Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
File: bfpKH_x0mxxPo7bagZttu5rohaA.mft (raw, json)
Hash identifier: vGe4DWjjjx0xc7swtyp9X0Da2P8FPLhVisHGiL4ao/o=
Subject key identifier: 91:A5:70:14:6E:39:25:35:BF:D4:B4:67:77:AB:B9:4B:6F:04:1C:86
Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Certificate serial: 0198D66053BA5B321A5254678DC9CF41BF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 10:01:33 +0000
Manifest this update: Sat 23 Aug 2025 10:01:33 +0000
Manifest next update: Sun 24 Aug 2025 10:01:33 +0000
Files and hashes: 1: bfpKH_x0mxxPo7bagZttu5rohaA.crl (hash: F5UTELDLhH9RC8GRVSdfM5D0IOU7RXJTtWf+Wor/9X8=)
2: dwh4D1mLE-BJM3O3JRIbCS8CiAE.roa (hash: 0ebutZnVkcZLLmshdUGZMamHfBLJzhHs685jtIwVRjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:53:ba:5b:32:1a:52:54:67:8d:c9:cf:41:bf:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Validity
Not Before: Aug 23 10:01:33 2025 GMT
Not After : Aug 24 10:01:33 2025 GMT
Subject: CN=91a570146e392535bfd4b46777abb94b6f041c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:07:18:ae:df:f8:79:51:11:87:35:74:d1:
3d:b8:47:8a:8a:a4:91:c6:28:48:bc:a8:ba:0a:7a:
31:f6:33:1f:03:3f:70:a3:52:63:24:5a:d9:59:3a:
50:54:f1:01:83:0c:a3:08:04:33:34:2a:07:45:b7:
bb:a0:52:18:27:7c:98:8c:be:ea:9e:bc:c3:3d:61:
0c:71:da:09:6f:50:72:64:68:6a:9b:e0:9a:73:7b:
3a:26:02:1f:5c:1b:e3:f2:5c:96:af:8c:c1:7f:1e:
b9:a9:f1:6f:0c:23:71:97:b9:77:65:53:82:ae:48:
4a:02:72:31:19:6d:e5:0c:57:78:68:2b:74:04:0d:
4c:97:4e:17:fe:d7:6b:86:00:10:83:e2:3f:40:2f:
f8:4d:e2:4c:a2:9c:79:1c:74:60:8e:6a:93:8b:23:
fe:70:59:e5:a8:82:01:2b:8c:e4:2d:10:5a:32:6e:
53:b7:2f:5d:d6:76:db:9d:fd:de:9e:af:ff:9a:32:
1d:60:df:4b:05:9a:70:da:2f:79:8d:db:c7:14:5d:
16:e3:d8:f0:78:66:47:82:59:ee:26:a4:98:55:7e:
43:1b:e8:08:54:31:ef:26:53:91:be:4b:6e:c2:8b:
01:09:fb:39:e0:63:6f:a0:8c:6b:9b:90:bf:27:fc:
49:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A5:70:14:6E:39:25:35:BF:D4:B4:67:77:AB:B9:4B:6F:04:1C:86
X509v3 Authority Key Identifier:
keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7f:1f:02:0a:38:1b:28:11:6a:dd:be:ce:3b:d8:e5:43:75:
5f:37:0f:b4:b5:2e:91:2a:78:54:fd:c6:3f:a3:ce:67:81:40:
0b:51:68:bc:b1:eb:b5:4a:39:7e:48:09:c0:9c:ac:c2:80:04:
78:64:4d:b7:c7:b5:d9:68:e8:3a:56:8a:2c:4f:b6:f5:51:62:
7a:3c:cf:c4:c9:0d:62:cd:c6:83:b5:2e:05:17:61:7b:cd:bb:
02:71:c7:c8:4e:33:9a:60:8f:5e:e9:ac:e6:7f:a8:90:01:80:
e5:5c:73:10:ef:1b:d6:ec:6c:5f:3e:2f:ca:cf:89:b6:55:08:
d3:00:b5:74:ee:86:a1:f5:5a:40:42:dc:17:e5:da:c7:64:18:
68:f6:d9:8f:68:67:9c:95:b1:fc:e1:d8:f4:dd:ac:48:dc:de:
cb:fd:43:04:71:aa:f6:46:b3:41:cb:83:41:00:c2:4d:e5:72:
3e:69:8d:3e:a0:01:de:d8:4c:a2:c4:41:38:31:dd:47:66:e4:
c6:3e:5e:5e:af:23:08:60:2b:9f:f9:e5:23:35:c9:d5:74:c8:
6f:2c:48:dc:5e:3d:e4:03:d8:9a:12:5d:31:fd:31:7b:9d:60:
62:dc:bc:8d:26:bb:21:17:6e:51:22:7a:df:8c:21:a5:29:fb:
db:84:31:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:20 2025 by rpki-client