Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
File: bfpKH_x0mxxPo7bagZttu5rohaA.mft (raw, json)
Hash identifier: B4pfGO+I6eusOE+hDQsl5lQ2XV1gxGUXauL2Zw7vnUc=
Subject key identifier: AA:A5:27:D2:C9:5C:A6:12:CD:6E:5D:E4:69:98:22:8C:F0:EB:04:79
Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Certificate serial: 01974E575ABC36F78A580BFC47DAF42AD6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 07:00:37 +0000
Manifest this update: Sun 08 Jun 2025 07:00:37 +0000
Manifest next update: Mon 09 Jun 2025 07:00:37 +0000
Files and hashes: 1: bfpKH_x0mxxPo7bagZttu5rohaA.crl (hash: 4GfCS6Vlf5GOW+dHetGzHa98yAjzA1/TP1QNA+UjdIs=)
2: dwh4D1mLE-BJM3O3JRIbCS8CiAE.roa (hash: 0ebutZnVkcZLLmshdUGZMamHfBLJzhHs685jtIwVRjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:5a:bc:36:f7:8a:58:0b:fc:47:da:f4:2a:d6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Validity
Not Before: Jun 8 07:00:37 2025 GMT
Not After : Jun 9 07:00:37 2025 GMT
Subject: CN=aaa527d2c95ca612cd6e5de46998228cf0eb0479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:54:de:95:06:1d:4e:ce:b0:6c:e2:33:33:d4:
06:2b:b7:be:6c:98:06:f4:6c:14:d7:8e:2d:51:44:
49:be:07:dc:f9:8a:3e:14:00:01:00:83:d6:9c:1a:
bb:00:b5:1d:20:10:5e:6c:86:14:ab:a4:b9:02:88:
c3:98:38:1f:08:f5:76:e1:bf:d8:a4:ef:8c:f5:9d:
33:54:10:e4:2c:2e:82:62:46:12:e4:4a:9c:3d:f0:
81:46:0f:a8:42:02:23:d8:15:35:88:f3:3b:f4:4c:
48:08:25:5f:56:09:e3:0d:b9:a2:d9:ce:0f:bc:1d:
db:bd:16:cc:5d:84:94:00:15:15:1f:7a:d6:ee:8b:
55:81:85:2f:da:3d:c4:68:10:96:8b:55:94:17:f9:
1b:ea:e3:a6:3a:2b:4f:5f:fa:68:87:7b:06:c3:03:
47:35:30:d5:ea:a9:f8:d6:f1:8b:eb:9f:bd:71:a0:
1e:2f:ba:c6:1a:5d:75:4c:0c:bf:13:da:f7:6d:21:
91:ed:b6:a7:3b:43:5f:d0:e1:64:8c:db:f0:41:16:
02:c1:74:c2:ba:60:e2:51:ff:9f:40:ff:9c:de:a9:
57:16:d2:f5:a1:97:8e:15:84:28:bb:5b:6b:f1:41:
dc:b4:aa:ce:fe:e4:20:af:45:f5:9a:ee:2c:3b:f6:
96:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A5:27:D2:C9:5C:A6:12:CD:6E:5D:E4:69:98:22:8C:F0:EB:04:79
X509v3 Authority Key Identifier:
keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7f:7c:bb:f4:aa:cf:27:c1:d7:42:f4:62:43:ba:9c:85:a5:
1c:14:9a:eb:e3:10:2c:42:08:da:07:3d:e2:35:ea:f2:83:ed:
fb:54:d4:70:20:2c:d5:a0:51:a3:a6:07:5b:2d:66:8d:79:30:
20:02:9c:fd:14:27:23:ae:fb:97:02:5b:96:05:d7:d0:19:49:
ed:e5:fd:8b:4a:bc:5c:42:d2:5b:91:ba:11:41:2d:44:9d:6f:
c3:04:a4:53:99:11:9b:f1:40:49:e5:de:3b:3a:d3:f8:6c:18:
47:4b:06:ca:88:e0:fd:54:2f:de:6d:3f:36:c2:28:7e:eb:67:
93:d2:30:ec:f6:c0:17:fd:2f:7d:47:e3:6f:b6:7a:5d:b3:e4:
89:f6:e6:a1:ea:cf:5d:e7:a2:69:77:97:0b:f9:ab:13:42:42:
bb:5f:82:b8:f6:00:d6:e6:c6:54:a5:d0:c3:19:33:f2:e9:c2:
04:61:23:96:cb:28:4c:25:c9:94:a8:db:23:af:13:40:ad:ef:
04:cc:34:f9:1a:f9:84:93:2f:33:08:65:25:a4:68:f8:35:72:
4d:f4:70:99:98:13:80:43:0d:64:83:e5:91:45:60:58:70:fb:
d0:e4:b9:23:e5:e3:b2:9a:68:42:94:07:0e:02:c6:80:8a:65:
5b:2a:09:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:47:48 2025 by rpki-client