Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
File: _BfLzO42sk7L1GP30QKrxP5A4U0.mft (raw, json)
Hash identifier: xrJW3gi7i1F2A0vahSu8TLfe6oFvSyx46R8ekEZfdyM=
Subject key identifier: AA:85:7E:09:00:28:63:9C:7D:D6:DD:1F:D1:54:AC:A7:D5:8B:2E:D6
Authority key identifier: FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
Certificate issuer: /CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Certificate serial: 0198D660A1AACFE2A1357CAA0A676D3AF033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
Manifest number: 134D
Signing time: Sat 23 Aug 2025 10:01:53 +0000
Manifest this update: Sat 23 Aug 2025 10:01:53 +0000
Manifest next update: Sun 24 Aug 2025 10:01:53 +0000
Files and hashes: 1: _BfLzO42sk7L1GP30QKrxP5A4U0.crl (hash: xrs0vfSs3VFk2VrXk6pBfqJ59N6kcxDa/isZB723TCA=)
2: tJwISkQYqLHEilM1B5xtrHKBtrs.roa (hash: QQm9O9ciyqlGIn1eEAWaXdioEbF5c6krD1izvlymivs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a1:aa:cf:e2:a1:35:7c:aa:0a:67:6d:3a:f0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Validity
Not Before: Aug 23 10:01:53 2025 GMT
Not After : Aug 24 10:01:53 2025 GMT
Subject: CN=aa857e090028639c7dd6dd1fd154aca7d58b2ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:11:eb:6d:8a:39:89:28:35:98:95:a5:1b:
4f:2f:90:c3:1c:f6:16:6d:7f:a7:cb:df:3c:8f:a3:
6c:a4:d0:d1:a9:7e:62:6d:ab:f7:22:91:12:bf:54:
20:11:76:35:9c:46:75:d4:fa:25:c5:c1:28:d1:d2:
64:15:a3:80:49:26:c2:cc:fa:76:30:21:59:9b:af:
53:f4:dc:61:08:37:8e:2e:72:64:70:d8:68:31:74:
84:b5:28:99:75:b8:80:ac:e0:d3:e4:a6:29:ee:58:
12:d2:74:36:f7:0e:15:89:7d:c4:47:43:68:6b:76:
7f:6b:df:0d:a5:43:ee:16:c5:5d:25:af:a5:ae:98:
3f:13:22:bc:64:30:90:2f:ef:a5:46:88:4f:e0:fc:
5e:1c:89:8e:b0:2b:d2:d1:2d:79:77:23:b1:74:8a:
30:f3:90:67:f5:8e:6f:09:12:05:88:69:74:4b:bc:
8e:c2:19:c1:90:f6:07:49:d8:23:28:8a:b8:6e:79:
c4:5c:45:da:20:38:16:17:49:92:4c:45:a8:ca:41:
ce:36:72:cb:33:59:c6:fc:20:c5:9e:b9:01:c3:7f:
f7:fb:a4:f0:ca:9c:77:3d:7e:81:fb:e8:e6:4f:4a:
5f:d4:b9:14:08:56:50:60:22:bc:da:0b:40:cb:c9:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:85:7E:09:00:28:63:9C:7D:D6:DD:1F:D1:54:AC:A7:D5:8B:2E:D6
X509v3 Authority Key Identifier:
keyid:FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6d:8e:51:0f:b5:97:c6:0a:d9:4d:38:2d:45:6b:50:2f:a6:
9b:a1:6c:e8:36:c6:9b:00:99:f9:8e:35:09:00:50:29:5a:5b:
