Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
File: bfwUOO4IFam_i3P5p87QlPIax54.mft (raw, json)
Hash identifier: 8HyzwZkZvrKklsL3iOLIAyi/1k3EHKdRKUmGTUP9JkI=
Subject key identifier: A2:17:DE:C3:F4:20:BC:4E:B7:41:9B:67:E7:D0:A4:C1:A0:C4:5E:F7
Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
Certificate issuer: /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Certificate serial: 01969CAC1BAE624E180448971A17E117F2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
Manifest number: 0873
Signing time: Sun 04 May 2025 19:00:46 +0000
Manifest this update: Sun 04 May 2025 19:00:46 +0000
Manifest next update: Mon 05 May 2025 19:00:46 +0000
Files and hashes: 1: D9a5tzSXaB3YCXB51ESBfxmocyM.roa (hash: PgS49lglth99HhTvLssigXqfh7TfLNAP1ou+sfSqOKE=)
2: UBhFR3OZMj_R8VlXXyVrvKRDJfU.roa (hash: rvFp0ktgwJ1/3eTonU7/7v6UyJ5UYW+gGNm92KfeHQY=)
3: bfwUOO4IFam_i3P5p87QlPIax54.crl (hash: cysa5uL/LEJuQ4dZ0SbsktvqmwghMwg4fzjL3Ops4W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ac:1b:ae:62:4e:18:04:48:97:1a:17:e1:17:f2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Validity
Not Before: May 4 19:00:46 2025 GMT
Not After : May 5 19:00:46 2025 GMT
Subject: CN=a217dec3f420bc4eb7419b67e7d0a4c1a0c45ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:32:e8:c9:89:a8:54:c2:74:97:36:7a:97:
2a:02:30:e6:4e:a6:74:b7:e8:85:0d:e4:27:e6:69:
09:72:41:20:8e:42:48:70:5d:de:82:53:a9:e4:b6:
59:23:15:c1:a3:46:e5:35:e1:6b:44:f8:7d:6e:a0:
11:88:49:3a:9d:5f:08:f1:e4:2c:99:8b:fe:ef:fc:
8e:24:93:c8:fd:85:05:01:7e:ae:d6:6d:6a:09:cf:
2a:4a:06:a9:c4:6d:79:de:ba:0f:6f:18:7c:89:71:
ef:3b:76:0c:2f:6a:c0:7d:7e:69:c1:f5:f3:33:75:
70:da:04:cc:c7:16:c7:1a:f4:88:3f:09:75:6c:1c:
06:86:fd:71:52:03:ab:0f:ee:9a:14:1d:e1:1c:12:
61:a8:b4:9f:77:8a:c6:9e:1e:0a:66:53:92:ca:04:
2d:00:fd:95:71:b1:e0:e0:7d:1b:a0:33:16:9a:e2:
d7:f1:ca:7e:aa:1d:96:f2:ec:65:33:1e:39:5e:69:
a3:ea:96:73:b0:4e:bb:5a:c0:a5:0f:08:8a:16:38:
fb:c2:00:51:86:60:c2:f9:1f:15:4e:df:d6:50:b3:
93:0c:40:fb:62:51:7d:b9:68:f6:b4:a3:e4:9c:98:
01:bf:ae:82:65:18:9e:fe:c2:d4:da:41:0f:09:52:
c7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:17:DE:C3:F4:20:BC:4E:B7:41:9B:67:E7:D0:A4:C1:A0:C4:5E:F7
X509v3 Authority Key Identifier:
keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b3:15:b2:21:1d:c3:32:f2:4e:e7:72:0f:7d:52:7d:49:a2:
