Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
File: _BfLzO42sk7L1GP30QKrxP5A4U0.mft (raw, json)
Hash identifier: 8MCGX1mMFyRdgOmKVpuC9cOHE0pjLXn3vKAX2HiwU7U=
Subject key identifier: EA:6A:5C:40:B5:6F:BE:91:1F:80:40:2D:78:66:6D:EA:EB:04:A2:61
Authority key identifier: FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
Certificate issuer: /CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Certificate serial: 01976960760D4859BB20D7DEEBB0571BE4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
Manifest number: 1290
Signing time: Fri 13 Jun 2025 13:00:18 +0000
Manifest this update: Fri 13 Jun 2025 13:00:18 +0000
Manifest next update: Sat 14 Jun 2025 13:00:18 +0000
Files and hashes: 1: _BfLzO42sk7L1GP30QKrxP5A4U0.crl (hash: JtBzRzlY5I0ai+h0b61H6fi8XvEtajdEXeAuBTZRzSc=)
2: tJwISkQYqLHEilM1B5xtrHKBtrs.roa (hash: QQm9O9ciyqlGIn1eEAWaXdioEbF5c6krD1izvlymivs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:76:0d:48:59:bb:20:d7:de:eb:b0:57:1b:e4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Validity
Not Before: Jun 13 13:00:18 2025 GMT
Not After : Jun 14 13:00:18 2025 GMT
Subject: CN=ea6a5c40b56fbe911f80402d78666deaeb04a261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:c1:0c:ee:c6:ce:2d:7d:60:dd:ed:f8:15:
ca:8a:f0:19:c9:97:e8:ab:cf:9f:60:90:87:f2:d0:
f8:e7:c6:05:53:61:a9:aa:8d:c0:4d:a0:ff:a4:b0:
a3:c4:76:d5:55:9a:a0:4c:40:7e:08:95:18:68:f8:
b2:9b:ca:e7:e4:d9:27:2e:8f:88:7c:46:a9:bf:64:
26:f3:6b:42:30:2e:bc:d9:0f:f4:ac:25:d6:61:81:
cd:0d:dc:c6:11:45:91:d0:af:da:78:8d:81:e0:79:
46:2a:b4:69:be:b0:04:1e:18:7b:9d:d8:1b:03:7a:
ab:38:49:27:7f:26:b7:3c:e7:3e:d6:79:33:13:df:
df:7b:e8:06:e2:35:aa:49:ea:50:04:43:33:11:fb:
07:fc:6e:18:a6:33:0d:8d:79:ae:a4:61:0c:9b:b0:
8f:7c:3f:77:30:8a:63:39:f4:b5:7d:1b:8b:1d:95:
f2:bd:66:f1:0e:25:01:59:69:50:6a:26:20:be:a9:
d7:b1:c7:15:48:64:ab:b7:fa:e3:11:be:d8:22:1d:
8d:bc:72:78:5c:64:7b:ab:43:a2:80:fd:b1:05:2d:
99:da:22:a9:4d:96:e2:51:05:cd:92:3d:bd:7f:bd:
5f:ca:2d:fa:de:67:b7:d9:70:51:d7:16:2f:d7:7e:
d4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6A:5C:40:B5:6F:BE:91:1F:80:40:2D:78:66:6D:EA:EB:04:A2:61
X509v3 Authority Key Identifier:
keyid:FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f4:2d:e0:4a:41:22:b9:40:99:fc:a1:f4:f5:c6:3f:a1:fb:
b1:9b:e1:cb:51:b0:b6:b4:3c:de:f0:4e:8e:2e:25:3e:83:4f:
