Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
File: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft (raw, json)
Hash identifier: 8sK+bUWjWmP6w/rrT41yDJBrG/e8vbtELFApDI9ijV0=
Subject key identifier: BD:E7:7A:12:93:D1:3D:1A:E7:00:9C:98:4B:2E:6D:F4:A0:FB:9C:80
Authority key identifier: 6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
Certificate issuer: /CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Certificate serial: 0197B77CA7E1E6A68E0C221F5D760473D366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
Manifest number: 079E
Signing time: Sat 28 Jun 2025 17:01:29 +0000
Manifest this update: Sat 28 Jun 2025 17:01:29 +0000
Manifest next update: Sun 29 Jun 2025 17:01:29 +0000
Files and hashes: 1: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl (hash: iwo7eKcFFE52ANo+K6WGItoGMbeJkA6rVZUFgePWoT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a7:e1:e6:a6:8e:0c:22:1f:5d:76:04:73:d3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Validity
Not Before: Jun 28 17:01:29 2025 GMT
Not After : Jun 29 17:01:29 2025 GMT
Subject: CN=bde77a1293d13d1ae7009c984b2e6df4a0fb9c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:50:4a:32:33:eb:7a:dd:cd:31:17:1f:c0:8d:
fe:1f:15:6a:78:8b:da:13:05:0e:42:5a:dc:94:d9:
bd:08:b1:bd:33:f7:49:ab:2f:86:0f:ff:6a:3d:48:
91:53:fc:25:51:1d:98:47:dd:b8:db:23:55:37:78:
5a:49:28:1f:bf:f7:56:e7:9f:c7:21:58:ac:bd:73:
ce:92:fa:38:3d:a8:d1:84:39:41:9b:d5:3e:86:02:
ba:ed:80:4f:00:63:46:7f:bc:18:a2:56:df:17:95:
34:c8:e9:60:e2:3f:ec:d5:b7:d2:fa:5b:db:33:6b:
68:5d:d5:53:1e:90:aa:cc:75:ef:0e:4a:9a:0c:7c:
d3:4d:13:fd:af:44:ec:d3:5f:94:66:c0:ec:53:41:
9c:c7:d1:06:92:0f:21:b9:d9:91:fb:39:31:99:92:
10:da:ac:bf:2b:c9:96:76:70:2a:17:2d:f7:d8:43:
06:4d:52:6a:83:fc:12:06:87:9d:6d:f4:39:96:53:
4f:ec:b6:6e:91:62:42:b2:74:aa:e7:0d:53:61:d8:
cc:9f:4e:e5:4d:97:7a:b1:0c:80:76:91:72:fd:c5:
ed:f4:ac:7f:11:ab:8b:f2:86:10:4d:9a:cf:97:a8:
8e:6d:12:d3:83:e2:32:9c:2d:23:09:9b:4f:74:91:
a6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E7:7A:12:93:D1:3D:1A:E7:00:9C:98:4B:2E:6D:F4:A0:FB:9C:80
X509v3 Authority Key Identifier:
keyid:6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5c:44:a0:dc:62:0f:18:11:aa:0a:41:53:ea:45:7c:4d:a8:
4a:72:23:c0:00:fd:e0:5d:b5:28:a9:16:a6:61:22:2c:72:62:
7a:02:ca:88:57:c9:a8:b0:b1:6d:47:e3:c3:fc:f8:fd:26:0c:
ae:0d:16:23:6e:9d:92:98:a2:50:da:6e:17:02:cb:60:41:f4:
51:7a:83:fd:ae:da:c3:9f:2b:d2:39:f1:be:e4:0b:ec:89:8b:
0c:d6:ed:5c:b0:1e:e2:2e:36:0b:d1:b7:6d:c3:9f:db:d3:52:
c4:bf:67:e7:77:e3:e1:01:c1:b5:98:51:f2:e9:16:bb:58:56:
cb:7d:f4:0c:27:2f:5e:17:58:ec:ab:f8:a0:78:b0:47:30:3f:
37:06:05:f4:5c:47:e1:e1:38:6e:8e:62:13:a7:1d:77:8a:15:
86:a6:5e:20:f7:46:66:fe:1b:2d:21:57:89:99:14:cf:eb:09:
af:e1:ac:1a:1e:c1:f5:63:88:87:d3:22:e7:da:fd:da:aa:e1:
9e:90:98:ec:97:70:c4:f8:e3:b8:d9:bc:e8:8a:e1:84:81:8a:
7e:d6:f7:4f:cf:e5:65:a5:23:7e:8a:aa:af:93:57:fd:38:f5:
12:2b:af:72:4b:f8:16:ce:71:b1:1f:76:be:97:de:af:06:d7:
57:de:24:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:39 2025 by rpki-client