Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
File: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft (raw, json)
Hash identifier: GU0bKzEE9kFr6ladfE2B/HJWp8FB7qVFGpsqDvUDxUk=
Subject key identifier: 42:D8:32:38:A2:67:56:EE:62:66:F1:96:0B:9A:6D:7A:95:C1:E3:EC
Authority key identifier: 6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
Certificate issuer: /CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Certificate serial: 0198D54E6C9EF9074E77E24BAC02121869E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
Manifest number: 0832
Signing time: Sat 23 Aug 2025 05:02:23 +0000
Manifest this update: Sat 23 Aug 2025 05:02:23 +0000
Manifest next update: Sun 24 Aug 2025 05:02:23 +0000
Files and hashes: 1: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl (hash: +YjXA9s9Im3edOIJ++IyGCsTdEOj06hEhcUP1tNvk6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6c:9e:f9:07:4e:77:e2:4b:ac:02:12:18:69:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Validity
Not Before: Aug 23 05:02:23 2025 GMT
Not After : Aug 24 05:02:23 2025 GMT
Subject: CN=42d83238a26756ee6266f1960b9a6d7a95c1e3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:88:8b:77:06:9e:3a:c0:54:9b:85:0c:fd:7d:
17:b3:c5:31:a3:60:d2:70:ad:ea:dd:d7:ae:46:a7:
59:00:83:01:7c:d3:04:db:b0:62:60:08:3e:f4:6e:
a7:97:de:a9:5f:e7:a0:1a:8c:f3:f6:67:c3:f7:36:
73:2f:80:5e:fb:e5:f8:bb:23:5b:d4:05:70:0c:62:
8f:e5:f2:23:e7:fc:32:91:58:ca:db:59:fb:20:a9:
62:5a:62:77:a9:fa:82:ae:56:b2:69:0e:fc:1e:45:
0c:1d:b3:49:62:2d:21:9b:17:81:56:2c:68:81:2e:
1f:74:19:de:a7:80:84:64:7a:8a:fc:6c:b0:fe:99:
87:f3:1b:11:41:8e:46:58:6f:bb:4b:ac:40:eb:c8:
74:9b:11:e1:48:22:3c:b1:c6:d4:0a:89:f4:41:e2:
ac:8d:f6:da:7a:51:62:7c:4f:a3:83:31:35:6f:ee:
18:83:f7:8e:0b:b7:7f:8e:54:21:62:9b:17:57:17:
c7:32:b9:71:cc:84:25:eb:7f:4d:3f:63:1b:18:24:
62:6f:cd:38:4d:97:1f:29:d3:67:7d:c8:5c:56:1b:
c7:19:12:b6:10:7d:69:4c:89:91:4b:eb:7f:71:46:
53:d9:e8:07:f6:80:a7:4f:62:c2:31:41:89:3e:54:
25:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D8:32:38:A2:67:56:EE:62:66:F1:96:0B:9A:6D:7A:95:C1:E3:EC
X509v3 Authority Key Identifier:
keyid:6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:70:6c:a5:d4:b8:d5:48:47:17:df:c0:fe:8c:cc:06:4b:6d:
2a:79:2b:0e:2d:d1:d3:1e:04:a7:5f:48:b3:4a:fa:36:be:a9:
8e:ef:1b:52:d5:e4:c5:ba:22:ef:90:b6:fb:9a:6b:47:5c:0f:
8f:e5:53:37:66:59:c6:ec:08:95:26:9b:29:89:2a:a4:3c:7a:
00:e8:fa:ba:f2:10:6c:e7:e8:b9:bc:d9:3b:c3:a5:1f:94:5c:
c4:03:bc:e9:af:2c:f6:b1:7c:0a:3b:dc:80:60:21:d6:23:6f:
06:29:d2:d2:00:2f:91:d8:95:80:c1:ed:9d:5d:ce:49:9d:a8:
1c:48:d0:72:b6:3b:eb:fa:20:ff:11:81:d9:45:0a:d3:48:57:
09:13:64:da:26:bb:42:bd:42:b1:47:60:b4:58:d7:51:54:bc:
9c:cb:61:99:5b:4d:70:23:38:f0:6e:ce:25:f7:b8:2b:3a:b2:
ea:3a:b1:c1:54:90:a3:ee:a7:87:44:82:a3:05:46:65:af:3a:
b0:f9:5c:dc:66:4e:87:b7:28:41:a6:f9:05:8c:aa:ed:54:0c:
e7:88:d9:7e:fd:0b:fd:e8:cf:72:7d:0e:e2:4d:3a:6b:93:5d:
14:ac:49:a5:71:ca:4a:e2:ab:3b:9f:58:aa:df:f1:06:cd:04:
45:79:ef:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:21 2025 by rpki-client