2e:bb:cb:8c:20:99:c5:0b:e0:18:f6:e2:42:17:2e:80:9e:d6:
a0:28:a8:45:d3:e7:e1:06:b3:7d:cc:14:6f:9e:0d:45:a9:df:
19:a2:e4:a7:9e:2d:91:be:0d:75:a9:70:99:bc:59:cc:d9:61:
19:19:06:34:b0:af:d1:d7:60:e2:64:c5:d5:5f:8b:db:9e:fc:
5d:ca:2c:01:9b:f8:df:50:53:49:a8:95:b2:f9:9f:78:16:16:
33:21:a6:e6:2b:49:19:2d:17:22:a6:fd:54:08:6c:d2:11:ad:
71:38:da:6b:4c:4b:62:c0:f1:44:88:de:30:ce:6c:72:40:cc:
eb:f8:90:cc:f6:41:93:16:28:82:af:f1:9a:d5:10:8e:e0:ab:
2c:0c:a5:a1:46:86:a4:d1:6f:a8:e8:95:6d:7c:cf:76:ea:31:
f1:09:0f:3e:8c:39:76:84:89:64:dc:0a:66:5f:7c:ef:20:71:
18:8c:7c:b0:81:78:09:39:9e:45:c4:1e:80:5e:22:76:e6:a6:
02:46:0b:e5:70:b1:68:08:10:be:b6:28:73:12:be:33:e0:26:
1e:bf:e9:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYHYNSFm7INfe67BXG+ThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTdjYmNjZWUzNmIyNGVjYmQ0NjNmN2QxMDJhYmM0ZmU0
MGUxNGQwHhcNMjUwNjEzMTMwMDE4WhcNMjUwNjE0MTMwMDE4WjAzMTEwLwYDVQQD
EyhlYTZhNWM0MGI1NmZiZTkxMWY4MDQwMmQ3ODY2NmRlYWViMDRhMjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo7BDO7Gzi19YN3t+BXKivAZyZfo
q8+fYJCH8tD458YFU2Gpqo3ATaD/pLCjxHbVVZqgTEB+CJUYaPiym8rn5NknLo+I
fEapv2Qm82tCMC682Q/0rCXWYYHNDdzGEUWR0K/aeI2B4HlGKrRpvrAEHhh7ndgb
A3qrOEknfya3POc+1nkzE9/fe+gG4jWqSepQBEMzEfsH/G4YpjMNjXmupGEMm7CP
fD93MIpjOfS1fRuLHZXyvWbxDiUBWWlQaiYgvqnXsccVSGSrt/rjEb7YIh2NvHJ4
XGR7q0OigP2xBS2Z2iKpTZbiUQXNkj29f71fyi363me32XBR1xYv137ULwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpqXEC1b76RH4BALXhmberrBKJhMB8GA1UdIwQY
MBaAFPwXy8zuNrJOy9Rj99ECq8T+QOFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JmTHpPNDJzazdMMUdQMzBRS3J4UDVBNFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83ZmQxMmYtYjA1NC00ZGQyLTlkODct
MTM2NTg3NWM3ZTg1LzEvX0JmTHpPNDJzazdMMUdQMzBRS3J4UDVBNFUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83ZmQxMmYtYjA1NC00ZGQyLTlkODctMTM2NTg3NWM3ZTg1
LzEvX0JmTHpPNDJzazdMMUdQMzBRS3J4UDVBNFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/Qt4EpB
IrlAmfyh9PXGP6H7sZvhy1GwtrQ83vBOji4lPoNPLrvLjCCZxQvgGPbiQhcugJ7W
oCioRdPn4QazfcwUb54NRanfGaLkp54tkb4NdalwmbxZzNlhGRkGNLCv0ddg4mTF
1V+L2578XcosAZv431BTSaiVsvmfeBYWMyGm5itJGS0XIqb9VAhs0hGtcTjaa0xL
YsDxRIjeMM5sckDM6/iQzPZBkxYogq/xmtUQjuCrLAyloUaGpNFvqOiVbXzPduox
8QkPPow5doSJZNwKZl987yBxGIx8sIF4CTmeRcQegF4iduamAkYL5XCxaAgQvrYo
cxK+M+AmHr/poA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:15 2025 by rpki-client