Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
File: _BfLzO42sk7L1GP30QKrxP5A4U0.mft (raw, json)
Hash identifier: 1KtJs6+oRCcbMbUZ9ShdXeEiFhfayelGXJbTDMr1pgo=
Subject key identifier: B4:47:68:AF:84:8A:BE:DD:39:0E:1B:A7:71:60:45:96:9E:A1:6F:F7
Authority key identifier: FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
Certificate issuer: /CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Certificate serial: 019873E1B7EE5D8F249786882B937D471A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
Manifest number: 131A
Signing time: Mon 04 Aug 2025 07:00:29 +0000
Manifest this update: Mon 04 Aug 2025 07:00:29 +0000
Manifest next update: Tue 05 Aug 2025 07:00:29 +0000
Files and hashes: 1: _BfLzO42sk7L1GP30QKrxP5A4U0.crl (hash: AJZwfBdVBlqSpCimSCS1h0Y0PZHLQLIT+4JhpUhUnKw=)
2: tJwISkQYqLHEilM1B5xtrHKBtrs.roa (hash: QQm9O9ciyqlGIn1eEAWaXdioEbF5c6krD1izvlymivs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:b7:ee:5d:8f:24:97:86:88:2b:93:7d:47:1a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Validity
Not Before: Aug 4 07:00:29 2025 GMT
Not After : Aug 5 07:00:29 2025 GMT
Subject: CN=b44768af848abedd390e1ba7716045969ea16ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:4b:16:07:c0:59:8e:27:69:8a:76:40:0a:
a8:79:25:75:d7:71:f1:b2:b2:65:99:dd:3a:3c:0a:
b9:46:ad:45:81:5c:15:cf:52:10:f0:53:03:9c:49:
17:82:92:e4:88:d7:62:b7:d9:78:c4:e7:f6:f0:ca:
ae:3a:12:34:fa:bc:11:c7:77:5f:fd:df:42:1f:77:
e2:3e:60:d6:ff:4b:90:73:0e:c0:1e:e9:f3:eb:10:
ea:4c:d9:51:04:46:18:29:37:df:c2:bc:4e:29:86:
91:6c:62:7e:31:33:71:10:12:fd:53:fe:09:6f:7e:
05:ea:9c:a7:d8:9d:e4:e0:40:56:f7:c9:09:43:4a:
03:4a:63:06:b9:eb:69:f2:b4:46:b3:75:69:14:46:
1a:7d:5c:bd:4d:cf:d2:65:d8:8f:2b:0d:8e:8f:6d:
2e:37:fb:49:d3:bc:ed:b7:af:0a:cd:28:06:26:64:
fb:c6:2a:a7:d3:ea:3b:36:7c:cb:82:ba:78:d7:80:
b3:73:4e:b8:94:46:c5:3c:1b:4b:1f:50:95:c4:b1:
5a:c5:17:c7:a7:c7:42:d9:df:9a:91:7b:95:44:a3:
7b:94:de:14:d1:86:3e:86:30:2e:f8:13:8e:fa:5e:
fc:da:b2:4e:38:97:e4:ba:fc:68:ea:90:c6:d3:af:
a7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:47:68:AF:84:8A:BE:DD:39:0E:1B:A7:71:60:45:96:9E:A1:6F:F7
X509v3 Authority Key Identifier:
keyid:FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4e:f9:0f:e2:40:b4:ed:2a:d5:5b:46:81:da:af:c9:ef:4d:
0c:25:d6:ff:ce:07:2f:f3:a8:28:49:18:f5:08:79:76:0f:97:
d7:ac:40:54:ad:18:53:15:c9:d4:72:3c:7b:26:3a:d3:d7:99:
4f:cf:9c:5c:4e:00:91:94:d3:87:fe:34:79:74:1d:80:3e:87:
ce:fa:69:92:89:47:c8:6f:8a:34:6c:c7:d7:fd:7c:c8:44:d4:
73:a3:9c:6a:82:52:82:71:66:fa:f4:ab:8d:9a:8a:c6:c1:2b:
ab:42:f1:b3:fb:67:92:5b:2c:7a:5a:01:ac:9d:38:6e:91:14:
b3:ef:d6:ae:2b:65:98:a3:1f:a6:82:e5:0d:66:0b:cf:73:ab:
03:c1:dc:92:61:a5:38:4e:cd:b3:34:c7:83:4a:b4:0e:35:b4:
ea:89:81:f6:8a:9d:86:f1:3a:e8:b9:d4:ba:e4:20:aa:e6:45:
c5:cb:8b:9d:0f:89:1f:ad:b5:97:0d:ab:9a:da:91:6e:ae:42:
1d:05:c4:45:92:6e:f4:5d:4b:2a:81:9e:2a:8a:bb:c4:3f:9b:
05:14:57:26:db:bf:5e:d8:f5:3d:6b:b2:69:55:65:3e:38:25:
67:50:a1:f3:52:39:96:2d:73:db:3f:70:6b:5c:0b:d7:b1:84:
e0:ed:d4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:36 2025 by rpki-client