Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
File: _BfLzO42sk7L1GP30QKrxP5A4U0.mft (raw, json)
Hash identifier: SFNCpgXE/9rs52F4PD8trjq8S4+FR5QgQss1LkJJXD4=
Subject key identifier: 5A:B5:40:02:AC:74:AF:2F:AD:A7:AC:C5:C6:C4:1A:AE:93:68:92:33
Authority key identifier: FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
Certificate issuer: /CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Certificate serial: 0198496603C2F6022E7DAB5511B45DE0DA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
Manifest number: 1304
Signing time: Sun 27 Jul 2025 01:01:19 +0000
Manifest this update: Sun 27 Jul 2025 01:01:19 +0000
Manifest next update: Mon 28 Jul 2025 01:01:19 +0000
Files and hashes: 1: _BfLzO42sk7L1GP30QKrxP5A4U0.crl (hash: YobxMIbm+VCPV9ZXX4SNorXt5MetHMaGEZLVup37IKo=)
2: tJwISkQYqLHEilM1B5xtrHKBtrs.roa (hash: QQm9O9ciyqlGIn1eEAWaXdioEbF5c6krD1izvlymivs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:03:c2:f6:02:2e:7d:ab:55:11:b4:5d:e0:da:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Validity
Not Before: Jul 27 01:01:19 2025 GMT
Not After : Jul 28 01:01:19 2025 GMT
Subject: CN=5ab54002ac74af2fada7acc5c6c41aae93689233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:8b:d1:8d:e7:45:11:6c:a4:3e:b0:00:f4:
d3:8b:00:b6:a2:7f:ae:b3:89:1f:3b:27:27:38:f9:
d5:a0:2a:a6:f6:83:1b:f1:66:9e:31:70:0f:7b:f3:
74:a8:ee:0e:c5:1f:1b:5e:5f:08:05:dd:d6:1d:d7:
a6:8f:3e:e7:f3:cf:21:17:6c:44:af:3b:00:b7:5d:
b5:58:68:24:f7:6c:fa:37:51:a3:f9:95:b0:53:85:
57:f3:3a:1a:51:fa:c3:05:0b:81:40:06:08:d1:06:
f2:c0:0e:f4:92:15:a4:02:8a:17:42:48:df:ff:18:
d8:87:ec:18:fc:42:e6:d1:10:b0:d0:c5:95:95:3a:
f6:b2:13:e8:91:0a:e9:7f:5b:fd:05:cd:35:3a:fd:
2d:a4:fe:a1:2f:54:ca:53:9b:5f:60:f5:db:73:3d:
61:15:50:88:dd:15:7e:8f:40:47:5a:7a:47:20:dc:
63:00:72:fa:0f:33:2f:4a:22:56:c7:af:30:3e:1b:
e1:12:c9:e7:f7:e8:62:06:ac:3a:8a:07:5b:db:b3:
47:01:6f:74:31:6d:79:fb:2c:fc:d7:74:49:c2:14:
e2:73:fb:73:d0:d5:3f:d5:a3:2a:58:71:d1:69:dc:
fe:92:d5:07:0a:46:a3:78:01:9a:f9:19:bb:41:58:
cd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B5:40:02:AC:74:AF:2F:AD:A7:AC:C5:C6:C4:1A:AE:93:68:92:33
X509v3 Authority Key Identifier:
keyid:FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:56:0d:34:e6:9f:60:17:82:0a:85:c0:97:f4:dd:3d:26:d9:
67:84:fd:c5:1b:d9:9b:d0:8c:76:c5:ad:cd:45:94:b0:c5:db:
ea:08:b3:35:99:9e:52:60:d8:47:4b:db:6b:43:88:a3:73:4e:
3a:55:2b:df:fd:79:b2:28:1a:6d:78:17:db:26:a5:b5:7f:1b:
15:58:c7:35:8d:bc:b6:87:6d:93:22:ba:dd:16:3f:4a:31:c0:
42:c4:80:9c:72:58:4a:1f:e4:ab:c4:07:d8:66:07:4d:55:e0:
94:d7:9f:2c:59:d2:cf:5b:4d:32:d5:a0:e5:d6:9b:29:4d:81:
0d:b8:23:50:6e:6a:de:f2:48:ab:83:74:15:da:61:73:ff:62:
8d:5c:6a:25:23:c3:b1:38:ff:b0:96:94:30:6c:aa:c9:9c:a4:
51:af:3a:dd:86:1c:76:13:cc:c9:ea:f8:72:6e:7e:9f:bf:e6:
b9:c2:71:bf:01:b7:2b:d9:37:71:35:70:92:ed:fd:4a:ca:95:
bf:45:fe:96:a3:9b:7e:ec:ae:42:1a:7c:7e:4b:1a:b9:0d:29:
33:aa:b5:6c:08:51:14:22:6b:e7:b5:95:a3:46:28:1c:63:3f:
b6:d4:ba:1b:7e:77:69:32:c7:23:ed:bd:7b:36:50:8e:12:b5:
aa:dd:bd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:59:27 2025 by rpki-client