Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
File: bfwUOO4IFam_i3P5p87QlPIax54.mft (raw, json)
Hash identifier: xuIQOUFPlZDyLGrlmvyVWI0/bl43hXEC/2rd9VdrN+Y=
Subject key identifier: 3B:3A:49:F7:0E:E4:94:4C:40:92:DB:EC:56:70:8B:7E:CA:93:C1:91
Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
Certificate issuer: /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Certificate serial: 01974A7A8192BF0E0DC02CCE6DCA046E60ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
Manifest number: 08CD
Signing time: Sat 07 Jun 2025 13:00:31 +0000
Manifest this update: Sat 07 Jun 2025 13:00:31 +0000
Manifest next update: Sun 08 Jun 2025 13:00:31 +0000
Files and hashes: 1: D9a5tzSXaB3YCXB51ESBfxmocyM.roa (hash: PgS49lglth99HhTvLssigXqfh7TfLNAP1ou+sfSqOKE=)
2: UBhFR3OZMj_R8VlXXyVrvKRDJfU.roa (hash: rvFp0ktgwJ1/3eTonU7/7v6UyJ5UYW+gGNm92KfeHQY=)
3: bfwUOO4IFam_i3P5p87QlPIax54.crl (hash: 1f5iyfGbeJpIwq6ZZuTGIymqy1Fb9krsy2kQsFi+ScQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:81:92:bf:0e:0d:c0:2c:ce:6d:ca:04:6e:60:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Validity
Not Before: Jun 7 13:00:31 2025 GMT
Not After : Jun 8 13:00:31 2025 GMT
Subject: CN=3b3a49f70ee4944c4092dbec56708b7eca93c191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:94:20:87:c3:dd:06:a4:4a:7e:e0:9b:bb:
16:9e:ef:fb:b7:04:58:60:46:cd:b0:8b:eb:02:ad:
1d:3b:68:b3:ad:7d:3f:97:23:07:36:1f:98:06:82:
eb:6d:2d:16:68:1b:10:e4:f3:71:d4:16:0c:4e:66:
1d:2e:73:d8:26:18:8e:ae:13:40:73:75:9e:79:f8:
a2:a7:18:03:16:55:46:3c:21:97:18:11:1d:f8:75:
37:2e:da:63:c8:a2:06:dd:05:8a:64:97:c4:a6:af:
b7:3d:0c:7b:bd:e0:7d:85:65:9e:88:ac:7c:5f:b2:
cd:28:0b:14:17:ce:28:cc:8d:61:e2:76:c8:44:de:
59:df:28:3c:94:9c:a9:6c:bd:f3:42:9e:f7:37:66:
1e:bf:2e:29:67:54:a8:97:17:c9:a9:09:f9:01:e3:
ef:17:46:1d:a0:ad:bb:32:17:cf:c5:69:03:e9:3f:
19:70:6f:fc:e5:36:bd:3f:21:6b:d6:36:54:c4:11:
a7:69:44:9f:ee:55:17:ff:9a:c3:dd:ef:ae:20:63:
7a:af:f3:c6:4c:90:19:a3:eb:6f:49:7f:bc:4a:9a:
99:34:27:4b:95:6c:39:37:96:22:26:d8:61:8f:c7:
f4:5f:e7:0a:8f:4a:94:60:dc:23:a3:12:96:e0:3f:
77:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3A:49:F7:0E:E4:94:4C:40:92:DB:EC:56:70:8B:7E:CA:93:C1:91
X509v3 Authority Key Identifier:
keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8e:59:16:5d:d5:ea:09:7a:ce:44:5a:0f:f3:d3:14:f9:53:
