Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
File: bfwUOO4IFam_i3P5p87QlPIax54.mft (raw, json)
Hash identifier: E+rSXbtJ9zYhIaCOVzf+MdYFB3lJ5cLm3rb61HmJ+p8=
Subject key identifier: 27:64:76:46:24:4E:4C:77:1C:D1:F0:CB:E1:FD:45:D1:21:B5:33:F4
Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
Certificate issuer: /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Certificate serial: 0196741EBCD4AD0F4F8D728339190B951D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
Manifest number: 085E
Signing time: Sat 26 Apr 2025 22:01:33 +0000
Manifest this update: Sat 26 Apr 2025 22:01:33 +0000
Manifest next update: Sun 27 Apr 2025 22:01:33 +0000
Files and hashes: 1: D9a5tzSXaB3YCXB51ESBfxmocyM.roa (hash: PgS49lglth99HhTvLssigXqfh7TfLNAP1ou+sfSqOKE=)
2: UBhFR3OZMj_R8VlXXyVrvKRDJfU.roa (hash: rvFp0ktgwJ1/3eTonU7/7v6UyJ5UYW+gGNm92KfeHQY=)
3: bfwUOO4IFam_i3P5p87QlPIax54.crl (hash: HhhEIIQiuH9BZ5I+fSLugpfPD6iwWUh+cY/VKyLsyzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:bc:d4:ad:0f:4f:8d:72:83:39:19:0b:95:1d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Validity
Not Before: Apr 26 22:01:33 2025 GMT
Not After : Apr 27 22:01:33 2025 GMT
Subject: CN=27647646244e4c771cd1f0cbe1fd45d121b533f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:b0:82:97:2a:fc:23:6a:7a:c5:31:74:7d:
d5:28:62:5f:69:57:c8:99:12:c0:bd:15:82:a9:34:
da:b9:d4:c3:71:a3:25:95:f3:56:db:99:0a:b2:28:
e0:40:2b:53:59:52:36:79:73:a5:b7:97:ee:2d:28:
e6:1c:ed:0b:03:38:4a:4b:5b:3c:8c:cf:72:56:85:
bd:c5:b4:2f:10:5f:7e:b0:f1:64:9e:e7:cc:31:b1:
bb:9e:bf:8f:dc:52:d5:05:9e:0c:9b:36:d2:17:6a:
9d:dc:7c:03:33:ee:bc:16:b7:f5:b0:de:e2:ca:68:
76:2d:e2:a9:85:69:3c:46:e8:f6:3f:94:db:a7:26:
62:c2:43:58:cd:7f:3b:e3:f4:4d:32:15:29:b4:48:
1f:49:1f:ce:a9:4e:c7:ea:fe:5b:52:3b:29:34:23:
08:46:cf:fb:4b:40:58:09:29:87:d5:6a:25:77:e6:
f9:fa:d4:1f:f2:f4:e2:16:9a:e4:33:46:36:4e:5e:
4c:90:1b:04:22:e4:6a:51:ac:2a:68:96:5c:2a:9a:
41:d8:0f:c0:e3:cf:f6:ec:1f:59:c9:e7:bc:e7:10:
d9:91:1d:d0:5a:d6:b9:3f:d6:51:4d:e9:71:5a:6d:
bd:ab:0c:7a:94:e5:d7:e1:f2:bc:3a:f8:41:3e:bf:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:64:76:46:24:4E:4C:77:1C:D1:F0:CB:E1:FD:45:D1:21:B5:33:F4
X509v3 Authority Key Identifier:
keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f9:3a:e1:0a:0e:56:72:66:72:c5:94:74:6c:e2:a3:32:70:
0d:6b:b6:13:ff:d5:d4:bb:6d:98:46:fe:d5:e9:bc:b2:fd:e7:
b2:00:e5:c1:d3:58:ea:70:49:04:c0:f2:87:e0:90:ae:b1:18:
e3:16:36:69:d0:88:ce:51:7a:bb:c7:e3:b7:d4:a5:f7:13:e8:
c0:16:b2:01:18:82:fb:5d:eb:aa:0b:f2:88:3d:8c:c9:42:b2:
2d:14:b7:50:2a:4a:e7:cb:86:1f:ee:47:52:7d:fe:13:0a:77:
61:b7:9e:e2:e3:de:d5:ab:6d:50:b4:13:31:16:bb:79:6e:92:
cd:1a:22:78:57:de:0e:bb:b7:d7:77:71:11:c5:2d:8c:34:2c:
18:ee:7b:05:f7:51:2d:6b:52:9d:3b:0c:24:15:69:27:f5:a8:
97:a8:23:06:c7:1c:7b:87:8e:02:e8:25:b3:55:fa:92:22:ca:
f4:47:b9:b0:06:d2:f7:a3:2b:ca:78:50:bf:c9:7e:b0:8b:62:
41:a3:fd:5b:a5:3c:08:b8:c9:1f:c3:44:da:ca:11:9a:98:b3:
5c:43:1b:cf:44:2b:84:31:ca:f8:6b:5a:cd:fe:4b:85:71:48:
92:a5:19:77:81:4f:c7:74:32:19:bc:73:02:cb:4b:05:aa:55:
d5:5a:0d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:40:45 2025 by rpki-client