Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
File: bfpKH_x0mxxPo7bagZttu5rohaA.mft (raw, json)
Hash identifier: X9j10t34w7YfcUYfQf1OMxJnTL2GYhLZ+IbsamEgDvQ=
Subject key identifier: 4B:EC:F2:07:1A:84:23:B8:7D:DD:75:89:D0:12:EE:15:85:13:6C:02
Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Certificate serial: 0196B7B5F91974BCDEC732E71F4CBD9F572D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 01:01:18 +0000
Manifest this update: Sat 10 May 2025 01:01:18 +0000
Manifest next update: Sun 11 May 2025 01:01:18 +0000
Files and hashes: 1: bfpKH_x0mxxPo7bagZttu5rohaA.crl (hash: CntfGFw67Q9R9+ad+gDrCyXml6IvwztnYALXuZcHfB8=)
2: dwh4D1mLE-BJM3O3JRIbCS8CiAE.roa (hash: 0ebutZnVkcZLLmshdUGZMamHfBLJzhHs685jtIwVRjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:f9:19:74:bc:de:c7:32:e7:1f:4c:bd:9f:57:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Validity
Not Before: May 10 01:01:18 2025 GMT
Not After : May 11 01:01:18 2025 GMT
Subject: CN=4becf2071a8423b87ddd7589d012ee1585136c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:5f:98:94:8d:3c:b4:ad:0f:c3:90:6d:68:
4f:46:c7:7c:44:32:41:db:72:63:02:2a:5c:d0:c2:
f2:53:9d:94:30:4c:2a:82:2a:48:64:ac:bd:fd:7e:
92:43:f8:e7:87:c0:ab:40:c4:14:10:d4:7d:39:bb:
ee:9e:e1:15:73:54:dd:a3:5d:ed:98:5f:8f:84:6b:
2f:92:8f:6f:15:d6:ed:1e:9b:20:c0:86:8c:da:63:
f5:6c:88:98:49:ba:ec:1f:ee:cc:c6:fa:ac:44:53:
6c:11:4d:20:82:9d:9f:f7:b5:17:e4:49:89:4e:79:
4e:b9:49:07:8c:c1:32:06:91:37:f9:34:e3:4b:79:
a8:5e:d8:ba:fa:56:26:9c:80:21:ba:a0:ff:7b:b2:
9a:04:61:c3:93:62:6e:af:7e:74:f0:76:e2:b7:9e:
45:a1:9a:a1:da:dc:29:cb:ba:f2:72:50:62:85:ba:
4a:9e:37:6d:18:41:0d:68:df:dc:03:a9:ea:77:ed:
1a:b8:b9:93:2e:6c:c7:d1:0f:fc:b0:2c:c8:37:33:
7a:79:e5:b6:59:b8:aa:c9:7b:97:2b:96:05:12:c9:
68:fe:d8:60:9e:45:f7:63:44:64:1d:02:93:54:77:
b3:20:f6:5f:18:42:53:88:28:18:e1:6b:44:31:d0:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EC:F2:07:1A:84:23:B8:7D:DD:75:89:D0:12:EE:15:85:13:6C:02
X509v3 Authority Key Identifier:
keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4f:14:ca:d9:99:78:ba:ef:3e:a1:04:3c:c5:5b:c1:60:9d:
ac:1b:9c:6c:3f:79:ca:52:3e:9d:f4:3e:a4:1b:22:d4:51:16:
c9:96:94:7b:a4:05:31:80:a5:67:7b:40:cb:f1:df:9d:9f:0c:
92:f9:01:a6:f8:75:47:e4:3b:88:9b:53:d1:83:ee:7a:83:91:
bb:83:45:30:04:54:f3:22:25:ce:a4:cd:a2:e4:36:10:fb:ca:
79:b9:46:28:d4:4f:cf:a9:54:13:3c:5e:da:dd:2d:87:fa:9b:
6e:33:34:b7:ba:a5:73:46:fa:43:dd:ba:23:81:a1:8b:40:00:
24:1f:bc:14:25:4e:56:a9:a8:07:60:34:f9:c3:fd:81:f2:62:
f4:fa:6c:f0:2c:35:f3:6d:50:16:74:57:1b:e3:a2:8e:e4:ee:
79:95:0f:46:85:9d:b2:7d:4f:f0:6b:e4:de:a9:ef:c2:75:e6:
b2:fa:d4:8e:e3:7f:87:c0:60:24:5b:f6:49:69:33:5b:02:f9:
7f:9c:69:fb:af:11:b6:8d:07:15:86:6b:2f:27:5f:d8:23:b9:
d3:a9:55:11:e0:75:59:e2:1d:8b:ad:e3:9e:fa:f3:09:3a:bb:
07:01:ad:db:38:e0:c4:9c:76:7c:57:11:dc:48:8c:6a:8e:06:
ac:71:b7:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3tfkZdLzexzLnH0y9n1ctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmE0YTFmZmM3NDliMWM0ZmEzYjZkYTgxOWI2ZGJiOWFl
ODg1YTAwHhcNMjUwNTEwMDEwMTE4WhcNMjUwNTExMDEwMTE4WjAzMTEwLwYDVQQD
Eyg0YmVjZjIwNzFhODQyM2I4N2RkZDc1ODlkMDEyZWUxNTg1MTM2YzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9hfmJSNPLStD8OQbWhPRsd8RDJB
23JjAipc0MLyU52UMEwqgipIZKy9/X6SQ/jnh8CrQMQUENR9ObvunuEVc1Tdo13t
mF+PhGsvko9vFdbtHpsgwIaM2mP1bIiYSbrsH+7MxvqsRFNsEU0ggp2f97UX5EmJ
TnlOuUkHjMEyBpE3+TTjS3moXti6+lYmnIAhuqD/e7KaBGHDk2Jur3508Hbit55F
oZqh2twpy7ryclBihbpKnjdtGEENaN/cA6nqd+0auLmTLmzH0Q/8sCzINzN6eeW2
WbiqyXuXK5YFEslo/thgnkX3Y0RkHQKTVHezIPZfGEJTiCgY4WtEMdBsGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvs8gcahCO4fd11idAS7hWFE2wCMB8GA1UdIwQY
MBaAFG36Sh/8dJscT6O22oGbbbua6IWgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9mMmYxYzUtODY2Yy00MmI1LThiNDYt
Mzg2NjlkMWUyMzAxLzEvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9mMmYxYzUtODY2Yy00MmI1LThiNDYtMzg2NjlkMWUyMzAx
LzEvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmk8UytmZ
eLrvPqEEPMVbwWCdrBucbD95ylI+nfQ+pBsi1FEWyZaUe6QFMYClZ3tAy/HfnZ8M
kvkBpvh1R+Q7iJtT0YPueoORu4NFMARU8yIlzqTNouQ2EPvKeblGKNRPz6lUEzxe
2t0th/qbbjM0t7qlc0b6Q926I4Ghi0AAJB+8FCVOVqmoB2A0+cP9gfJi9Pps8Cw1
821QFnRXG+OijuTueZUPRoWdsn1P8Gvk3qnvwnXmsvrUjuN/h8BgJFv2SWkzWwL5
f5xp+68Rto0HFYZrLydf2CO506lVEeB1WeIdi63jnvrzCTq7BwGt2zjgxJx2fFcR
3EiMao4GrHG3Uw==
-----END CERTIFICATE-----
Generated at Sat May 10 06:57:15 2025 by rpki-client