Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json)
Hash identifier: BjnDAELPIc/NbK2d3XQnSAAaeFYSQmxJJDOIjmtpCKM=
Subject key identifier: 51:0B:90:75:E7:87:A1:F5:7A:A2:56:CB:F8:60:2A:79:E7:09:72:CE
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 0197B74541823FC3234AEDBA1D685B7D9E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 16:00:58 +0000
Manifest this update: Sat 28 Jun 2025 16:00:58 +0000
Manifest next update: Sun 29 Jun 2025 16:00:58 +0000
Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: d8sMz+mO8rp53+dMdPcgPCC6u2g1ZCUe1dGpNR/iEfI=)
2: cadUElPbaF409FA_2Wg_Q_GYDPU.roa (hash: NuxwFEiNd/qBOlqeuoFPvUGS7VeCKWQWl9Silhu16kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:41:82:3f:c3:23:4a:ed:ba:1d:68:5b:7d:9e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Jun 28 16:00:58 2025 GMT
Not After : Jun 29 16:00:58 2025 GMT
Subject: CN=510b9075e787a1f57aa256cbf8602a79e70972ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:59:33:70:2b:5f:45:48:1b:e2:a2:b0:5f:
c5:41:ee:f2:05:35:07:bb:17:bd:b4:6f:ca:91:bf:
ca:6b:43:32:e9:4f:11:b8:b5:dc:ef:83:db:0e:78:
66:94:a4:41:44:53:46:76:e4:c0:0d:46:3a:b8:18:
13:e2:5e:3d:3d:e2:82:b2:2a:c0:c7:cf:3d:ba:7e:
52:7d:10:31:7c:47:3e:02:0b:cd:52:13:d0:4e:f8:
55:fd:50:32:dd:08:64:18:fa:77:15:1a:6d:ed:08:
fe:be:ae:97:14:f3:0c:02:df:3e:85:c4:60:6d:62:
84:fc:3f:49:c9:65:76:0e:10:17:a4:15:3a:88:b6:
c7:ef:dd:88:15:40:63:60:65:25:df:ac:3f:74:80:
68:c8:27:04:be:d8:21:a3:04:b4:77:b6:4a:74:03:
1c:e3:80:a2:1a:65:08:17:80:61:2e:c0:8e:0e:e4:
95:31:b8:fa:7a:7e:9a:ef:11:81:08:db:ad:bc:c8:
3d:0d:db:aa:fc:68:12:2c:94:e2:73:73:7f:ae:63:
c9:65:c5:db:38:54:ed:39:c4:ad:0c:e7:1b:91:03:
dc:36:44:b3:de:1e:d1:1b:3f:6c:f5:65:40:46:3d:
df:f2:87:58:1e:1f:a3:50:08:e8:aa:eb:53:97:22:
bc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0B:90:75:E7:87:A1:F5:7A:A2:56:CB:F8:60:2A:79:E7:09:72:CE
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:fb:09:f6:4c:34:16:1d:41:8c:35:62:5d:a2:3b:a3:45:e0:
90:4e:9a:72:1c:36:82:c3:fa:66:58:0b:0e:86:83:25:a3:50:
3e:42:65:59:6f:a5:f8:97:37:e1:1a:ce:4c:82:9b:62:5f:d5:
3a:92:35:c4:0f:e4:b1:99:0c:20:b3:a9:fe:a6:57:7f:44:7d:
5e:bb:74:3e:80:33:f8:85:94:f2:3d:4d:6e:56:a2:9f:a6:0c:
42:3c:8e:cf:4f:3c:98:a0:4f:35:64:6e:26:bd:65:9c:bd:16:
5b:30:36:59:4b:a3:14:9c:70:88:e2:9a:0d:a5:ef:07:35:d6:
b4:80:b8:79:b2:e6:93:53:f2:2d:1e:6d:b6:ab:11:5e:f7:7b:
7f:3f:36:22:1c:de:0b:c4:1a:47:5d:60:29:3a:b8:c4:ad:59:
dd:c0:a5:8e:00:20:be:67:31:9d:bc:f6:77:b9:70:00:e1:ef:
5c:69:ad:fc:84:12:0a:24:87:91:d5:4e:c0:25:88:51:32:d2:
b6:ca:a1:3e:08:82:45:40:4f:3b:f0:ab:dd:74:5b:d9:b0:59:
15:4a:fb:3f:43:01:74:4f:08:15:1f:1d:c9:3e:5b:07:19:74:
d6:e5:2e:da:27:e2:3a:da:c1:27:5c:44:76:89:00:29:e5:9b:
7b:21:f6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:51 2025 by rpki-client