
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
File: BFxfO7gRkXIMDd-LPPNNkdq04dM.mft (raw, json)
Hash identifier: 5TKFysnWSWKcPvW6aKp43c2MdDL6VbpuzLVGr+7M1Tw=
Subject key identifier: 5D:01:97:51:28:01:80:15:8B:76:FA:2C:E7:A4:8B:A8:E6:B2:4C:81
Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
Certificate issuer: /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Certificate serial: 01976EBDE29F68E42334802B6578FBE8BE83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 14:00:27 +0000
Manifest this update: Sat 14 Jun 2025 14:00:27 +0000
Manifest next update: Sun 15 Jun 2025 14:00:27 +0000
Files and hashes: 1: A_nsrTfQ71u0UrzEQ6SNUm_3G2U.roa (hash: SR5+osvS+osGxE2DJ2TfgoITwWWe9DsyWc/ATbIOEEM=)
2: BFxfO7gRkXIMDd-LPPNNkdq04dM.crl (hash: KHiEdD7wVOWZ4F5CQ4aC/blyLN4bo16QcIy+1sIj1Yo=)
3: IDbbddFc14SqQa3mZmElYtVTmQY.roa (hash: 27Hv+jULUbGOWBtj+jEisHYpbRo4f4IxlnI8y0WtgFs=)
4: rk3ppAboxW06rE2L20ZKn9egqD8.roa (hash: 0BLnKXlmHhtn6//IbmeMPsDs46xu8jcRpBXK8EK9HJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:e2:9f:68:e4:23:34:80:2b:65:78:fb:e8:be:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Validity
Not Before: Jun 14 14:00:27 2025 GMT
Not After : Jun 15 14:00:27 2025 GMT
Subject: CN=5d019751280180158b76fa2ce7a48ba8e6b24c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:fd:72:c5:7f:28:b3:f4:55:ca:1b:8e:46:
31:1a:66:16:1e:28:6f:a2:3e:05:4a:09:65:9f:18:
b0:b4:81:cf:c2:57:41:e9:12:38:66:0d:4c:da:dd:
29:c7:41:4a:59:9b:a8:a4:e3:8d:99:57:a7:da:96:
27:0d:a2:b8:52:3e:06:54:85:00:37:4d:64:c5:a5:
8f:e0:8e:9e:98:f0:b8:20:88:3f:d3:0b:82:f4:96:
28:73:86:30:80:b1:ed:d2:27:70:78:50:67:8b:a2:
47:73:78:b0:e0:79:4f:8c:99:e4:19:12:90:a9:cb:
fe:46:ce:f0:9c:ba:11:20:79:af:56:26:ed:bf:2d:
6f:07:38:90:14:1d:9b:b7:60:c5:dd:55:8a:59:b0:
42:40:2e:dc:5c:82:46:b0:e8:27:81:7b:19:8f:03:
92:9b:8b:8d:40:a3:db:50:b8:8d:c2:1f:7a:6a:70:
50:bd:09:43:d2:11:76:5e:3b:cb:4a:c6:18:7b:a2:
29:e2:38:84:bf:79:d6:a4:ee:9e:e9:22:62:3b:70:
f2:6f:d6:39:a0:b2:e9:b7:da:72:f2:c9:50:15:65:
fe:4e:22:0a:6d:9a:8a:40:1f:de:db:70:bc:13:af:
ed:a9:e1:39:20:8f:a4:ef:98:22:c9:ca:04:7f:48:
8b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:01:97:51:28:01:80:15:8B:76:FA:2C:E7:A4:8B:A8:E6:B2:4C:81
X509v3 Authority Key Identifier:
keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:96:49:78:51:3c:c4:7b:09:cc:36:09:20:68:69:c1:ec:20:
cf:78:0e:1a:99:d2:1f:d5:45:c7:dc:3e:0e:11:9a:64:af:7a:
f1:de:e8:4a:11:eb:f1:38:12:45:1c:24:6c:0f:8e:18:00:eb:
16:03:cc:95:44:ef:07:6d:59:cf:bc:d8:90:3f:7e:dc:91:b8:
7d:db:09:ac:d5:91:d9:a8:27:30:7f:25:42:fd:2f:57:11:4a:
40:b7:79:1a:8c:ad:06:03:78:8f:64:10:6a:68:88:42:c4:ee:
a3:cc:20:d6:90:6b:7d:aa:bc:c0:64:de:89:b5:fa:7b:cd:10:
04:45:bb:40:2c:19:33:6f:f7:c9:40:bb:4a:97:ee:4e:69:d0:
e5:f1:ad:6b:c1:70:9e:20:06:9e:98:69:eb:d0:91:ce:41:64:
e6:33:53:ca:97:c0:53:95:30:07:46:cf:d1:6a:6f:85:5b:e9:
3b:dc:58:9d:43:86:c1:41:73:ab:90:dd:eb:02:84:32:44:e1:
80:46:25:b1:d0:01:f0:fb:40:1f:94:6e:40:02:e8:86:d0:e8:
c3:88:fa:3a:87:b5:7f:a2:de:44:09:e8:85:f2:ae:b0:14:da:
19:3f:f8:07:15:34:8f:27:eb:55:d9:91:f8:e9:d5:bb:69:d3:
91:1d:03:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:57:49 2025 by rpki-client