Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
File: BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json)
Hash identifier: i2ljolC9VdlnE3qT9d3ZePqhfankN7AateyGAWbev94=
Subject key identifier: BD:F9:DA:74:5D:BD:8D:77:A8:28:9A:F4:B6:62:B4:66:DE:6B:0A:9D
Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
Certificate issuer: /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Certificate serial: 0197B6A1FF959427950106256DBC7FC6609F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
Manifest number: 0684
Signing time: Sat 28 Jun 2025 13:02:39 +0000
Manifest this update: Sat 28 Jun 2025 13:02:39 +0000
Manifest next update: Sun 29 Jun 2025 13:02:39 +0000
Files and hashes: 1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: udfMHBwTr6j7rn6ACPO9ti8Fv4JRdhbs6mHjjyA40gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ff:95:94:27:95:01:06:25:6d:bc:7f:c6:60:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Validity
Not Before: Jun 28 13:02:39 2025 GMT
Not After : Jun 29 13:02:39 2025 GMT
Subject: CN=bdf9da745dbd8d77a8289af4b662b466de6b0a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ae:6c:6b:2d:f6:11:c1:f7:3a:8e:a4:28:61:
4d:0b:5f:43:34:f1:ab:7a:12:3b:54:f7:ad:b2:75:
52:0f:6c:a9:10:a1:3a:8a:4f:75:78:33:08:98:1b:
ab:b6:c8:06:48:5b:fd:94:6f:3c:0c:e6:49:4c:76:
c7:6d:73:05:ca:45:13:4d:de:01:96:ea:36:27:6a:
62:5b:90:cf:63:e4:d6:80:28:b7:66:07:fa:b4:93:
bb:a1:e3:7a:9c:9a:f0:59:cb:a9:11:33:1f:c1:b8:
c0:29:cc:30:26:9a:65:a9:05:34:4d:d0:19:c1:d9:
64:09:00:7d:11:93:55:7b:df:f6:85:8d:90:ca:f0:
6d:05:f8:d5:ce:45:e2:31:2b:c8:fa:5a:fb:1c:c3:
e0:21:9f:0a:44:ad:c2:77:b5:aa:ec:50:7a:39:c4:
cd:0d:c1:e8:34:6a:14:3e:61:0d:55:86:d4:34:e7:
a5:ca:f0:94:4c:85:44:51:04:53:84:2c:79:1c:a1:
a0:8b:45:6d:c3:04:64:47:74:4c:ee:3c:91:48:ce:
02:06:f5:9c:24:65:a2:39:e9:9d:f8:44:da:39:7d:
68:09:d4:b5:22:81:dc:74:80:cd:ea:7c:23:0f:63:
f9:1d:57:03:8a:aa:1c:35:9e:f0:ae:35:d1:92:12:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F9:DA:74:5D:BD:8D:77:A8:28:9A:F4:B6:62:B4:66:DE:6B:0A:9D
X509v3 Authority Key Identifier:
keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d0:a9:9a:7f:f6:f4:9f:47:bc:35:18:4e:6c:ee:a2:9e:5f:
06:9c:88:7c:ca:12:36:80:7b:1c:0d:53:e6:2a:cf:bf:29:86:
8c:4a:26:4d:7a:1b:6a:c6:b0:46:3e:a7:a2:9b:c4:f4:0b:04:
45:d1:84:61:b9:10:9d:1f:64:5f:7d:de:5c:6c:a2:4f:6c:08:
74:8b:f6:db:78:ce:e1:a0:68:6b:be:55:4f:7d:d1:5f:0b:6e:
a1:a0:60:9f:be:0d:4b:73:de:1d:28:43:d3:63:c2:a7:45:3e:
b1:2d:7d:ee:84:30:37:1e:da:de:a7:f7:03:95:3e:c1:3a:63:
52:38:0d:42:aa:74:d9:fc:e1:66:42:92:39:0d:fd:7d:55:ac:
6c:d8:08:59:a9:6b:42:1c:00:a7:12:09:48:e7:ac:98:a6:6e:
f0:4c:25:68:f3:45:bb:48:f5:89:06:6d:2a:9a:ce:f2:cd:05:
df:c6:70:62:e4:47:ed:d7:20:9b:74:4c:29:e9:8f:63:cb:38:
c7:7f:67:d9:83:77:c4:62:b8:27:12:ef:66:67:7f:17:c8:bf:
7a:3c:c0:c6:2e:62:d7:c4:91:56:31:fc:ec:a6:2f:45:3c:a8:
8b:29:89:19:62:8f:2f:00:43:7b:65:0b:ea:0c:e5:c1:ad:bb:
ad:e2:f1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:21 2025 by rpki-client