Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
File: _BfLzO42sk7L1GP30QKrxP5A4U0.mft (raw, json)
Hash identifier: 4cgo7bqiSzOv9Ddfqx2SJwBtcz4MkvYqUqIcKFGixt8=
Subject key identifier: 41:B0:19:70:8B:12:20:3A:4A:68:98:E3:A8:F9:03:6E:D6:AF:0D:E8
Authority key identifier: FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
Certificate issuer: /CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Certificate serial: 019643D60C7491219FA527124EABC1DA48CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
Manifest number: 11F8
Signing time: Thu 17 Apr 2025 13:00:23 +0000
Manifest this update: Thu 17 Apr 2025 13:00:23 +0000
Manifest next update: Fri 18 Apr 2025 13:00:23 +0000
Files and hashes: 1: _BfLzO42sk7L1GP30QKrxP5A4U0.crl (hash: W9c2DCBnXvQ7tlWtZdWjGqPbntkdPb+Mb92xayF+AXk=)
2: tJwISkQYqLHEilM1B5xtrHKBtrs.roa (hash: QQm9O9ciyqlGIn1eEAWaXdioEbF5c6krD1izvlymivs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:0c:74:91:21:9f:a5:27:12:4e:ab:c1:da:48:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Validity
Not Before: Apr 17 13:00:23 2025 GMT
Not After : Apr 18 13:00:23 2025 GMT
Subject: CN=41b019708b12203a4a6898e3a8f9036ed6af0de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f0:55:72:07:06:13:01:2a:4b:fc:98:2f:f5:
f9:3d:17:c5:ee:f0:a1:97:c6:a0:d5:fd:50:da:77:
ab:56:84:ab:c8:7e:0b:e0:0f:9d:ce:b7:e9:c4:11:
c8:d4:1d:21:86:fe:1d:2d:3e:a8:dc:e8:b0:c2:40:
61:c7:ce:8a:81:b2:10:79:8c:70:80:e2:4e:b0:6b:
e8:bc:7c:13:32:8f:b8:0b:c6:1c:22:88:7f:1b:10:
af:7f:6a:59:b3:39:7c:0f:09:48:4c:2b:e7:76:54:
a8:96:48:82:3e:c5:6f:0c:ff:e2:d3:64:d1:b6:9a:
34:15:32:e6:5a:a7:19:61:d4:96:6b:fb:a0:f9:93:
25:03:82:b2:5b:e2:4d:b3:5c:29:f2:09:5b:ed:ba:
d1:d6:2b:6c:53:46:55:63:c0:a3:4c:85:6a:78:4a:
e7:4a:82:6a:8b:47:a1:93:53:c8:33:a7:72:2f:3a:
9c:69:8b:d0:a8:19:04:a6:4e:39:36:b2:58:97:ef:
9b:9a:30:e6:93:9b:8b:09:12:bd:6e:a0:b4:92:c3:
dc:6b:29:48:16:58:0f:e7:45:3e:0f:38:87:b4:b9:
f0:14:97:37:80:b2:f8:dc:54:15:f8:8f:a7:5c:cb:
6d:78:41:64:30:67:ff:4b:1c:bf:fe:0a:55:75:69:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B0:19:70:8B:12:20:3A:4A:68:98:E3:A8:F9:03:6E:D6:AF:0D:E8
X509v3 Authority Key Identifier:
keyid:FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:08:de:e6:7b:fe:57:9b:cf:bf:c1:47:1d:2a:dc:29:f8:7b:
1e:89:93:5a:71:dc:15:16:00:41:8a:d3:48:c1:fe:5d:b8:f6:
17:c0:b7:c0:5c:62:2f:6d:c8:40:2e:09:49:97:e5:e0:57:bf:
93:d9:27:71:84:b1:da:a2:92:3c:ac:74:f2:36:d4:c6:5c:cd:
3d:11:2e:0e:d3:ae:04:32:f9:c3:0d:20:51:f5:fd:d0:f9:04:
c6:d7:ed:a3:23:ac:0a:74:a0:1f:19:e8:c7:a3:77:12:a9:f4:
bd:00:ed:65:8b:88:72:ec:94:40:20:50:99:f1:fe:fb:e0:57:
7c:a6:52:c9:76:15:9b:31:f0:c4:eb:cf:37:e9:43:52:4d:e1:
35:62:3e:41:7e:39:ce:1c:c1:49:61:6b:13:2f:d6:7a:93:de:
7f:0f:c7:7a:e4:4b:19:cd:8e:88:11:2c:87:45:e4:e8:69:a5:
0b:9b:5c:c7:1c:3f:5c:7c:ba:dd:19:0a:ac:4d:4c:fc:72:78:
e3:de:b8:4b:cf:af:55:44:66:73:b3:44:70:91:66:bd:03:2c:
50:e0:6d:15:79:e8:9b:25:bf:9a:4b:98:e3:1b:c1:a0:7d:59:
28:e1:98:b0:3a:db:6e:60:ce:61:c5:df:36:73:88:0b:8d:d9:
ca:29:09:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:30:35 2025 by rpki-client