Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
File: bf7PoOZpJZXPvqUmYHbo5T79lGE.mft (raw, json)
Hash identifier: 4z4fvWdcNKY15F5OhDRozu0cA7qvKHS43+G4KlU4nHs=
Subject key identifier: AE:57:5E:87:9C:C6:97:7B:88:A7:30:E7:3B:FF:07:17:2E:61:B9:80
Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Certificate serial: 019681D92F2E2AA68B2B4F8472DC4878FB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
Manifest number: 0DAF
Signing time: Tue 29 Apr 2025 14:00:16 +0000
Manifest this update: Tue 29 Apr 2025 14:00:16 +0000
Manifest next update: Wed 30 Apr 2025 14:00:16 +0000
Files and hashes: 1: 8JVtNiH742v8cd9f6HB8HsLnHqc.roa (hash: en+F0ICvUKwr0qrq9ILAxUcATJZUAoxaoEpiR8+7A9M=)
2: GzE_PF4lRurN113fXZhaZRzDRYM.roa (hash: b8RRWDnlm3gv9H+fLurnrwDRk5Rn7Ig722jB2SuqPOg=)
3: O1rsJf608w55c6uzax6qELf-V10.roa (hash: eTLBCFWFUORcPgLfQZK3GxMskhs+vxERoSr/SRYqzwQ=)
4: W0ytEpzp3PGLQgQDEe1kmGvhrx8.roa (hash: Rx2fPbh4hFdhpWyNIm7FiwaS49uoStv5r5BjlCfRWrA=)
5: bf7PoOZpJZXPvqUmYHbo5T79lGE.crl (hash: wddlRx+3W+wNlWMheQzD51PQg41UJQTbPskoP4cczBc=)
6: qfLtpL022R2vNSfmfA6qR_jq_6k.roa (hash: 99hvsDHWBX451/OxAu/FvLR5vG5KLyjpmEGTCKGnQ6c=)
7: s5XW1sPa3LVHkVbaHF8KM4lyi3k.roa (hash: kYlioc7r4tkKKuXQwZeSGnhgTGO7wN8mLbsZJSv0XnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:2f:2e:2a:a6:8b:2b:4f:84:72:dc:48:78:fb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Validity
Not Before: Apr 29 14:00:16 2025 GMT
Not After : Apr 30 14:00:16 2025 GMT
Subject: CN=ae575e879cc6977b88a730e73bff07172e61b980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:cf:9c:04:85:89:69:0d:b3:0d:3a:81:ad:
ab:17:17:f9:2d:6b:c3:41:e1:8b:94:37:d5:56:e7:
5e:d2:8e:fa:d9:89:6d:84:3f:57:2f:18:1c:83:90:
86:85:4b:07:87:4f:79:a1:d1:97:87:2e:b4:2c:16:
f1:e6:5b:83:42:ea:57:42:87:3f:45:fc:a4:32:47:
87:a8:b0:09:f3:e0:df:e6:1d:11:ef:3a:d7:f4:0a:
17:c4:d2:7b:aa:b0:fe:db:87:1e:0e:8a:ee:02:85:
7e:c0:38:a2:99:7e:bd:6a:f4:d7:f9:8f:89:ca:0a:
44:e7:55:f9:98:0c:6d:99:21:19:de:5c:2e:37:da:
8a:fa:63:44:34:43:e6:bf:1f:40:35:ab:34:87:a0:
35:82:f9:c9:f9:b9:b2:80:c5:d4:2b:a1:e4:1d:dd:
5e:ea:97:ff:57:88:3d:e4:db:83:44:5e:f8:e7:90:
aa:09:f4:ab:80:a3:5e:35:9d:99:b1:60:cb:70:7c:
7e:1a:6f:b7:70:30:71:67:b4:98:aa:85:68:a5:71:
15:64:3d:98:6b:85:cf:16:61:3c:a9:c7:cc:d9:cc:
7e:9f:cb:87:46:40:fc:e9:89:18:8e:68:5f:23:06:
31:e1:b7:46:3e:ff:3c:b1:30:13:bb:48:8f:68:d8:
f6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:57:5E:87:9C:C6:97:7B:88:A7:30:E7:3B:FF:07:17:2E:61:B9:80
X509v3 Authority Key Identifier:
keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7e:cf:bd:96:60:03:4c:3d:e4:64:94:ee:2f:cc:39:c5:25:
3b:c4:b3:c3:24:1a:36:f9:c9:b7:46:12:0a:dd:0f:df:5a:c7:
26:ec:b1:d0:f1:02:c8:49:90:d4:11:49:e3:65:15:03:da:c1:
0a:39:5f:6b:de:e3:39:c5:de:83:ae:20:34:f8:77:6e:9f:85:
6e:3a:4c:97:9e:78:59:75:68:a0:3c:d6:91:0a:b7:bc:11:e5:
1d:aa:36:de:f5:9d:23:a8:0e:e9:97:f4:e6:96:42:fa:e0:e3:
8c:28:d0:ca:68:7c:7d:c0:b6:3f:ff:62:b5:c1:70:9f:b9:d6:
e5:a1:19:a0:d6:4a:ca:27:d3:55:c8:6c:1f:b4:e2:98:65:50:
4f:32:f7:e2:3e:c8:d0:21:d9:8b:78:b6:7d:6a:24:15:71:70:
d8:df:95:a2:38:04:bc:b6:85:cf:66:9a:7f:66:a4:a6:72:26:
c9:ed:d2:29:25:6e:34:b7:fc:88:30:13:61:cb:d2:f7:dd:70:
10:75:6b:4e:ad:a1:cd:06:c7:71:61:85:cd:64:e9:99:9a:1b:
34:8f:c5:7d:1a:66:3f:1e:af:4c:4d:4f:4b:de:4e:5f:c5:06:
05:94:cc:ba:cb:0a:04:5d:87:74:ed:83:a8:a9:2e:cb:bb:e6:
e4:7a:3a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:05:33 2025 by rpki-client