Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
File: _BfLzO42sk7L1GP30QKrxP5A4U0.mft (raw, json)
Hash identifier: ocOwyhFnR6aMtOQOXpjmBJlBPnHF2qWBOCUiWV925h4=
Subject key identifier: AF:3F:EE:DC:59:C5:A0:8E:8A:08:E6:C3:CD:42:DE:F4:C9:9D:5B:01
Authority key identifier: FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
Certificate issuer: /CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Certificate serial: 0196AFFC0EF72043DDCC23253D1996BE3E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
Manifest number: 1230
Signing time: Thu 08 May 2025 13:00:53 +0000
Manifest this update: Thu 08 May 2025 13:00:53 +0000
Manifest next update: Fri 09 May 2025 13:00:53 +0000
Files and hashes: 1: _BfLzO42sk7L1GP30QKrxP5A4U0.crl (hash: Oyb49PlN+7dUhm8gvozNRaj9EOS3MnmxDuKgpkie75E=)
2: tJwISkQYqLHEilM1B5xtrHKBtrs.roa (hash: QQm9O9ciyqlGIn1eEAWaXdioEbF5c6krD1izvlymivs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:0e:f7:20:43:dd:cc:23:25:3d:19:96:be:3e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Validity
Not Before: May 8 13:00:53 2025 GMT
Not After : May 9 13:00:53 2025 GMT
Subject: CN=af3feedc59c5a08e8a08e6c3cd42def4c99d5b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ae:95:a5:63:58:46:e9:21:49:53:54:6b:f8:
df:7a:89:70:01:66:5f:c0:00:cf:69:4f:39:13:3c:
2c:a1:44:30:33:57:2e:6c:36:bb:f5:f5:05:09:46:
27:ef:4b:44:6f:e4:b3:52:40:73:9e:ab:56:cb:e2:
69:2b:c0:50:83:14:10:0a:26:b7:19:75:19:49:09:
71:8d:e0:ef:03:70:3f:95:18:99:98:73:7c:af:27:
7f:8c:bc:9e:b6:7b:6f:f0:a6:f4:b6:f2:94:c2:a2:
24:86:72:9a:88:da:80:97:33:60:74:f5:c2:4a:b4:
f9:fb:2c:e2:78:47:36:d1:45:00:84:17:f0:10:66:
3e:a5:67:92:3f:80:a6:6a:c6:33:12:19:1a:9f:fb:
7b:07:7a:70:9e:04:dc:eb:64:96:2b:21:3b:46:fd:
90:63:78:4d:b9:01:8d:fa:fa:d5:22:cd:f6:77:89:
74:18:fb:7b:8c:b8:51:01:3d:74:cb:ab:41:94:dd:
c8:d4:d1:94:51:57:91:15:03:25:42:a3:b8:91:fa:
b2:fd:a9:89:06:3b:2c:05:4f:4e:ae:75:c8:79:b3:
35:96:31:4c:df:6f:87:28:32:30:ca:bc:8d:c2:a7:
5d:3d:bf:3e:de:1f:d5:f0:d6:26:7d:44:2e:98:ed:
5e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3F:EE:DC:59:C5:A0:8E:8A:08:E6:C3:CD:42:DE:F4:C9:9D:5B:01
X509v3 Authority Key Identifier:
keyid:FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b1:95:ac:a3:80:ab:6e:e0:d2:28:26:8d:45:7a:2f:65:3d:
a8:00:9a:0f:33:1e:f2:f7:30:5f:1a:20:29:6d:0d:5f:58:e6:
fb:e3:35:b9:c0:30:f2:73:4f:df:47:03:7f:e6:8b:8e:b6:75:
60:3c:0a:22:9c:bb:a8:fb:e3:3b:20:c1:d9:15:c5:2b:af:71:
d4:18:f2:c4:45:e2:bb:bb:c8:86:4d:7a:92:6f:3a:80:ee:03:
a9:76:f9:85:ff:75:43:59:ab:e3:b0:18:66:93:af:24:a9:13:
9e:ca:47:61:d0:83:91:64:a5:a8:22:99:19:d9:05:08:fa:12:
22:d1:52:9a:ad:65:18:01:f3:df:14:29:e8:9a:97:06:f4:85:
39:57:98:cb:8b:a3:9a:ac:15:c4:6b:0a:66:35:60:80:ac:20:
89:ed:8b:24:01:e4:3b:df:5a:45:fa:03:94:a9:8e:ee:eb:53:
eb:a9:53:91:d8:12:49:0e:8f:af:e1:d6:db:1a:a5:74:00:19:
08:86:02:3f:1e:57:25:fa:e6:2a:96:c9:0c:4d:f3:d7:72:a2:
0a:b3:27:ad:6a:b9:ec:f0:b8:9b:1d:60:fc:6c:89:6c:17:bb:
1e:14:92:cd:3b:61:75:4d:88:39:0b:cd:f8:a1:9a:db:df:ad:
d6:d0:ee:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:49:05 2025 by rpki-client