Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
File: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft (raw, json)
Hash identifier: y25PbsX77yXnmMRUhs+Yg0Avo9X0D6OnD1A/LAJrJMw=
Subject key identifier: 18:B5:77:5E:50:EF:43:1F:CE:CD:16:EA:61:C4:62:33:2A:28:EF:47
Authority key identifier: 6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
Certificate issuer: /CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Certificate serial: 019872CF9ED6A44F68FD093DE69B93B4EA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
Manifest number: 07FF
Signing time: Mon 04 Aug 2025 02:01:05 +0000
Manifest this update: Mon 04 Aug 2025 02:01:05 +0000
Manifest next update: Tue 05 Aug 2025 02:01:05 +0000
Files and hashes: 1: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl (hash: WxZP4CaL7qUpZH/qfurXOzlmlCjx3PlnDsBZdx3jMcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:9e:d6:a4:4f:68:fd:09:3d:e6:9b:93:b4:ea:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Validity
Not Before: Aug 4 02:01:05 2025 GMT
Not After : Aug 5 02:01:05 2025 GMT
Subject: CN=18b5775e50ef431fcecd16ea61c462332a28ef47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:af:00:b0:df:fb:99:7a:3f:a1:4b:8d:7b:0c:
2c:de:f4:d9:a5:f7:6b:3a:91:0a:0f:3e:ee:c0:fa:
d6:c4:94:7e:83:ba:db:6b:e4:91:ab:cc:8f:a9:3a:
bb:58:10:3a:08:f7:e0:4c:3a:d5:aa:de:ba:30:65:
ab:2e:c6:50:5c:8d:b2:13:39:81:66:37:47:00:e5:
cf:77:d5:8c:f9:f8:07:e2:3f:04:8c:f6:9f:2d:4e:
be:d8:8d:19:cd:37:8e:0d:83:b7:43:40:66:7d:67:
63:5a:b4:1a:c9:68:33:96:bf:56:2e:86:96:02:97:
33:cf:dd:bf:65:48:c6:d0:e0:9d:e0:4a:05:e6:e6:
47:bf:44:9f:04:ee:82:0d:40:46:cf:04:fe:14:2d:
bb:11:ae:0f:fd:ec:40:70:de:fa:bb:74:75:7c:94:
37:70:f1:3b:bf:67:da:2d:e5:a5:8c:09:02:ed:2b:
5e:93:af:cf:71:fe:19:cd:6e:05:f3:b0:16:4b:a9:
e9:e7:a7:93:08:d4:5f:6d:de:dc:42:bc:aa:5c:18:
e1:ee:80:9c:2e:0e:a2:ae:45:a2:b2:ca:1b:40:56:
95:71:85:32:69:fc:c8:ec:d3:9b:33:1f:d9:5a:a5:
95:27:83:f1:32:03:6f:1a:a8:d0:24:49:3b:be:b6:
e0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B5:77:5E:50:EF:43:1F:CE:CD:16:EA:61:C4:62:33:2A:28:EF:47
X509v3 Authority Key Identifier:
keyid:6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6d:df:a7:4a:fe:ea:ab:9f:d7:19:bd:fd:52:af:12:9d:ef:
89:f5:96:bf:48:a7:a7:8d:20:50:7e:c5:53:ba:5e:65:91:e8:
12:64:f2:24:f8:8d:aa:f9:d3:80:eb:6c:41:d2:b4:82:04:0a:
ff:46:a8:7f:1a:dc:78:7a:e4:2a:b5:77:92:e0:43:ee:e4:39:
02:cb:e0:29:ae:ec:a6:4d:33:32:30:64:fa:84:96:17:2a:70:
c5:f3:ea:f7:7f:9d:4a:98:a9:8f:e7:a9:ed:0e:e8:a1:00:aa:
0a:ac:bd:de:12:04:7a:77:6e:27:4d:e3:6e:61:e7:ea:6b:87:
c5:df:b8:71:0d:07:fd:7c:d2:fe:da:bf:28:d5:e6:9d:21:a2:
bb:ec:e6:f5:a7:df:31:16:80:d3:41:df:ae:8e:86:d5:20:2e:
4c:b3:cc:25:fd:72:98:f6:e8:f5:ca:c6:cd:bc:98:09:52:86:
06:ce:91:db:e0:d9:92:15:37:4e:d0:2a:cd:3b:a9:78:d0:a1:
ba:5f:86:a8:f9:16:2b:54:03:dd:f8:39:67:04:b8:40:2c:44:
a2:42:16:f0:f0:38:6d:0c:f5:29:e0:47:cb:67:20:2d:3f:e6:
52:f8:b2:a1:47:07:b4:bb:32:14:14:b4:89:8e:17:aa:55:43:
d1:cf:f0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:05 2025 by rpki-client