de:cf:3b:6d:0f:5a:8b:26:d5:d3:cc:f4:df:63:e5:f8:56:8a:
ef:3c:c4:79:9a:36:71:b7:23:9e:9f:05:63:12:91:0d:19:7d:
1e:5e:5d:41:a1:e5:c8:4f:79:94:3d:31:11:b8:31:01:3b:a0:
d8:60:6b:c3:d7:1c:71:51:75:e0:02:c0:c9:b9:82:82:eb:62:
28:54:1b:75:1f:b5:d8:b2:15:49:71:d9:d3:c0:13:df:3d:5c:
45:43:c4:c8:12:4c:46:cb:9f:3a:cc:e0:ca:c8:d0:49:03:4c:
7c:9e:43:45:23:a0:60:f2:c8:2a:b1:9c:37:d4:1a:fa:ef:d0:
de:1e:7d:bf:f0:25:30:88:62:f5:92:71:1f:8e:13:af:e8:8c:
7f:b8:3f:cd:b0:83:05:0b:1f:7f:67:c2:87:43:8f:9f:84:13:
32:0d:f4:7d:2d:6d:04:1b:16:da:c8:68:d4:0a:05:23:61:7a:
df:4e:d5:10:07:08:2b:ab:48:82:d0:db:db:80:54:b8:33:15:
99:84:3a:36:72:72:d2:7b:ee:c6:d9:f0:6c:c2:5b:9f:8f:94:
3a:7c:b4:df:0b:ee:70:72:25:fe:cf:9d:65:b3:d7:4b:52:29:
e2:91:47:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeoGSvw4NwCzObcoEbmDtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmMxNDM4ZWUwODE1YTliZjhiNzNmOWE3Y2VkMDk0ZjIx
YWM3OWUwHhcNMjUwNjA3MTMwMDMxWhcNMjUwNjA4MTMwMDMxWjAzMTEwLwYDVQQD
EygzYjNhNDlmNzBlZTQ5NDRjNDA5MmRiZWM1NjcwOGI3ZWNhOTNjMTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreqUIIfD3QakSn7gm7sWnu/7twRY
YEbNsIvrAq0dO2izrX0/lyMHNh+YBoLrbS0WaBsQ5PNx1BYMTmYdLnPYJhiOrhNA
c3WeefiipxgDFlVGPCGXGBEd+HU3LtpjyKIG3QWKZJfEpq+3PQx7veB9hWWeiKx8
X7LNKAsUF84ozI1h4nbIRN5Z3yg8lJypbL3zQp73N2Yevy4pZ1SolxfJqQn5AePv
F0YdoK27MhfPxWkD6T8ZcG/85Ta9PyFr1jZUxBGnaUSf7lUX/5rD3e+uIGN6r/PG
TJAZo+tvSX+8SpqZNCdLlWw5N5YiJthhj8f0X+cKj0qUYNwjoxKW4D938wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs6SfcO5JRMQJLb7FZwi37Kk8GRMB8GA1UdIwQY
MBaAFG38FDjuCBWpv4tz+afO0JTyGseeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yZjk4Y2ItNmQ5NC00OGExLThkYmEt
ZDY0Njc2N2M1ZjEzLzEvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8yZjk4Y2ItNmQ5NC00OGExLThkYmEtZDY0Njc2N2M1ZjEz
LzEvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA45ZFl3V
6gl6zkRaD/PTFPlT3s87bQ9aiybV08z032Pl+FaK7zzEeZo2cbcjnp8FYxKRDRl9
Hl5dQaHlyE95lD0xEbgxATug2GBrw9cccVF14ALAybmCgutiKFQbdR+12LIVSXHZ
08AT3z1cRUPEyBJMRsufOszgysjQSQNMfJ5DRSOgYPLIKrGcN9Qa+u/Q3h59v/Al
MIhi9ZJxH44Tr+iMf7g/zbCDBQsff2fCh0OPn4QTMg30fS1tBBsW2sho1AoFI2F6
307VEAcIK6tIgtDb24BUuDMVmYQ6NnJy0nvuxtnwbMJbn4+UOny03wvucHIl/s+d
ZbPXS1Ip4pFHUQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:30:39 2025 by rpki-client