Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: 6ZqtB9yCjzpgd85lUhq4uEyhTZpWGpBvKqwE0JJEzn0=
Subject key identifier: 6E:0A:E0:D7:48:3C:DE:21:73:3B:D7:67:77:74:53:71:BB:0E:3D:BE
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 0197470C016A1FA72C65A8D8EB973F9057FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 14C2
Signing time: Fri 06 Jun 2025 21:00:58 +0000
Manifest this update: Fri 06 Jun 2025 21:00:58 +0000
Manifest next update: Sat 07 Jun 2025 21:00:58 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: QN20wupBHHGBMao8Nl30mxWGdkUg9z1DOumO81y8voY=)
2: fNJzWMxwIRs-oxYj6gVLzdXlR9o.roa (hash: 2scd04V5Cfx10HVTv5lVQAKj0cVcY+kOPgXcQil/rZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:01:6a:1f:a7:2c:65:a8:d8:eb:97:3f:90:57:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Jun 6 21:00:58 2025 GMT
Not After : Jun 7 21:00:58 2025 GMT
Subject: CN=6e0ae0d7483cde21733bd76777745371bb0e3dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4e:f8:53:8d:ee:83:47:93:96:5b:e2:e6:b3:
66:f5:7c:0f:b2:e1:d2:67:b0:d4:a2:03:22:46:3d:
10:77:f1:e1:0e:89:8c:51:5b:92:1a:51:80:97:46:
64:b1:f8:fb:99:16:40:31:df:8d:91:ee:8a:a0:47:
6a:5c:9c:36:ea:fd:c6:8d:d7:d9:c7:b4:67:47:42:
fb:0d:10:61:74:73:be:33:20:21:2c:3d:11:0c:ae:
10:ec:47:b2:88:d9:15:bd:26:bb:1b:90:9d:76:3f:
ed:3f:de:10:a1:21:2a:18:d6:80:10:3f:02:81:a3:
5e:74:54:98:36:04:40:b4:18:9f:00:27:4d:66:c2:
f7:61:34:0b:ca:c1:1a:e6:2d:b4:7b:1a:05:d1:3c:
a1:02:87:0a:bf:ab:7d:e3:4d:f0:6a:fa:5f:0b:f1:
cc:13:b7:cf:df:87:d0:ae:5a:60:67:68:1f:7b:ed:
c9:f9:9a:82:2e:55:6e:4e:d7:c6:35:aa:43:82:3c:
a5:3b:a9:75:31:99:d1:e7:de:93:1c:fa:68:ff:cc:
6b:09:9b:82:c7:35:be:71:e5:01:51:92:fa:2d:f9:
8d:1a:04:71:b5:9a:a9:9b:3e:53:1e:38:65:f4:37:
ec:08:0d:07:7c:54:29:ea:77:b3:4e:80:9a:56:8b:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0A:E0:D7:48:3C:DE:21:73:3B:D7:67:77:74:53:71:BB:0E:3D:BE
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:86:50:5e:65:28:0b:ee:6c:36:1e:fe:a9:f3:1f:77:a3:6f:
b0:9c:f7:3d:12:e4:c8:ca:1d:25:76:d1:e4:b2:4a:f7:5c:c1:
7d:0a:6f:d6:3e:a7:0c:df:63:df:8a:16:ee:3f:e7:40:9f:f3:
ff:ae:82:08:1c:7a:99:40:b8:ab:21:8d:fc:52:13:23:f9:ba:
8d:c5:1f:b6:60:3e:86:88:64:58:de:4b:3e:42:a9:be:02:c4:
a0:35:86:1a:c6:13:37:34:ca:91:ad:9e:7c:18:38:06:8e:f3:
35:4b:b3:0d:74:41:8f:07:38:8c:10:96:5c:be:95:33:e7:23:
0f:c9:55:35:9b:ee:49:95:4c:5c:99:c0:f8:ea:61:eb:51:e7:
dd:30:46:f3:f5:14:c2:2d:43:bd:23:bc:27:73:b1:9e:59:95:
60:59:41:80:04:1a:cf:07:b9:b6:bd:92:50:32:6d:f6:81:19:
63:48:34:e5:17:ae:1c:f4:9f:55:0d:69:d7:9c:d7:46:e6:86:
9b:f9:78:ba:92:d5:11:43:49:f1:ee:94:ef:0b:e6:70:3b:0f:
b5:42:4d:f9:05:d3:97:1d:27:74:e4:b5:1b:ba:5b:53:0c:a3:
b1:a9:95:ae:d3:c5:44:d8:73:dd:3c:14:eb:4a:b9:40:5c:ef:
ba:2d:e2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:07:41 2025 by rpki-client