Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
File: _BfLzO42sk7L1GP30QKrxP5A4U0.mft (raw, json)
Hash identifier: wQnSitIsCj7WOWGJvTxiR0IxajTwJOHE3v8Bi2qLCxs=
Subject key identifier: 6F:28:16:BD:A9:2D:AD:A1:6E:5A:78:41:C1:01:47:89:E4:28:E9:17
Authority key identifier: FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
Certificate issuer: /CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Certificate serial: 01974A7B7AAD1428148375884E3BA8F2CFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
Manifest number: 1280
Signing time: Sat 07 Jun 2025 13:01:35 +0000
Manifest this update: Sat 07 Jun 2025 13:01:35 +0000
Manifest next update: Sun 08 Jun 2025 13:01:35 +0000
Files and hashes: 1: _BfLzO42sk7L1GP30QKrxP5A4U0.crl (hash: SnYI4kfQgVEa8RmWWYexb1njy94j8q8r+2vC5Fj8DrY=)
2: tJwISkQYqLHEilM1B5xtrHKBtrs.roa (hash: QQm9O9ciyqlGIn1eEAWaXdioEbF5c6krD1izvlymivs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:7a:ad:14:28:14:83:75:88:4e:3b:a8:f2:cf:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Validity
Not Before: Jun 7 13:01:35 2025 GMT
Not After : Jun 8 13:01:35 2025 GMT
Subject: CN=6f2816bda92dada16e5a7841c1014789e428e917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:55:dd:df:35:a8:93:f6:0a:d9:05:a8:3c:
3e:1c:93:bb:bf:3c:7d:b8:31:77:80:92:ff:ff:10:
1a:45:37:bf:ed:70:9c:f8:07:98:8a:15:8c:1d:87:
62:3a:c3:ef:85:c7:3a:32:07:e9:b3:0a:7c:bc:40:
82:71:78:3d:02:af:5a:2e:86:ae:95:01:9c:c2:dc:
39:12:e9:2b:76:93:bd:61:28:ed:0f:08:1f:9d:be:
c7:13:ca:1a:22:e2:87:32:fe:97:fb:14:eb:2a:3d:
73:da:f7:52:0b:18:d5:e3:ba:43:e2:9d:1b:01:5c:
b5:60:de:42:3e:37:01:59:34:81:47:0d:94:66:ca:
53:41:b9:2f:6b:57:ea:90:67:e5:31:4c:87:14:e4:
20:55:e0:78:47:74:04:bf:73:cb:9a:76:8f:d0:bb:
05:31:93:b1:71:5d:98:10:a6:b2:3e:d0:d7:62:77:
44:32:b7:e0:52:b4:42:17:24:aa:0c:13:f5:b6:be:
7a:6f:0a:37:d8:a2:4d:dc:ed:9e:9f:a3:e8:f4:f7:
f5:e2:dc:75:d5:ea:60:79:9a:3d:9f:f0:0a:3c:cc:
92:fd:e1:60:35:b0:38:cc:1d:2e:6e:2b:e4:b9:e4:
23:4b:80:d9:69:b1:3a:d1:9c:b4:fd:7d:05:36:40:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:28:16:BD:A9:2D:AD:A1:6E:5A:78:41:C1:01:47:89:E4:28:E9:17
X509v3 Authority Key Identifier:
keyid:FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:29:c2:22:7b:1f:87:2a:8c:d1:f0:d8:02:75:90:41:1d:fe:
cb:9c:ef:bd:e1:5c:f8:0a:9c:8b:ea:4e:06:f5:39:c0:99:07:
c8:c9:2f:6b:c2:d5:fe:50:f3:49:b0:d2:9b:20:30:f5:5b:30:
ea:33:7c:53:0c:3d:34:79:02:d2:c2:a6:6f:49:60:b6:9d:96:
74:0f:74:4d:1a:02:d3:da:f9:51:d0:4c:02:80:a9:59:2d:e6:
cb:80:e3:7d:46:f8:34:43:a3:3d:df:55:f2:bc:75:7e:ab:6a:
11:63:60:c2:8a:f4:bf:54:10:be:01:86:2b:f9:4b:3f:13:91:
5b:22:8d:81:3b:a0:a6:f9:04:75:24:5b:ad:0a:32:23:32:c8:
ab:4b:a4:a3:18:b3:73:a2:f3:80:45:72:7d:ef:39:af:b2:b5:
4b:c6:f2:e8:30:86:e2:21:e3:67:46:7b:db:71:0a:65:46:99:
92:7e:7b:15:b7:0d:37:39:6f:2a:2c:b8:02:97:0a:96:88:3b:
15:01:04:b2:26:aa:84:72:44:a8:9a:1f:d1:03:eb:8e:0d:c8:
ae:7a:83:8b:b2:b2:4c:68:d6:e4:bc:43:da:ff:ef:20:f3:a4:
0a:d9:c7:cc:d3:e3:68:aa:04:d3:5e:f3:6f:0a:49:41:eb:a1:
1a:1a:7c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:26 2025 by rpki-client