72:4a:38:ea:be:16:94:25:74:d8:94:52:60:76:42:cd:17:f0:
1e:b9:f5:d5:66:ef:8b:95:9b:59:43:05:a2:c8:b6:88:59:2c:
f9:00:d6:fa:0c:a1:05:fe:19:02:3b:d6:56:08:bc:0d:b8:1d:
3c:c8:f7:50:01:3e:fb:4e:57:c5:9e:a7:38:aa:e1:2d:67:b4:
10:b8:9e:60:ab:82:bf:91:83:6c:e9:86:69:fb:74:39:be:c2:
e5:40:c1:bb:d5:af:02:71:48:7c:50:da:bf:48:7e:06:62:7f:
aa:e8:46:dd:10:cb:3e:d9:cd:65:bc:e0:70:7f:0c:2a:a6:35:
31:43:88:96:5d:66:a2:fb:a2:ea:47:ea:88:b9:7c:be:e0:91:
e3:30:ba:c8:dc:51:b4:f1:ee:b8:a8:12:89:f1:a1:61:71:f6:
90:a5:f6:2f:9a:0c:e8:f7:81:77:02:98:8f:9e:ea:fd:cf:0e:
74:f9:bb:30:ff:bd:0c:79:d5:47:a9:7c:7e:7f:ca:c7:fb:04:
0d:85:15:e5:2f:66:c4:da:43:98:a3:be:cf:86:57:c4:68:52:
77:01:dc:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYKGqz+KhNXyqCmdtOvAzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTdjYmNjZWUzNmIyNGVjYmQ0NjNmN2QxMDJhYmM0ZmU0
MGUxNGQwHhcNMjUwODIzMTAwMTUzWhcNMjUwODI0MTAwMTUzWjAzMTEwLwYDVQQD
EyhhYTg1N2UwOTAwMjg2MzljN2RkNmRkMWZkMTU0YWNhN2Q1OGIyZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQcR622KOYkoNZiVpRtPL5DDHPYW
bX+ny988j6NspNDRqX5ibav3IpESv1QgEXY1nEZ11PolxcEo0dJkFaOASSbCzPp2
MCFZm69T9NxhCDeOLnJkcNhoMXSEtSiZdbiArODT5KYp7lgS0nQ29w4ViX3ER0No
a3Z/a98NpUPuFsVdJa+lrpg/EyK8ZDCQL++lRohP4PxeHImOsCvS0S15dyOxdIow
85Bn9Y5vCRIFiGl0S7yOwhnBkPYHSdgjKIq4bnnEXEXaIDgWF0mSTEWoykHONnLL
M1nG/CDFnrkBw3/3+6Twypx3PX6B++jmT0pf1LkUCFZQYCK82gtAy8ktawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqFfgkAKGOcfdbdH9FUrKfViy7WMB8GA1UdIwQY
MBaAFPwXy8zuNrJOy9Rj99ECq8T+QOFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JmTHpPNDJzazdMMUdQMzBRS3J4UDVBNFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83ZmQxMmYtYjA1NC00ZGQyLTlkODct
MTM2NTg3NWM3ZTg1LzEvX0JmTHpPNDJzazdMMUdQMzBRS3J4UDVBNFUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83ZmQxMmYtYjA1NC00ZGQyLTlkODctMTM2NTg3NWM3ZTg1
LzEvX0JmTHpPNDJzazdMMUdQMzBRS3J4UDVBNFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVW2OUQ+1
l8YK2U04LUVrUC+mm6Fs6DbGmwCZ+Y41CQBQKVpbcko46r4WlCV02JRSYHZCzRfw
Hrn11Wbvi5WbWUMFosi2iFks+QDW+gyhBf4ZAjvWVgi8DbgdPMj3UAE++05XxZ6n
OKrhLWe0ELieYKuCv5GDbOmGaft0Ob7C5UDBu9WvAnFIfFDav0h+BmJ/quhG3RDL
PtnNZbzgcH8MKqY1MUOIll1movui6kfqiLl8vuCR4zC6yNxRtPHuuKgSifGhYXH2
kKX2L5oM6PeBdwKYj57q/c8OdPm7MP+9DHnVR6l8fn/Kx/sEDYUV5S9mxNpDmKO+
z4ZXxGhSdwHckg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:33:48 2025 by rpki-client