Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
File: bf7PoOZpJZXPvqUmYHbo5T79lGE.mft (raw, json)
Hash identifier: 7d2aavA8kCGobLR/1i7YXjvZbz7DorEjcGP3KhqJ8Qc=
Subject key identifier: DB:1F:4B:A4:F7:B0:7A:50:0B:19:DB:AE:8F:99:8C:66:9B:3E:B5:DA
Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Certificate serial: 01987306CB6245AA80525A4CA0897959BB26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
Manifest number: 0EB1
Signing time: Mon 04 Aug 2025 03:01:21 +0000
Manifest this update: Mon 04 Aug 2025 03:01:21 +0000
Manifest next update: Tue 05 Aug 2025 03:01:21 +0000
Files and hashes: 1: 3nKPvfyefhBBthk-LrRdD-jfvW0.roa (hash: 1vR7bznA03xVBTq7D8itXQ6xNZUvjtjklTS5nPcHTr0=)
2: 8JVtNiH742v8cd9f6HB8HsLnHqc.roa (hash: en+F0ICvUKwr0qrq9ILAxUcATJZUAoxaoEpiR8+7A9M=)
3: GzE_PF4lRurN113fXZhaZRzDRYM.roa (hash: b8RRWDnlm3gv9H+fLurnrwDRk5Rn7Ig722jB2SuqPOg=)
4: O1rsJf608w55c6uzax6qELf-V10.roa (hash: eTLBCFWFUORcPgLfQZK3GxMskhs+vxERoSr/SRYqzwQ=)
5: W0ytEpzp3PGLQgQDEe1kmGvhrx8.roa (hash: Rx2fPbh4hFdhpWyNIm7FiwaS49uoStv5r5BjlCfRWrA=)
6: bf7PoOZpJZXPvqUmYHbo5T79lGE.crl (hash: BH4lBt0977iOSUx4HfNivR/3nQHT1BMWBRfYsaHETiQ=)
7: qfLtpL022R2vNSfmfA6qR_jq_6k.roa (hash: 99hvsDHWBX451/OxAu/FvLR5vG5KLyjpmEGTCKGnQ6c=)
8: s5XW1sPa3LVHkVbaHF8KM4lyi3k.roa (hash: kYlioc7r4tkKKuXQwZeSGnhgTGO7wN8mLbsZJSv0XnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:cb:62:45:aa:80:52:5a:4c:a0:89:79:59:bb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Validity
Not Before: Aug 4 03:01:21 2025 GMT
Not After : Aug 5 03:01:21 2025 GMT
Subject: CN=db1f4ba4f7b07a500b19dbae8f998c669b3eb5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:b9:d0:1b:11:51:f1:06:da:22:da:de:5b:
ed:f9:73:49:cc:d7:09:c5:d6:c1:71:66:94:f1:51:
8b:11:29:58:a0:e5:92:62:62:eb:fe:7f:1d:6e:a9:
f7:b1:31:cd:86:04:30:0f:59:7f:0c:58:bf:21:ff:
f9:fc:32:d7:e9:13:9e:46:f0:99:b9:ce:c1:3f:89:
96:53:72:71:89:a6:3a:f7:71:ea:c1:ce:f0:53:2d:
00:91:50:09:ea:d1:27:79:23:85:5f:62:30:14:63:
ed:1c:a9:2a:0f:3a:db:2d:7c:2d:01:ec:e1:8b:bf:
be:17:b8:e0:ef:be:96:ce:85:5f:48:14:1e:6d:33:
1e:3a:59:5d:2f:8f:73:c2:d5:5b:04:5c:b9:81:c8:
46:3d:8f:ac:ad:24:49:41:3e:35:c7:76:cf:ad:64:
a4:6f:3e:a2:e5:ba:19:6a:fd:bf:e3:97:b5:4b:ba:
9a:0c:84:9d:f6:b5:06:9a:0a:69:59:66:95:e0:1b:
87:41:a4:fb:e0:b5:80:a0:bb:72:46:89:d8:ed:73:
af:76:7d:de:27:2b:45:5b:43:ee:f4:ba:1b:e6:04:
fa:93:63:6d:6a:fa:d5:e3:95:58:f5:8f:97:7a:b4:
8f:13:f0:33:61:8a:7c:46:dd:cd:0c:a0:8b:a4:0e:
33:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1F:4B:A4:F7:B0:7A:50:0B:19:DB:AE:8F:99:8C:66:9B:3E:B5:DA
X509v3 Authority Key Identifier:
keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d8:62:59:b3:f2:ad:66:de:d6:fd:d2:56:64:46:34:1e:2b:
b7:f2:80:a8:20:75:fd:8d:fd:01:28:a7:a6:e2:7e:07:4d:69:
b6:f6:c6:3d:f8:a5:0e:db:9f:54:87:da:1b:91:b7:03:e7:77:
e2:ee:5d:2f:77:a5:9d:d0:ba:dc:3a:60:3c:05:73:20:d6:d7:
cc:95:a0:09:b3:30:e9:41:18:d4:61:03:c4:aa:a6:50:dc:0e:
d4:1b:fe:e8:5e:fb:4a:9a:74:80:bd:af:6f:db:60:b1:30:31:
a5:ee:18:9a:83:c1:87:3e:d6:1c:b3:c5:30:5f:76:24:36:cd:
94:81:0e:48:ba:b6:91:d7:72:8c:74:d8:db:85:ca:70:64:28:
4c:02:1e:8b:e7:69:89:85:97:38:c4:42:57:9d:72:08:fd:35:
72:80:23:21:d7:6d:22:3e:af:36:ad:17:bd:18:d3:22:ac:c5:
8f:6d:02:d2:2d:27:64:f1:2a:26:2c:3e:cf:c5:d1:a2:96:c3:
d5:2b:fe:37:52:c2:0c:d5:e3:40:46:c9:ec:a7:ce:9f:0d:46:
fe:95:22:e1:47:c5:e4:1c:d9:e2:12:96:e0:8f:f2:8b:9f:3c:
ea:90:3d:8a:4c:9a:85:03:66:f3:86:06:3c:0b:52:4e:9f:e5:
23:19:bf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:41 2025 by rpki-client