Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
File: bfpKH_x0mxxPo7bagZttu5rohaA.mft (raw, json)
Hash identifier: HPn+9mbgkaV2kEDz/Pr4EvtYzSd+EvuUhsJL+TDcL8E=
Subject key identifier: C3:CC:F9:C7:B4:FE:74:10:A7:1D:2D:27:A2:86:F0:3E:25:8A:AE:94
Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Certificate serial: 01965EE06E760E6E0B1C974E41074EC39835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
Manifest number: 1507
Signing time: Tue 22 Apr 2025 19:01:28 +0000
Manifest this update: Tue 22 Apr 2025 19:01:28 +0000
Manifest next update: Wed 23 Apr 2025 19:01:28 +0000
Files and hashes: 1: bfpKH_x0mxxPo7bagZttu5rohaA.crl (hash: +wO7pC3LWTKywoKys86UaT4eF6cZo8BIGgfwV80HQaQ=)
2: dwh4D1mLE-BJM3O3JRIbCS8CiAE.roa (hash: 0ebutZnVkcZLLmshdUGZMamHfBLJzhHs685jtIwVRjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:e0:6e:76:0e:6e:0b:1c:97:4e:41:07:4e:c3:98:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Validity
Not Before: Apr 22 19:01:28 2025 GMT
Not After : Apr 23 19:01:28 2025 GMT
Subject: CN=c3ccf9c7b4fe7410a71d2d27a286f03e258aae94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:8b:55:0f:fe:ac:02:f6:b4:18:46:d9:2c:
55:ef:0f:78:9a:5e:ba:af:0b:f0:46:e7:80:a7:dc:
5b:a6:79:e3:9b:85:f7:4e:ae:d9:2d:41:dd:93:cb:
ee:22:21:11:86:4c:7a:c5:e9:45:c1:b4:38:56:fc:
5b:4d:73:ee:85:60:a1:7a:f9:40:d1:49:6d:46:ca:
35:03:25:69:83:3b:fb:84:33:a5:de:dc:5f:d8:c0:
15:62:f5:7e:09:67:cb:78:ad:8e:f9:bd:10:d9:05:
2b:2a:f8:a4:7a:20:89:ca:ff:e9:cc:9f:e7:c1:4d:
31:f7:d1:59:62:68:59:92:ee:40:e5:79:02:f9:77:
05:e3:73:fe:8e:5a:84:bb:00:f4:2f:38:7b:5c:93:
61:42:7f:00:5a:e5:61:89:a2:0f:7a:03:85:de:0f:
ec:f4:07:7f:ea:b4:e1:c1:76:f4:bc:cf:a5:a4:aa:
8e:33:e5:1b:b5:72:b8:fb:03:e1:a0:47:69:b4:d8:
6c:aa:8d:44:07:42:eb:5f:8b:25:d6:d5:24:03:c5:
19:76:e1:83:52:1e:b6:2f:c4:a5:a9:97:84:50:14:
7a:bc:74:27:61:b1:18:94:c0:46:f9:ca:f3:c0:cc:
b2:85:62:77:45:48:cb:a0:57:db:9d:e5:07:33:11:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CC:F9:C7:B4:FE:74:10:A7:1D:2D:27:A2:86:F0:3E:25:8A:AE:94
X509v3 Authority Key Identifier:
keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4e:78:b4:06:30:07:1b:92:a8:cf:1f:d1:49:29:df:92:b4:
2e:80:3e:3a:b5:d1:90:eb:2e:1d:d9:02:be:8a:ce:8b:39:ed:
99:96:bf:99:61:3b:4d:5a:f2:36:1d:23:bb:d7:41:77:5e:3e:
7e:eb:d7:77:90:57:f8:cd:23:bb:89:ee:8f:56:d6:3c:51:f0:
aa:69:9d:42:a3:87:99:d3:77:05:8b:b5:03:b4:2c:2c:ad:ce:
09:6e:bd:67:d9:4d:c9:b8:ce:a4:ef:b2:12:88:c1:91:53:4d:
24:69:9f:fb:24:7c:c5:42:32:55:88:e3:98:f4:8d:f5:14:06:
c5:4a:19:69:07:21:31:49:09:e0:97:c1:6e:0d:c0:ca:15:9d:
24:cd:ef:3f:85:81:de:81:6f:69:4e:3c:c1:ec:06:cd:ae:f2:
17:d9:bc:86:d8:ed:c6:8c:cf:4b:5b:95:4e:6c:64:c4:8f:f8:
2e:5f:2a:e4:eb:37:46:5b:3a:dd:da:c8:db:df:e8:fe:04:aa:
47:0f:ae:bd:c7:b8:7e:17:50:e2:07:fa:fa:e9:ea:f4:e2:c2:
af:79:c9:81:8f:cf:0f:4c:a7:2f:43:87:35:3d:2c:b3:02:e3:
e8:a7:ea:de:9d:54:10:3c:b7:89:cd:44:92:1c:15:18:0f:29:
86:4f:f8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:29:33 2025 by rpki-client