Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
File: BfWa7cKCluKRck95N954jichZAg.mft (raw, json)
Hash identifier: Vlv523N6OAn6nKJjOMjE438XuHZnapStJKbTVIUT2cs=
Subject key identifier: DC:43:F8:6B:FC:36:AF:0C:BC:CE:72:E7:28:E5:72:0A:E4:85:C7:8F
Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
Certificate issuer: /CN=05f59aedc28296e291724f7937de788e27216408
Certificate serial: 01976960C4B297DE7DDD0E444DEDC23FC403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
Manifest number: 14AA
Signing time: Fri 13 Jun 2025 13:00:38 +0000
Manifest this update: Fri 13 Jun 2025 13:00:38 +0000
Manifest next update: Sat 14 Jun 2025 13:00:38 +0000
Files and hashes: 1: BfWa7cKCluKRck95N954jichZAg.crl (hash: gEvLdCw325X2306dzbWgLpwVGjqV3+d+DHevKc3uRJc=)
2: u4-8TJgeQH4fa-D9xZl4ZB3jNoQ.roa (hash: tT+Wu4e7mtchTUuSJdCNjA8Yykw8lNY7Bv1xK7SFPsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:c4:b2:97:de:7d:dd:0e:44:4d:ed:c2:3f:c4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f59aedc28296e291724f7937de788e27216408
Validity
Not Before: Jun 13 13:00:38 2025 GMT
Not After : Jun 14 13:00:38 2025 GMT
Subject: CN=dc43f86bfc36af0cbcce72e728e5720ae485c78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:d3:a3:db:07:1e:5e:7b:79:f0:ec:c2:39:
7b:83:c1:76:ee:14:42:08:1b:6f:b9:9f:38:c8:1f:
39:a8:da:ee:68:98:1f:66:94:ab:74:fc:cd:8e:21:
c9:4f:33:04:11:ea:40:3a:4f:02:2b:eb:e5:cc:26:
5b:3a:cf:40:8b:23:9b:89:1f:a5:5b:09:16:52:27:
54:78:41:4d:ae:f6:85:e8:e8:63:33:a8:55:43:55:
8d:42:3b:d9:74:b2:f5:49:bb:6b:7b:40:bf:ec:a4:
9a:1f:ab:05:90:0f:15:a7:79:d2:15:30:98:a2:8f:
b1:aa:bd:ac:8b:8b:29:9a:0b:5e:dd:a2:d4:8f:cf:
40:a2:f3:04:e8:33:7d:9d:dc:35:40:7a:d3:b7:e9:
7a:92:97:1f:ca:48:57:72:99:78:fe:1e:d3:cd:70:
63:61:e6:aa:c4:d3:99:41:5c:cf:18:2f:f7:9d:f5:
24:49:34:05:de:99:09:fc:2b:d8:37:71:a0:21:b2:
23:53:8c:f4:2d:60:7a:57:20:08:2b:63:32:e0:5c:
13:18:15:fa:8e:cd:7c:7e:a3:4a:b0:d1:0e:31:8c:
fa:c2:85:c4:dc:62:0e:b6:6c:70:0e:fd:64:74:42:
bd:f8:2b:ba:09:71:ba:9f:75:ab:22:5a:1d:de:f3:
bf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:43:F8:6B:FC:36:AF:0C:BC:CE:72:E7:28:E5:72:0A:E4:85:C7:8F
X509v3 Authority Key Identifier:
keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f6:d2:b2:c2:bf:96:bf:6d:42:98:4e:72:42:28:4d:32:5f:
ac:68:97:a4:71:c5:e2:96:ba:ad:0e:57:48:e6:07:20:b4:18:
42:d3:e3:d3:51:22:a4:f3:14:3b:b3:41:a5:b2:5b:2b:80:50:
ca:ff:fc:fe:ea:37:97:5c:8b:c6:9e:50:c8:4c:d6:b6:63:fc:
b3:f2:b4:25:6f:dc:a3:37:38:21:87:ae:d1:82:f2:41:ae:23:
09:61:cc:2d:71:29:18:9a:56:46:f1:8d:ee:ba:5c:8a:ea:d4:
f2:9d:e3:e2:88:5e:81:e0:af:7e:50:02:9a:12:7d:e6:e3:ab:
fb:b8:06:62:f3:01:02:d3:8d:97:ad:df:b8:0d:96:ad:ed:0d:
b4:27:a8:4a:ea:de:96:bf:98:8d:2e:51:42:f7:d1:d5:3c:74:
db:cd:9c:3b:e1:6e:b2:ca:f1:b4:b9:68:71:b3:e6:11:37:af:
62:c1:82:ab:97:0a:76:b0:f7:4f:8c:e2:94:5e:9c:00:4d:44:
90:3a:10:8f:0c:37:a1:81:64:0a:57:58:5c:f1:e0:cb:a4:65:
9b:1c:50:c5:d1:75:c9:62:b2:11:c0:3a:c8:f4:a0:09:3e:4f:
aa:c8:1d:ed:9d:b3:29:d7:da:98:2c:ab:21:cd:45:37:68:ff:
ef:02:c9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:22 2025 by rpki-client