Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
File: bfwUOO4IFam_i3P5p87QlPIax54.mft (raw, json)
Hash identifier: 2a8RRCknR4ObVS9I7xn0qHfcO+xprWXHwilux0Ge54E=
Subject key identifier: 27:1B:A0:C5:88:03:A4:D7:C7:EA:54:73:0F:AF:0B:53:42:A7:CC:AE
Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
Certificate issuer: /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Certificate serial: 0197B6A18D358A6E665BF9A7BFC011508460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
Manifest number: 0905
Signing time: Sat 28 Jun 2025 13:02:09 +0000
Manifest this update: Sat 28 Jun 2025 13:02:09 +0000
Manifest next update: Sun 29 Jun 2025 13:02:09 +0000
Files and hashes: 1: D9a5tzSXaB3YCXB51ESBfxmocyM.roa (hash: PgS49lglth99HhTvLssigXqfh7TfLNAP1ou+sfSqOKE=)
2: UBhFR3OZMj_R8VlXXyVrvKRDJfU.roa (hash: rvFp0ktgwJ1/3eTonU7/7v6UyJ5UYW+gGNm92KfeHQY=)
3: bfwUOO4IFam_i3P5p87QlPIax54.crl (hash: /Uod5z5o0/YHPuNRv24q9LaZSuR5ck6K++eKKYXZ3/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:8d:35:8a:6e:66:5b:f9:a7:bf:c0:11:50:84:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Validity
Not Before: Jun 28 13:02:09 2025 GMT
Not After : Jun 29 13:02:09 2025 GMT
Subject: CN=271ba0c58803a4d7c7ea54730faf0b5342a7ccae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:01:00:f1:ac:8e:b7:c4:2a:5c:60:20:4c:68:
7c:b3:2b:a2:fa:e1:c1:a3:c5:fb:f9:85:2f:7a:49:
48:c5:6c:bb:26:67:80:d1:87:60:43:f6:d6:22:e7:
6b:30:63:f1:ff:6f:01:02:fc:4e:a6:5b:ab:c3:3d:
77:e4:d2:cc:d5:a3:ed:42:7c:b8:d5:b7:73:95:58:
b7:c0:16:2d:60:e6:6c:db:a9:87:99:d7:e9:a1:7d:
5e:bc:33:da:a7:f7:ba:85:ed:51:10:de:e5:15:16:
6b:8c:eb:85:31:7b:c2:ad:e3:08:28:ba:ba:4e:aa:
5f:24:42:c9:ea:d6:ba:6e:81:75:70:89:2b:26:5a:
1b:be:c9:22:4b:85:76:9b:8c:98:4e:83:63:a4:88:
32:95:2a:c0:e7:53:f3:c3:6a:ed:1c:f9:dc:f2:68:
22:63:8b:64:fd:1f:99:85:a0:0b:1c:27:d0:2c:b1:
7a:fa:b4:38:26:3c:c0:aa:81:1d:d2:1f:4d:dc:c8:
fb:50:2d:d2:58:01:ee:65:ed:23:f6:50:ed:6a:0d:
58:08:a2:ef:50:36:90:1d:0b:26:42:19:55:d9:b3:
0d:08:37:88:55:98:a8:31:f5:eb:53:fe:30:34:d2:
40:45:a7:cb:a5:d0:c0:c6:81:0b:ec:eb:bc:1f:6e:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1B:A0:C5:88:03:A4:D7:C7:EA:54:73:0F:AF:0B:53:42:A7:CC:AE
X509v3 Authority Key Identifier:
keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:bd:35:1b:f2:a3:2f:e1:34:e9:af:08:ad:9e:01:c5:53:02:
05:1f:77:15:a0:86:64:56:2f:ba:e5:73:14:66:75:fb:b3:de:
9d:5b:71:be:25:c5:f3:47:f2:1d:fc:54:9b:3e:c4:29:e3:97:
78:a4:f4:a9:65:d2:81:51:36:4d:f3:35:b5:ab:ae:da:ea:b0:
f5:c7:e2:fb:9c:20:e2:ae:b2:94:6d:52:1a:bd:7a:71:81:bf:
94:2c:3c:46:b0:2f:4d:17:2b:2c:7e:e5:c1:bb:57:e4:51:88:
b9:c4:a4:28:d1:5b:45:2d:ba:90:40:61:27:b5:bf:2b:82:37:
7b:63:3d:6a:1a:4c:41:57:0e:7c:d9:2a:bb:56:0d:66:af:d2:
81:08:c1:40:b7:8d:ed:01:36:71:12:1c:50:f6:70:7a:6c:89:
ab:10:8f:ab:98:a9:d1:ba:f7:77:0c:31:f0:06:7d:6d:75:27:
56:4d:b9:87:70:da:74:31:08:5b:a9:60:a4:ce:ff:1b:3a:d9:
f3:54:38:0a:bc:fc:d1:f8:9b:9c:2b:d7:04:11:c1:af:91:e7:
6e:77:cb:3c:6b:a7:e7:fd:55:c5:98:a5:a6:4d:73:6a:97:50:
9e:1e:92:92:8e:67:7a:d6:72:c2:3a:f1:76:12:e1:48:da:1a:
09:fa:42:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:25:42 2025 by rpki-client