Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
File: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft (raw, json)
Hash identifier: DMyxCFXi5GXz5lSY/IbpDFMhkjxklnIzkwO2Dog0cMU=
Subject key identifier: 8B:3D:7B:0A:85:41:13:A0:30:76:EF:51:9D:E1:8B:83:B0:C8:93:2E
Authority key identifier: 6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
Certificate issuer: /CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Certificate serial: 01969F76603652294864A166D0EA8FCB8DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
Manifest number: 070D
Signing time: Mon 05 May 2025 08:00:57 +0000
Manifest this update: Mon 05 May 2025 08:00:57 +0000
Manifest next update: Tue 06 May 2025 08:00:57 +0000
Files and hashes: 1: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl (hash: 39xzzWZu9viMWFfbMlNpPzfK+8eqDHF+Z7OhjCxthYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:60:36:52:29:48:64:a1:66:d0:ea:8f:cb:8d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Validity
Not Before: May 5 08:00:57 2025 GMT
Not After : May 6 08:00:57 2025 GMT
Subject: CN=8b3d7b0a854113a03076ef519de18b83b0c8932e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:75:ed:9a:85:94:26:95:38:8e:94:71:bb:f7:
9a:bd:df:89:bb:9a:c3:7e:51:1d:31:a6:c1:69:42:
3b:b3:8d:cf:1d:f2:26:88:03:a6:26:df:63:8f:a8:
ea:4d:66:d7:ca:7b:50:e6:dc:37:79:2f:1f:0e:02:
56:31:85:95:4a:32:d1:b3:ea:68:f2:dd:2b:42:20:
0e:64:e7:0e:7e:11:c9:fc:93:44:f1:84:79:df:ee:
ef:e9:02:21:63:8e:9e:72:69:b5:95:ee:4e:27:90:
a8:33:e3:a6:83:0a:1a:2b:6b:1a:25:55:97:72:96:
8b:33:62:c8:f8:f8:06:aa:bd:a6:c6:2a:cb:19:25:
a5:df:65:77:86:a4:11:26:4f:df:b6:a8:f0:7c:7f:
d4:11:14:ec:dc:30:01:88:f5:aa:59:a3:63:12:a1:
40:ff:46:2f:5b:07:f1:0f:8c:64:cd:22:5b:b8:ac:
20:41:1a:26:8f:c3:a5:d4:00:97:be:22:64:62:a2:
81:3b:a9:f9:79:5c:07:b9:49:c0:d9:10:fb:46:4b:
17:9c:5a:e4:c9:66:ca:8b:76:76:c5:c3:23:9a:b4:
39:c4:00:b9:33:e5:ed:19:6b:1a:19:ca:9a:a7:6e:
89:a7:b8:09:66:55:79:05:2d:ad:cb:a7:24:67:1f:
24:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3D:7B:0A:85:41:13:A0:30:76:EF:51:9D:E1:8B:83:B0:C8:93:2E
X509v3 Authority Key Identifier:
keyid:6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a6:b7:e4:71:7c:09:08:44:17:ec:0b:f4:42:11:6d:4e:60:
3d:1a:e4:90:21:2a:01:08:cf:96:8c:7e:1e:f5:7f:a7:50:2d:
68:7d:7f:86:a0:15:ca:78:a3:dd:c4:af:70:f0:31:63:ae:b1:
f3:1b:67:f1:38:5b:a0:4a:cd:40:53:24:62:3a:f3:e8:4f:ee:
b8:c4:3a:6f:c6:67:a3:ea:c9:14:82:f0:31:95:f9:6f:4d:df:
9e:64:11:42:7a:f2:a9:15:a7:49:b3:84:ae:c8:2f:1b:94:87:
fa:fe:a4:9e:14:9a:ed:cf:8a:c5:20:c1:75:32:65:f3:e0:0b:
aa:b8:f8:d6:db:b2:5b:0c:36:28:8a:77:5b:e9:d6:64:95:b2:
8f:60:60:4f:e6:19:af:6c:8d:16:78:27:06:2a:7a:28:7f:d2:
4c:6b:f7:39:d1:43:ce:da:7e:c5:80:77:dd:d8:ab:9c:06:d7:
bc:81:a9:1e:bc:2f:18:ef:7c:d5:cf:05:0e:b6:5c:54:de:ba:
c6:cd:76:89:f6:f0:ca:0b:24:71:2a:6e:8b:22:31:ac:04:79:
98:08:d6:99:cf:c6:35:14:7d:41:cd:76:d7:a9:bb:38:d8:45:
8f:a9:2d:8e:27:8a:76:3d:3f:a0:ae:9e:c6:b8:2e:f9:d7:47:
85:91:12:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:38:13 2025 by rpki-client