Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
File: BAfWwkhET2tcN42w_-wPiZJW66M.mft (raw, json)
Hash identifier: C3bog00hVHK754p7H7Q7jnCreFeEBGe6VE7Tg1rnP74=
Subject key identifier: 67:75:63:83:5D:55:0D:FA:6C:D7:65:25:08:9F:2C:3E:96:20:8F:F1
Authority key identifier: 04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
Certificate issuer: /CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Certificate serial: 01976C6255193CA534D66FFA3D83A4BF5FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
Manifest number: 0862
Signing time: Sat 14 Jun 2025 03:01:13 +0000
Manifest this update: Sat 14 Jun 2025 03:01:13 +0000
Manifest next update: Sun 15 Jun 2025 03:01:13 +0000
Files and hashes: 1: BAfWwkhET2tcN42w_-wPiZJW66M.crl (hash: FzC7yDp0S0tB6UnFhPmC9U04n8hAk/VIT96KcxdtuBk=)
2: QpIKO4ejjPjXaNQ1_KyJkWKevB8.roa (hash: e6W0MKDyzgf7+BDF2Ho9KsY3xBRYMIFdcPH8WpxhKmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:55:19:3c:a5:34:d6:6f:fa:3d:83:a4:bf:5f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Validity
Not Before: Jun 14 03:01:13 2025 GMT
Not After : Jun 15 03:01:13 2025 GMT
Subject: CN=677563835d550dfa6cd76525089f2c3e96208ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:ef:ab:61:54:db:20:29:59:b1:f4:a6:fa:
16:79:cf:e1:45:18:e5:a6:e6:15:53:cc:25:21:47:
c9:4a:98:ed:e3:8f:a4:2f:58:ec:61:a5:7f:1d:2e:
fa:91:40:46:33:e1:e6:3a:e9:dc:07:1a:1d:71:49:
a4:c3:07:f9:ba:cf:f5:77:a7:1d:01:50:78:30:98:
72:a3:32:27:ce:59:41:c6:cb:db:45:21:d1:7e:3c:
20:ac:45:fe:97:0e:8c:6e:c4:f5:24:49:0a:52:cd:
b0:5a:7b:c8:b4:fc:df:a6:12:e0:ab:e7:d1:1d:c6:
bb:6d:8f:ad:6d:3b:69:81:9e:11:63:47:2e:bf:52:
a1:1a:9f:89:18:7f:9e:fb:a0:c6:5d:cf:46:f3:3b:
48:39:20:0d:ed:8a:40:7f:c7:18:50:ea:c5:f6:71:
60:ab:4b:d9:da:a9:f7:b6:50:7a:f0:d3:3a:20:e3:
85:37:11:97:1a:95:28:d4:2a:94:04:7c:39:aa:f0:
3e:23:27:c4:59:e5:ef:58:fd:9a:12:2e:69:df:9c:
1a:92:a5:23:a5:b2:ff:bc:de:8f:b8:cb:8a:21:ad:
66:a9:a2:00:83:3f:69:1a:73:2e:bd:e7:78:9a:f6:
8a:60:f8:e1:f9:e2:8b:37:23:4d:54:02:83:bd:24:
16:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:75:63:83:5D:55:0D:FA:6C:D7:65:25:08:9F:2C:3E:96:20:8F:F1
X509v3 Authority Key Identifier:
keyid:04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b8:25:4c:f0:17:13:84:50:ae:ac:14:34:b8:71:89:25:77:
08:16:05:91:9c:32:6e:d9:67:65:2e:7f:b3:68:2f:d5:ef:1d:
76:48:d9:eb:c8:db:95:cf:51:93:ca:a9:35:a7:43:d9:70:ce:
bf:b9:35:c2:09:ee:d6:96:cd:4e:b3:ad:3c:db:ab:07:78:32:
7e:07:c7:f3:8b:9c:04:14:d8:32:32:1c:f7:23:b2:91:9d:1f:
eb:99:4f:b9:7c:2f:30:bc:91:99:34:c6:59:2d:bb:34:c1:ca:
8f:48:88:03:62:be:0f:63:af:9f:71:55:07:fe:70:e5:ba:b6:
8a:8c:9e:4b:ef:06:71:40:3f:f8:d0:bc:ac:dc:aa:3d:0b:c5:
32:20:90:3c:76:57:3d:9f:d3:99:ee:f4:f3:44:ab:71:13:05:
37:a1:f8:53:d5:ad:05:4c:a9:7a:e8:31:55:21:0c:4f:fd:da:
ed:8d:9d:c4:38:2e:66:d4:7a:a1:e3:8e:d0:85:8b:5b:bf:db:
ed:ab:db:a3:9b:4e:fe:4c:8b:17:0e:78:3e:25:de:62:1c:b9:
f5:8c:c8:72:bd:c5:06:f6:d3:37:2c:e8:2a:cf:aa:e5:9e:1c:
96:6e:88:0c:ac:fe:ee:0f:25:f3:37:93:19:50:11:88:ce:19:
f2:57:7c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:58:41 2025 by rpki-client