1d:0d:49:6a:9d:94:3a:f1:27:7f:f2:7d:8b:6d:cc:4f:13:f6:
78:57:8f:7d:40:ad:7e:a2:03:9a:cb:e5:b7:18:8a:f0:5b:1b:
04:4e:40:8d:e9:ed:b9:6f:83:8b:3d:c1:82:e4:ff:72:74:b4:
9f:ce:87:4d:bb:f7:5e:de:f2:c7:c7:79:21:7f:c2:c0:95:66:
2c:6e:3a:d8:ff:30:60:7c:31:df:70:39:8a:3c:d0:0e:55:f4:
17:ba:6d:c9:32:c3:32:a9:c5:80:ed:18:88:85:ca:a3:54:8f:
88:7c:49:38:54:26:62:3b:16:77:06:aa:3c:19:ff:4c:ea:5a:
d7:ae:2f:a7:54:d8:ec:d3:0c:51:b7:5b:ec:5b:96:59:48:c2:
76:2c:d0:11:74:dd:79:2c:42:99:0b:22:8b:11:d6:8d:88:fa:
3d:2d:97:0e:bc:66:58:fb:46:57:6f:cc:b2:d6:b1:d4:a6:93:
d4:46:cd:fd:12:dd:9b:e4:e6:4c:ca:fb:de:aa:1c:bb:95:7c:
82:a7:7d:67:02:1f:5c:1b:bb:5e:5d:7b:03:9e:ec:8a:10:fc:
26:21:f4:a1:66:3d:b3:f7:7a:40:94:00:6b:46:47:50:4e:5b:
5a:10:4f:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZacrBuuYk4YBEiXGhfhF/LRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmMxNDM4ZWUwODE1YTliZjhiNzNmOWE3Y2VkMDk0ZjIx
YWM3OWUwHhcNMjUwNTA0MTkwMDQ2WhcNMjUwNTA1MTkwMDQ2WjAzMTEwLwYDVQQD
EyhhMjE3ZGVjM2Y0MjBiYzRlYjc0MTliNjdlN2QwYTRjMWEwYzQ1ZWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJUy6MmJqFTCdJc2epcqAjDmTqZ0
t+iFDeQn5mkJckEgjkJIcF3eglOp5LZZIxXBo0blNeFrRPh9bqARiEk6nV8I8eQs
mYv+7/yOJJPI/YUFAX6u1m1qCc8qSgapxG153roPbxh8iXHvO3YML2rAfX5pwfXz
M3Vw2gTMxxbHGvSIPwl1bBwGhv1xUgOrD+6aFB3hHBJhqLSfd4rGnh4KZlOSygQt
AP2VcbHg4H0boDMWmuLX8cp+qh2W8uxlMx45Xmmj6pZzsE67WsClDwiKFjj7wgBR
hmDC+R8VTt/WULOTDED7YlF9uWj2tKPknJgBv66CZRie/sLU2kEPCVLHAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIX3sP0ILxOt0GbZ+fQpMGgxF73MB8GA1UdIwQY
MBaAFG38FDjuCBWpv4tz+afO0JTyGseeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yZjk4Y2ItNmQ5NC00OGExLThkYmEt
ZDY0Njc2N2M1ZjEzLzEvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8yZjk4Y2ItNmQ5NC00OGExLThkYmEtZDY0Njc2N2M1ZjEz
LzEvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrMVsiEd
wzLyTudyD31SfUmiHQ1Jap2UOvEnf/J9i23MTxP2eFePfUCtfqIDmsvltxiK8Fsb
BE5AjentuW+Diz3BguT/cnS0n86HTbv3Xt7yx8d5IX/CwJVmLG462P8wYHwx33A5
ijzQDlX0F7ptyTLDMqnFgO0YiIXKo1SPiHxJOFQmYjsWdwaqPBn/TOpa164vp1TY
7NMMUbdb7FuWWUjCdizQEXTdeSxCmQsiixHWjYj6PS2XDrxmWPtGV2/Mstax1KaT
1EbN/RLdm+TmTMr73qocu5V8gqd9ZwIfXBu7Xl17A57sihD8JiH0oWY9s/d6QJQA
a0ZHUE5bWhBPyQ==
-----END CERTIFICATE-----
Generated at Mon May 5 03:42:22 2025 by rpki-client