Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
File: BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json)
Hash identifier: WnjZZdSGTxp44gOlKsodImiYJD+Q5SyTgvXmjfxq1+k=
Subject key identifier: AA:80:BC:58:97:BE:25:BC:4F:1D:61:BA:3A:A9:35:D4:59:69:00:29
Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Certificate serial: 01976BBD9054A45EC06BBD1D28DFBB990A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
Manifest number: 02AF
Signing time: Sat 14 Jun 2025 00:01:14 +0000
Manifest this update: Sat 14 Jun 2025 00:01:14 +0000
Manifest next update: Sun 15 Jun 2025 00:01:14 +0000
Files and hashes: 1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: vNal/SL2A0r9hNy+I7oRKtNhtmBxTqAE2K3w4H2EOW4=)
2: xRcmRRI7cJbjjDDpwXYPAzS-KSc.roa (hash: +JILVppUk45vww/N3lSTziP5G1U9pzpXHROPOpD0HAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:90:54:a4:5e:c0:6b:bd:1d:28:df:bb:99:0a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Validity
Not Before: Jun 14 00:01:14 2025 GMT
Not After : Jun 15 00:01:14 2025 GMT
Subject: CN=aa80bc5897be25bc4f1d61ba3aa935d459690029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:26:ee:2c:4f:a7:79:44:64:b5:06:18:7d:
54:b2:14:32:ae:30:be:71:25:df:f4:52:2b:25:39:
33:57:0a:3e:79:8a:4c:8d:90:51:81:f6:1d:22:b1:
74:db:75:c6:3f:24:2c:e4:a3:32:34:b1:ef:d5:7e:
4a:ec:85:6f:4a:7b:46:71:3e:96:57:1c:ca:a4:f1:
ba:09:eb:87:80:c0:6e:33:a7:04:d7:81:5d:b8:9d:
49:04:cf:29:6c:0e:65:95:41:4f:85:9c:42:95:6e:
24:c7:e4:62:dd:2c:4f:9a:61:75:00:16:c6:e7:ce:
ef:c2:6e:fe:e6:6b:7e:74:f3:41:cf:7b:50:57:4e:
5a:b5:7b:67:6a:b7:64:14:c5:09:d7:a1:d2:b3:4c:
7f:7c:54:0a:f8:d6:f8:49:dd:2e:19:7f:d9:54:b9:
a1:0e:7c:2c:ee:ff:3f:2a:41:a2:ad:ec:b9:8f:b1:
66:40:d4:07:90:55:e0:58:ce:fa:d8:f6:b9:06:01:
a0:d4:ef:f6:31:d1:25:ae:93:1d:15:04:62:4b:d0:
e8:87:de:84:d4:c0:36:ad:8e:e8:d3:36:5c:92:c4:
04:2f:4b:93:f4:ea:ac:6c:5e:e6:ab:ea:03:ad:0a:
db:79:9f:f7:f4:e2:fa:d2:6b:14:df:9f:7d:4d:9f:
b1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:80:BC:58:97:BE:25:BC:4F:1D:61:BA:3A:A9:35:D4:59:69:00:29
X509v3 Authority Key Identifier:
keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:97:c3:30:be:76:ef:25:e3:ae:2d:e2:73:13:d3:56:e3:cd:
8a:88:cf:6d:58:35:5b:bf:9d:74:70:ee:35:66:01:aa:e4:f2:
c1:50:b8:f9:8d:9d:aa:43:1c:c1:2e:6f:55:02:83:03:5c:98:
87:03:49:c0:b6:c0:1c:29:f1:b0:7c:73:24:b4:58:c7:c4:50:
1f:ff:30:86:2b:b7:f1:e4:c4:fb:f1:11:23:68:ee:2b:c9:53:
28:23:29:50:65:04:67:a6:ab:83:5c:f8:e9:4d:42:5d:3a:54:
5d:17:36:e2:5a:ea:ab:22:a1:4d:ac:a0:24:23:6b:80:6c:0b:
9e:5d:25:2c:20:d4:fd:5b:7f:65:bf:14:78:54:df:d9:7a:ab:
0f:83:6f:32:19:39:ed:ea:f3:1f:7f:7e:05:dc:f3:0d:3d:b2:
82:0a:21:c4:c6:76:04:f6:0d:65:09:9d:50:d4:d1:fc:14:46:
5d:4d:53:f7:15:92:e2:50:77:5f:c0:b6:8e:9e:cb:08:89:46:
47:ce:d9:ee:76:74:53:22:1f:c9:e4:bc:95:94:ae:44:75:a6:
1a:c6:a6:ce:f4:be:35:42:d9:f5:be:54:00:be:99:00:0c:1a:
d5:d4:5a:2d:fb:15:bc:c0:02:c4:3b:48:dd:8d:56:c3:81:f0:
78:45:99:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:05:24 2025 by rpki-client