Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
File: bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json)
Hash identifier: V/Co3GB+p9ymFe3moqq2nhpT+lfMdJ2IlHMerRKduPA=
Subject key identifier: 18:DC:6D:33:15:F0:B6:77:3F:70:17:B2:2A:73:3C:44:39:CE:F1:26
Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Certificate issuer: /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Certificate serial: 0196C2393FA6423F0C28EC947E51DF3ED875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
Manifest number: 0FB7
Signing time: Mon 12 May 2025 02:00:53 +0000
Manifest this update: Mon 12 May 2025 02:00:53 +0000
Manifest next update: Tue 13 May 2025 02:00:53 +0000
Files and hashes: 1: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: UORZj1xnKaN/2+TCwsKlDsBVwROCneZfW3YYiLH24K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:3f:a6:42:3f:0c:28:ec:94:7e:51:df:3e:d8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Validity
Not Before: May 12 02:00:53 2025 GMT
Not After : May 13 02:00:53 2025 GMT
Subject: CN=18dc6d3315f0b6773f7017b22a733c4439cef126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:3d:e7:f0:09:c3:e8:6c:92:b0:f8:14:90:
59:ed:df:5c:5a:06:94:41:a1:21:99:c2:b4:7f:86:
14:8d:d2:94:17:92:8d:f4:62:cb:60:f2:c6:d9:25:
93:ab:76:7a:23:4d:04:cb:c4:16:e9:f2:70:1d:7b:
52:4c:9b:c8:01:a3:2e:c6:2d:60:42:89:ff:ef:59:
41:85:e0:46:4c:f9:32:4e:9b:3a:3f:32:9a:5a:db:
b0:3f:9b:a9:52:01:71:4a:b9:6a:fa:d2:89:29:a1:
dd:01:1c:9f:16:eb:68:97:de:8e:b0:6b:02:8b:a3:
59:2b:06:04:ec:b9:80:85:a4:da:6d:5d:2a:23:66:
5c:12:58:8d:2f:7f:4f:e6:08:03:83:10:e6:eb:19:
8c:39:b9:dd:4a:82:0f:fc:e7:49:9c:a1:72:96:8a:
0f:29:d0:cf:84:d6:0c:f7:67:f2:f5:c0:52:9d:4b:
28:e5:be:39:90:71:66:d1:e0:62:87:4e:69:02:4d:
b4:04:b5:7a:34:fd:1e:86:aa:60:7f:98:1e:cc:0d:
07:40:3c:f8:6e:fc:40:a2:99:cf:74:fb:7d:6e:d1:
56:f0:74:fb:a1:27:45:af:c5:51:86:9f:49:99:4c:
a3:a0:48:bc:30:7f:a9:60:0d:5f:73:e1:95:ac:24:
73:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DC:6D:33:15:F0:B6:77:3F:70:17:B2:2A:73:3C:44:39:CE:F1:26
X509v3 Authority Key Identifier:
keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c7:c9:90:c7:27:ff:ec:d0:65:7c:45:03:9f:c7:31:a0:50:
f5:6f:b9:a4:f1:07:d4:6e:2f:51:e4:2c:19:84:2a:de:84:21:
20:4f:f7:61:cb:55:1f:b9:33:18:ae:dd:71:28:f0:7b:63:53:
14:d7:88:85:5c:b0:24:0b:9c:f2:ff:91:42:fb:f0:e7:28:fa:
1a:7e:98:90:29:a4:ef:a7:91:7f:c2:3f:f0:14:40:07:d1:34:
30:1a:3f:83:57:41:d3:29:12:4d:d0:e9:78:c8:7d:a3:1c:7f:
f1:44:51:59:47:b3:af:1f:8e:32:c1:43:54:98:75:41:df:7c:
e0:1e:5f:06:2d:45:aa:b8:f1:5c:28:e4:99:40:22:66:ed:df:
72:c6:0f:1f:05:4a:17:85:dc:b4:d7:09:b2:c7:1c:53:08:f4:
09:7a:70:5f:17:dc:6a:6c:3e:2d:04:4a:f4:b5:d1:a1:93:b9:
a8:f8:f8:15:4d:d7:93:2f:b6:33:f5:b1:3c:84:a9:3e:d3:78:
15:12:f1:25:96:97:81:d0:18:f3:87:0c:09:dc:f1:03:b9:70:
d7:aa:c8:94:b7:20:28:63:87:35:44:06:72:70:88:d7:2b:65:
74:64:b0:a7:68:c9:1f:51:24:b5:cb:1f:0f:62:49:86:fd:f6:
2d:e3:a8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:00:06 2025 by rpki-client