Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
File: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft (raw, json)
Hash identifier: 9nPMxRMtMqX6/eHbsHGjh8LQsNEUZQdDkEAKvv0vLlA=
Subject key identifier: 74:FA:9B:35:6E:A3:A8:B5:DC:85:84:7F:0F:8A:0B:F4:72:4E:CE:29
Authority key identifier: 6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
Certificate issuer: /CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Certificate serial: 01974B56C74FE79369A35945ADA7E1F8FF0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
Manifest number: 0766
Signing time: Sat 07 Jun 2025 17:01:07 +0000
Manifest this update: Sat 07 Jun 2025 17:01:07 +0000
Manifest next update: Sun 08 Jun 2025 17:01:07 +0000
Files and hashes: 1: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl (hash: 39z/Zu229N8rvbifQ4ojh37EfDlLwo6ssvF3zKa4BH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:c7:4f:e7:93:69:a3:59:45:ad:a7:e1:f8:ff:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Validity
Not Before: Jun 7 17:01:07 2025 GMT
Not After : Jun 8 17:01:07 2025 GMT
Subject: CN=74fa9b356ea3a8b5dc85847f0f8a0bf4724ece29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0c:f1:f5:a8:13:56:5b:b1:64:a6:fc:95:84:
0f:7e:b3:15:e3:2e:47:85:11:fa:0a:3c:af:e1:cb:
24:98:3f:a8:73:29:6c:15:ad:d2:09:0e:06:d3:b4:
a8:bf:f7:f7:5f:5c:fc:94:da:7e:e3:fe:81:d1:a9:
be:ba:23:00:09:42:2f:4c:03:b1:af:2f:2c:33:d4:
b4:55:e5:1b:68:97:d8:11:87:87:d2:82:cb:6c:f9:
81:80:df:90:c9:f2:b5:3a:94:3d:74:52:4b:8e:78:
4d:89:41:91:40:ae:c6:e3:37:ea:a5:9f:52:2c:f6:
f0:8c:da:a7:82:be:b3:ad:f7:9f:ea:cf:15:d9:7e:
f9:0e:37:3a:ee:cb:74:19:e0:96:c7:a6:ab:c1:2e:
2c:42:bb:8f:3c:d8:5d:47:c4:0b:3e:24:8e:60:76:
ef:8f:0d:65:5c:e9:6f:52:e1:8c:33:91:4e:e7:d5:
38:b4:1e:ac:c2:82:90:0b:e1:5f:a6:8f:c6:9e:6e:
38:45:2c:a4:de:eb:82:af:a7:d3:67:67:83:f3:f0:
35:42:89:1b:68:03:58:01:73:eb:ff:ee:8d:c6:67:
75:46:0f:a6:cf:d0:4d:a9:1e:0b:d1:4b:12:0e:1d:
87:d7:20:e1:a9:06:09:a0:10:88:2b:56:ff:4a:fb:
b5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FA:9B:35:6E:A3:A8:B5:DC:85:84:7F:0F:8A:0B:F4:72:4E:CE:29
X509v3 Authority Key Identifier:
keyid:6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b7:1a:66:cd:14:4e:f5:fd:a3:bc:4d:43:41:73:a0:57:e1:
c3:39:d9:bd:ba:c5:b7:7a:d9:d0:02:29:da:48:14:0f:32:bb:
8a:e0:c7:56:18:62:f7:1d:43:43:19:55:29:b2:1a:7b:ea:86:
f2:77:b0:63:ef:82:59:ee:96:3c:70:9f:57:a7:7b:f3:38:14:
e8:2b:ac:92:03:b2:be:3d:dc:81:79:bd:e6:99:b0:50:97:0d:
b3:67:42:95:91:75:56:7a:c3:09:7b:83:7b:5d:84:6e:57:0e:
a3:6a:ec:aa:6c:b6:45:78:87:9f:9f:3e:d0:2d:a2:46:40:7a:
11:4c:33:e2:5c:cc:78:c3:31:a3:c4:6a:1c:e7:a1:e6:13:34:
9b:d8:e9:d7:af:a4:de:84:c0:4f:d0:59:74:80:b0:b4:13:6b:
e0:15:30:30:18:4f:a6:6a:d6:db:11:c5:6d:32:66:7d:c3:58:
21:f5:dd:b0:cb:4b:5e:dd:83:ec:32:6e:8b:f3:95:fa:42:91:
3c:e0:16:1e:8d:ee:f7:4b:4e:86:39:6c:4a:b8:0c:b8:57:52:
67:79:d8:a5:15:23:fc:bd:03:f7:f5:6d:2d:e6:54:63:72:76:
7b:7e:25:f6:31:01:9a:19:32:87:dc:27:5a:89:8d:9e:ec:1c:
7a:25:65:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:03:55 2025 by rpki-client