Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
File: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft (raw, json)
Hash identifier: BIlY0LeRkteX3S0Y13lcdhjNry0fNhuVmfWp2Lmm1kI=
Subject key identifier: 1F:DB:57:84:91:74:61:25:95:BB:99:39:BF:F1:01:1A:21:53:BD:1A
Authority key identifier: 05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
Certificate issuer: /CN=05f2748cb43862a104b56f8c6204b6209706558c
Certificate serial: 0197C9146E479C112CCDB25491EDF83D12A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
Manifest number: 0CA9
Signing time: Wed 02 Jul 2025 03:00:48 +0000
Manifest this update: Wed 02 Jul 2025 03:00:48 +0000
Manifest next update: Thu 03 Jul 2025 03:00:48 +0000
Files and hashes: 1: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl (hash: nJXXEXZck8CQyyiwHSs/TtHh16jspp66V2VZoB+GAFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:14:6e:47:9c:11:2c:cd:b2:54:91:ed:f8:3d:12:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f2748cb43862a104b56f8c6204b6209706558c
Validity
Not Before: Jul 2 03:00:48 2025 GMT
Not After : Jul 3 03:00:48 2025 GMT
Subject: CN=1fdb57849174612595bb9939bff1011a2153bd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:85:98:ce:5d:ed:21:cd:a1:94:94:5b:ac:
77:90:5c:c5:d7:57:75:40:a5:a6:2d:01:f5:32:d4:
02:ec:53:20:81:9d:4a:c5:7a:cf:43:c4:b0:19:da:
4f:7c:9a:d4:2b:50:de:85:43:ef:e0:08:7c:b2:9d:
3f:79:7a:3e:91:21:3e:77:d7:20:c7:08:6a:a6:09:
e3:0d:b1:4a:b9:55:b8:28:a4:5c:c7:0e:e4:d6:8d:
72:d6:b2:8c:fe:01:14:b5:d1:38:02:0a:17:97:12:
bd:87:99:3a:65:12:12:24:5f:47:0f:21:61:08:d7:
c5:12:a9:b0:af:c1:6b:5f:61:2e:2e:55:0b:9a:09:
36:8d:63:f7:23:62:e3:d5:e4:57:be:18:66:05:b2:
36:fb:e8:b3:39:80:0d:93:cc:70:07:3d:ef:2a:a0:
a4:d4:5e:c4:ef:e5:64:13:5d:c5:03:b5:e6:95:92:
a0:b5:b1:09:30:27:ef:35:a2:95:0f:8c:06:85:29:
1c:1c:c4:79:ea:46:36:2b:2f:e4:d5:0f:6a:af:c7:
ef:83:c1:60:a6:38:31:f9:d1:30:60:f2:cb:a9:07:
a3:d9:50:01:5e:f1:86:43:98:be:f9:91:53:37:e8:
dc:df:4e:0f:5e:51:d1:90:3d:26:87:b4:0a:1a:67:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DB:57:84:91:74:61:25:95:BB:99:39:BF:F1:01:1A:21:53:BD:1A
X509v3 Authority Key Identifier:
keyid:05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f5:9d:70:23:97:f9:ad:1c:4f:27:c2:45:44:34:a8:ea:1a:
ae:36:7e:d3:f2:46:b0:4e:53:0e:c6:58:dc:b4:45:ed:24:4e:
8e:92:85:a7:72:2f:4e:9a:f9:b2:b6:92:31:13:70:88:be:ad:
ba:aa:f3:cc:a1:e3:c1:91:8b:6b:6e:90:a2:d9:aa:6f:ca:3e:
d4:59:7c:05:3d:8f:fa:31:5c:3c:80:0f:e6:f7:de:a0:5d:b3:
5a:d7:e8:6d:b2:60:95:bd:3f:be:fa:e6:40:a6:12:14:62:9c:
36:91:a9:75:12:f8:a3:69:f2:ec:74:1b:87:e0:90:f3:c4:30:
15:8a:f1:64:1e:83:30:32:14:02:c3:ab:a9:fb:b1:df:07:7c:
da:68:b0:e8:a9:5a:6f:97:07:2a:19:22:df:d9:aa:6c:ab:27:
41:ca:c5:bf:de:25:13:f8:d2:90:c3:9f:61:a7:d5:4d:aa:47:
ae:36:c7:7b:f7:e6:35:55:e0:24:70:6b:99:03:c3:88:65:2d:
57:21:27:b7:28:a1:20:8b:46:ea:88:f7:3c:06:19:bf:cf:70:
89:54:08:82:b2:ab:02:12:bb:be:d2:59:75:98:c6:db:7a:6a:
59:5d:89:44:5c:7a:7c:fc:93:49:18:7d:12:51:b7:41:19:bf:
fe:d0:e4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:08:42 2025 by rpki-client