:13
Authority key identifier: 6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
Certificate issuer: /CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Certificate serial: 01984A4146718EB6CAD68E6CEF125555D9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
Manifest number: 07EA
Signing time: Sun 27 Jul 2025 05:00:48 +0000
Manifest this update: Sun 27 Jul 2025 05:00:48 +0000
Manifest next update: Mon 28 Jul 2025 05:00:48 +0000
Files and hashes: 1: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl (hash: WXlyEcFDzwJbjXjLznoxXbny/GEs2YwFdpZHmFoMw7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:46:71:8e:b6:ca:d6:8e:6c:ef:12:55:55:d9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Validity
Not Before: Jul 27 05:00:48 2025 GMT
Not After : Jul 28 05:00:48 2025 GMT
Subject: CN=f401fbc94faedc3be2a03d692be21d5281e2e513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:12:eb:12:33:04:af:f4:64:85:f0:25:a7:
11:31:e3:81:8b:5b:97:2c:61:ee:19:ab:02:f0:87:
16:82:9d:27:65:32:89:2f:e6:86:e7:b5:7e:fd:a5:
06:cc:3f:7e:14:14:47:16:a1:3c:40:e5:d9:d9:af:
70:bf:ca:92:6c:c8:b4:a9:ec:6c:ef:31:06:f6:a9:
05:33:18:35:26:16:f3:d5:39:82:67:4a:c5:41:b7:
99:8b:12:53:6d:ce:3f:fc:65:4f:22:4e:79:c2:5c:
5b:8d:8e:cf:c2:c9:c6:67:c6:6e:2b:fc:6b:11:3c:
36:da:eb:ae:5a:d9:6e:92:84:b2:a4:fe:be:92:38:
84:6e:e8:16:b2:66:c1:c9:36:af:39:54:49:12:33:
4f:0e:f2:61:6e:48:ec:c5:45:15:51:f7:d0:3b:a2:
ae:3f:2c:fe:4b:55:15:db:a5:63:7c:3b:8c:b7:c5:
e3:92:c1:73:33:5e:a1:f8:88:10:3c:1b:71:f4:62:
aa:5b:c8:d2:40:66:64:a8:c7:4a:2b:0b:6c:8f:72:
62:ee:e1:57:02:40:7e:0e:54:9e:d8:ab:15:ad:cf:
da:af:a4:f4:2d:6b:94:9b:9a:60:18:e0:87:4c:8a:
49:b4:1d:30:44:3c:f8:16:4b:39:4d:a3:b0:c9:f6:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:01:FB:C9:4F:AE:DC:3B:E2:A0:3D:69:2B:E2:1D:52:81:E2:E5:13
X509v3 Authority Key Identifier:
keyid:6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:da:ab:5e:57:77:be:a0:cb:3a:7f:09:66:3e:d7:c2:cc:08:
b3:92:be:39:df:0c:6a:48:b1:64:ae:b8:68:5b:6b:c0:f3:be:
83:ec:64:37:df:56:78:dd:e8:ca:c0:87:e3:01:4b:30:e5:bb:
65:b9:11:c0:57:15:79:ef:f1:0d:a1:f4:ac:63:22:75:1b:db:
b6:f8:e5:8c:f4:70:c1:ae:f7:58:14:3b:a8:8b:ce:9d:96:f5:
e4:19:11:3e:5e:5a:5a:9a:a3:fa:a8:bb:db:66:87:ae:43:4c:
72:86:b0:4d:a7:f8:e2:65:ca:a6:b4:6c:0f:dc:4e:6a:1f:b2:
22:03:1e:7b:8f:47:7f:51:bd:81:ab:81:0e:9f:1a:07:40:e5:
d0:0b:08:57:9a:54:53:1d:2e:9f:65:d4:2f:d5:4b:8f:10:00:
21:63:6c:55:b1:1f:8c:0e:90:0d:f6:19:6a:4a:97:ce:ea:9b:
a7:3b:46:ab:fa:24:5d:81:3d:21:f3:2d:f3:ec:ca:b5:39:0e:
83:1c:d4:41:94:e8:f7:95:21:f4:da:40:39:86:db:e4:e6:7f:
de:3f:14:cd:cb:c1:5f:99:e3:a4:a1:77:d1:e3:af:40:da:c3:
cc:8d:80:65:4d:a2:23:5e:65:a8:e4:47:dc:05:d8:9f:97:f5:
5c:52:d7:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQUZxjrbK1o5s7xJVVdnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmMzZGEyYjhiMmU0OWNiNTMxMTcxZTkxMGVkY2VlNzlh
ZTU4YTQwHhcNMjUwNzI3MDUwMDQ4WhcNMjUwNzI4MDUwMDQ4WjAzMTEwLwYDVQQD
EyhmNDAxZmJjOTRmYWVkYzNiZTJhMDNkNjkyYmUyMWQ1MjgxZTJlNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthAS6xIzBK/0ZIXwJacRMeOBi1uX
LGHuGasC8IcWgp0nZTKJL+aG57V+/aUGzD9+FBRHFqE8QOXZ2a9wv8qSbMi0qexs
7zEG9qkFMxg1Jhbz1TmCZ0rFQbeZixJTbc4//GVPIk55wlxbjY7PwsnGZ8ZuK/xr
ETw22uuuWtlukoSypP6+kjiEbugWsmbByTavOVRJEjNPDvJhbkjsxUUVUffQO6Ku
Pyz+S1UV26VjfDuMt8XjksFzM16h+IgQPBtx9GKqW8jSQGZkqMdKKwtsj3Ji7uFX
AkB+DlSe2KsVrc/ar6T0LWuUm5pgGOCHTIpJtB0wRDz4Fks5TaOwyfZmSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQB+8lPrtw74qA9aSviHVKB4uUTMB8GA1UdIwQY
MBaAFG38PaK4suSctTEXHpEO3O55rlikMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZ3OW9yaXk1SnkxTVJjZWtRN2M3bm11V0tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83ZDlhOTgtNWZmNy00MjgyLWI1ZmQt
ZGRkNGIwYTFiOWE2LzEvYmZ3OW9yaXk1SnkxTVJjZWtRN2M3bm11V0tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS83ZDlhOTgtNWZmNy00MjgyLWI1ZmQtZGRkNGIwYTFiOWE2
LzEvYmZ3OW9yaXk1SnkxTVJjZWtRN2M3bm11V0tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvdqrXld3
vqDLOn8JZj7XwswIs5K+Od8MakixZK64aFtrwPO+g+xkN99WeN3oysCH4wFLMOW7
ZbkRwFcVee/xDaH0rGMidRvbtvjljPRwwa73WBQ7qIvOnZb15BkRPl5aWpqj+qi7
22aHrkNMcoawTaf44mXKprRsD9xOah+yIgMee49Hf1G9gauBDp8aB0Dl0AsIV5pU
Ux0un2XUL9VLjxAAIWNsVbEfjA6QDfYZakqXzuqbpztGq/okXYE9IfMt8+zKtTkO
gxzUQZTo95Uh9NpAOYbb5OZ/3j8UzcvBX5njpKF30eOvQNrDzI2AZU2iI15lqORH
3AXYn5f1XFLXEQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:06:44 2025 by rpki-client