Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
File: BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json)
Hash identifier: uEUStqwNII72pzNHQwGOXVZmoIs+4H6Tvo+8BzMNNnY=
Subject key identifier: 2C:17:37:07:C6:E7:A0:55:65:BA:7D:97:25:55:4F:F0:99:4C:F4:56
Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Certificate serial: 019748FA4339657231A99822D120829178E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
Manifest number: 029D
Signing time: Sat 07 Jun 2025 06:00:49 +0000
Manifest this update: Sat 07 Jun 2025 06:00:49 +0000
Manifest next update: Sun 08 Jun 2025 06:00:49 +0000
Files and hashes: 1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: wLp/9HBmIBynG2XyXqN2yfAqWa+/M3lM9UM4ccCBXjs=)
2: xRcmRRI7cJbjjDDpwXYPAzS-KSc.roa (hash: +JILVppUk45vww/N3lSTziP5G1U9pzpXHROPOpD0HAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:43:39:65:72:31:a9:98:22:d1:20:82:91:78:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Validity
Not Before: Jun 7 06:00:49 2025 GMT
Not After : Jun 8 06:00:49 2025 GMT
Subject: CN=2c173707c6e7a05565ba7d9725554ff0994cf456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:07:71:16:a7:26:b5:6f:66:f6:7f:c0:0e:57:
a3:ca:b3:17:3e:85:88:36:ec:a9:41:b1:c6:06:70:
f5:68:a9:8b:e1:ef:80:a0:e0:65:78:cc:5b:70:d1:
85:21:3b:c0:fd:4e:75:1a:0b:95:a2:d1:01:f7:ff:
e5:47:62:31:3f:c1:db:78:33:ea:1a:01:e3:30:59:
10:1e:b5:2d:ae:81:2b:68:eb:c1:fa:36:ea:b6:a9:
f5:b4:c4:d7:23:42:9c:b9:31:96:89:d5:ae:76:84:
37:82:83:53:cd:4c:3d:6b:0a:5a:5d:b8:ed:0f:23:
3e:76:2a:79:93:9f:60:49:6a:6a:59:7d:9e:d9:05:
99:94:00:dd:ef:9a:ae:cc:f0:d9:3c:22:0d:b9:6b:
81:6f:7c:3b:79:a2:be:37:01:7d:4b:68:72:ee:14:
6e:4c:04:5e:d8:60:0f:12:d0:2f:3e:3e:ad:9c:e6:
47:d3:1b:a2:90:6b:5a:60:c8:a7:11:24:eb:7e:76:
d2:99:34:5c:0b:fb:63:68:65:c4:b9:3d:9a:39:1e:
ac:8d:00:e9:15:68:fb:70:d9:f8:14:be:18:90:67:
57:9a:ca:8f:99:0b:c0:81:5e:aa:57:85:70:b8:22:
68:be:d8:88:96:f3:9e:42:df:7b:78:7f:fe:16:2f:
05:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:17:37:07:C6:E7:A0:55:65:BA:7D:97:25:55:4F:F0:99:4C:F4:56
X509v3 Authority Key Identifier:
keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e8:5f:a9:73:26:34:b3:a6:dc:e9:cf:20:51:59:3f:6a:06:
12:e6:3d:1d:62:85:09:22:3a:3f:c0:4b:a7:ce:92:d7:47:9d:
89:b5:63:c9:f6:5a:2b:c6:55:66:71:6d:6f:04:c7:81:86:f8:
7f:a4:28:14:69:6c:20:43:bc:93:26:59:90:f6:4e:12:36:93:
f7:b9:d9:a6:81:e9:ed:f4:bf:de:2e:3d:47:6f:5e:4b:0f:44:
1e:dc:03:88:92:6a:3c:11:89:8b:d5:a1:29:fc:05:d3:a7:6b:
df:44:65:ad:c4:27:df:73:d6:f5:82:29:41:f2:12:67:6b:5d:
bd:8e:48:ba:29:86:4f:e5:81:36:82:68:1a:3f:93:ab:d6:e6:
73:47:31:61:d1:f2:c9:51:93:65:8f:79:e7:74:15:8c:7a:b7:
86:c9:b7:88:ec:a9:25:66:a2:08:51:5c:f5:39:ea:e5:72:34:
9b:dc:71:55:03:e8:7d:76:40:f5:4e:fc:78:3c:af:31:3b:e9:
ed:b4:d2:cf:0f:85:d0:4c:5a:13:f9:ce:64:18:81:61:9e:fa:
6e:2c:51:5b:d0:d5:e2:ef:fe:a1:cd:27:f5:71:99:c2:c6:aa:
03:08:c7:09:08:68:d5:c2:e7:2d:e2:33:4f:ff:9b:b3:25:af:
e7:5f:59:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:28:51 2025 by rpki-client