Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
File: bfpKH_x0mxxPo7bagZttu5rohaA.mft (raw, json)
Hash identifier: kp6RgLPFLoljBK0p/u0CiU/PEdCrnAMFpyOdxcjtSgw=
Subject key identifier: 76:C9:DC:A2:2E:5C:89:41:0B:43:D4:48:E4:7E:DE:05:95:8C:56:40
Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Certificate serial: 0198A04ECF4922E91D570E95E7097DC77CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
Manifest number: 1632
Signing time: Tue 12 Aug 2025 22:02:56 +0000
Manifest this update: Tue 12 Aug 2025 22:02:56 +0000
Manifest next update: Wed 13 Aug 2025 22:02:56 +0000
Files and hashes: 1: bfpKH_x0mxxPo7bagZttu5rohaA.crl (hash: 7qH5ilcpbZpQimsyzim4L+RnS5sjt3O/X+1A1ijH+9Q=)
2: dwh4D1mLE-BJM3O3JRIbCS8CiAE.roa (hash: 0ebutZnVkcZLLmshdUGZMamHfBLJzhHs685jtIwVRjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:cf:49:22:e9:1d:57:0e:95:e7:09:7d:c7:7c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Validity
Not Before: Aug 12 22:02:56 2025 GMT
Not After : Aug 13 22:02:56 2025 GMT
Subject: CN=76c9dca22e5c89410b43d448e47ede05958c5640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:21:e1:e7:08:58:7d:bc:18:09:f1:21:d1:
74:1a:db:e0:dd:74:11:09:dc:4d:23:0a:aa:b7:2d:
73:a0:c5:c7:a1:61:fa:00:fc:9d:a9:1c:03:02:a0:
03:23:b5:ff:17:c5:ed:9a:3c:b2:c4:f6:17:26:23:
55:e8:e3:d7:f0:99:28:43:40:ca:e4:24:e5:4b:77:
1e:1e:27:8b:5b:93:ea:b2:00:41:8c:dc:d7:03:3c:
d8:a6:9b:c6:e9:03:9d:b9:38:11:ee:9e:24:20:57:
aa:b5:a5:ee:40:b7:a2:3b:58:ba:20:cf:ef:4d:0e:
f5:b6:0c:43:82:5a:0f:8c:95:ac:8b:53:db:53:bd:
5b:ea:f2:a3:4c:e8:ba:19:a0:31:8a:e9:16:0a:38:
96:69:f6:ee:03:fd:da:dc:cd:d6:d5:af:ee:94:42:
60:8b:e9:9d:dc:cf:a0:43:f7:57:0a:2d:e7:cf:66:
7b:09:6d:6a:c6:d5:25:a7:55:f4:bd:7e:9c:70:44:
75:b9:98:a0:91:9b:df:8c:f9:12:45:7e:7b:64:cd:
75:8f:59:8a:0a:2f:55:52:92:af:98:8f:6b:b9:13:
5d:20:9c:07:86:85:f3:60:a2:45:a7:d5:05:f2:a3:
e5:34:d1:3c:d3:5c:fb:4e:80:88:82:b5:a6:43:01:
55:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C9:DC:A2:2E:5C:89:41:0B:43:D4:48:E4:7E:DE:05:95:8C:56:40
X509v3 Authority Key Identifier:
keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:31:7c:dd:9f:8c:08:87:7c:f0:6b:db:7b:18:30:62:32:01:
06:73:a9:b0:9b:e1:72:b2:43:d2:2b:21:ce:8f:3b:9f:ee:b5:
b4:f0:ef:7a:d0:8c:84:70:6e:49:14:7f:1d:76:5c:17:98:a0:
4f:b1:d3:35:15:0c:bd:53:25:ec:3a:4d:40:c4:31:9d:40:0c:
52:a7:6e:83:0b:55:7c:c6:53:61:8c:27:44:ea:88:df:71:a1:
55:b9:44:01:07:01:70:9b:5c:d9:57:34:1e:2f:e2:87:ec:14:
3a:3d:78:9b:f2:38:dc:12:56:e9:e1:a6:f6:89:17:56:ed:d4:
7d:8e:35:60:ae:5d:7f:73:92:9d:90:24:1f:74:78:32:95:f7:
cb:68:3f:16:77:0c:47:13:8d:93:6c:f3:23:31:6a:bc:63:7c:
6c:88:bc:99:03:08:74:40:eb:8b:d8:43:23:7c:24:40:36:5b:
b8:fb:31:da:09:65:c0:ea:70:ca:1c:f8:da:96:34:4b:f8:c0:
10:c9:54:c9:3d:8f:77:c4:5a:6b:c0:b1:37:ef:4f:ff:17:fb:
72:60:e7:a4:9a:1d:98:70:18:d0:f7:a9:db:75:94:47:dc:bd:
27:17:16:ea:68:20:ca:5f:85:c5:2b:5d:2f:3c:ee:b7:46:ae:
26:bd:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:23:58 2025 by rpki-client