Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
File: _BfLzO42sk7L1GP30QKrxP5A4U0.mft (raw, json)
Hash identifier: 7RwSw+pMZKVKm3bHCUx0HSxfjCP3q4za36HSPBQNkrg=
Subject key identifier: FA:13:2F:82:98:A4:B9:50:64:EE:97:36:13:E5:5A:92:53:8A:B2:65
Authority key identifier: FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
Certificate issuer: /CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Certificate serial: 0197B6A1423CEFDC24DCE2884F909464E395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
Manifest number: 12B8
Signing time: Sat 28 Jun 2025 13:01:50 +0000
Manifest this update: Sat 28 Jun 2025 13:01:50 +0000
Manifest next update: Sun 29 Jun 2025 13:01:50 +0000
Files and hashes: 1: _BfLzO42sk7L1GP30QKrxP5A4U0.crl (hash: iYqntHm6wXZRo7AXSKBocYUfvqBScYevG4q14urMZbw=)
2: tJwISkQYqLHEilM1B5xtrHKBtrs.roa (hash: QQm9O9ciyqlGIn1eEAWaXdioEbF5c6krD1izvlymivs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:42:3c:ef:dc:24:dc:e2:88:4f:90:94:64:e3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Validity
Not Before: Jun 28 13:01:50 2025 GMT
Not After : Jun 29 13:01:50 2025 GMT
Subject: CN=fa132f8298a4b95064ee973613e55a92538ab265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9b:04:17:ec:58:f9:16:18:c2:2a:a3:ce:b1:
91:a3:af:e2:7e:8f:a0:5d:9c:7b:28:2f:be:4a:5e:
17:0c:af:e4:da:3b:6e:c1:a8:39:7f:90:3f:ee:c8:
5d:d6:b4:21:07:5a:07:97:d2:b7:8b:c1:53:ed:ac:
92:6d:78:82:c0:fd:a1:b2:37:97:ca:7d:4e:6f:a9:
ae:77:da:a5:3b:44:57:1b:5f:fe:09:e1:a0:5d:75:
1e:9b:c6:96:6e:aa:54:9d:45:85:7a:6e:af:3e:13:
91:be:fb:c2:71:66:09:db:b7:85:b5:ef:95:ad:7a:
60:7b:e8:e4:fa:2d:88:77:90:7f:4a:b8:fb:c9:4d:
a4:79:d7:b5:c7:26:d2:f3:84:3d:f9:e4:51:2f:ba:
ee:40:ba:e2:3c:be:cb:7d:bb:a9:19:5a:73:9d:a5:
47:aa:e5:82:ac:3a:1f:a2:1a:7f:38:88:97:fe:65:
12:3a:27:20:e7:1c:6f:c1:b2:ab:6a:6c:88:0a:4c:
53:92:c1:6e:74:83:6b:e7:d8:91:38:68:ed:14:a1:
aa:7b:80:b2:a7:c1:a0:98:91:27:cd:d9:28:6d:9b:
19:c0:5b:53:ee:27:26:b8:b8:86:be:1f:d1:9c:44:
ed:96:f2:6e:f8:fd:6a:12:b5:cc:c4:d0:f3:4f:40:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:13:2F:82:98:A4:B9:50:64:EE:97:36:13:E5:5A:92:53:8A:B2:65
X509v3 Authority Key Identifier:
keyid:FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6d:e0:40:00:0e:4f:fd:c1:08:1d:90:9c:25:3f:0f:c2:76:
d5:41:28:1a:30:3a:c5:70:8a:61:7a:f2:83:d0:e7:4e:07:e2:
e9:d9:93:64:10:ca:26:26:8b:3a:a7:5f:ba:ca:d5:4f:27:ef:
39:37:2b:48:ea:87:15:b9:f1:59:c3:1d:87:87:38:70:1f:fd:
45:20:36:d6:d4:31:5b:58:de:a7:2c:d3:30:fe:5c:91:08:24:
57:d0:db:86:d4:8b:85:d3:56:1b:5d:a7:9c:c8:1a:af:e3:17:
16:1e:e0:f5:82:0f:cd:ec:f6:70:71:6c:8d:e0:1c:8a:62:dc:
e3:e5:1c:08:04:38:3c:cc:e8:68:8f:cf:40:ea:0f:74:4d:19:
10:2f:69:af:0c:3b:0f:8a:fa:2d:22:8f:fd:66:0d:b7:41:96:
64:b6:5e:d1:cc:ae:2f:88:49:27:72:5a:0f:c9:9e:ec:b5:22:
2e:2f:69:6b:fa:7e:3a:f4:56:0c:6f:44:72:41:74:85:6c:9c:
7a:80:ba:98:73:0a:d5:8e:4d:38:ee:7c:84:85:e4:f0:13:8a:
13:d8:be:b7:17:64:f6:3a:26:57:e0:15:7d:94:70:0c:d4:fa:
4d:62:16:d5:30:53:14:26:31:a5:78:0a:c1:b0:77:b3:1e:1a:
79:33:5c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:43 2025 by rpki-client