Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
File: bfpKH_x0mxxPo7bagZttu5rohaA.mft (raw, json)
Hash identifier: 7mDW3wDJlezzSolMJMQD4BDvqYjkkV1fk4TihVFdVE0=
Subject key identifier: 0D:9D:49:75:62:11:63:CB:8C:E7:67:D5:CA:35:E1:9A:34:7E:C3:73
Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Certificate serial: 0197D398C8CA755CA8AC57089E67CB9A96C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
Manifest number: 15C8
Signing time: Fri 04 Jul 2025 04:01:34 +0000
Manifest this update: Fri 04 Jul 2025 04:01:34 +0000
Manifest next update: Sat 05 Jul 2025 04:01:34 +0000
Files and hashes: 1: bfpKH_x0mxxPo7bagZttu5rohaA.crl (hash: RC4scSrl4SukL8B/qiUs+pei15bvtI2+8YjUNvhPMI4=)
2: dwh4D1mLE-BJM3O3JRIbCS8CiAE.roa (hash: 0ebutZnVkcZLLmshdUGZMamHfBLJzhHs685jtIwVRjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:98:c8:ca:75:5c:a8:ac:57:08:9e:67:cb:9a:96:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Validity
Not Before: Jul 4 04:01:34 2025 GMT
Not After : Jul 5 04:01:34 2025 GMT
Subject: CN=0d9d4975621163cb8ce767d5ca35e19a347ec373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:a1:50:36:9d:36:17:8f:53:6f:15:e0:6d:
f5:8d:d3:88:38:92:0e:d0:84:fa:df:8e:f9:34:9c:
7d:e6:07:45:b2:30:81:ff:9a:d8:4e:69:72:56:44:
60:9b:ed:f2:5e:66:31:8e:c1:29:0e:7d:dd:25:1a:
ca:be:61:bc:45:42:e2:61:c8:48:52:cd:0d:ad:6a:
28:26:d2:30:81:f5:75:1d:f9:a9:48:4a:71:28:3d:
61:e5:58:18:04:40:2e:41:32:9a:61:17:c7:71:5f:
a3:92:97:9e:30:ab:9c:d4:df:d5:8e:f7:71:cc:7e:
dc:4f:fa:23:82:4f:c3:b5:d4:7c:45:38:47:a3:7b:
2a:ec:47:41:ff:24:c1:12:26:00:a5:43:25:0e:28:
f2:4b:c9:94:6a:0f:e5:2b:8d:d9:f0:e2:e8:15:6f:
f8:ed:dc:10:59:1f:3c:5e:50:3e:84:34:5e:60:bf:
74:19:3a:8d:b0:67:ae:bc:8d:fd:6b:02:f1:2b:18:
13:8a:ed:f4:19:f3:1a:d9:23:ce:90:40:d5:02:03:
09:19:ea:1b:cc:78:16:c6:76:7e:8f:7f:b2:46:17:
bd:c9:15:70:90:fc:e2:b9:6c:a7:9a:e6:33:5f:f3:
8e:cb:0d:13:e3:96:4c:ba:fa:5c:cb:09:ac:6b:c3:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9D:49:75:62:11:63:CB:8C:E7:67:D5:CA:35:E1:9A:34:7E:C3:73
X509v3 Authority Key Identifier:
keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:82:c5:1a:f1:f0:6a:b2:9f:e1:89:35:6e:1a:06:70:a7:0e:
77:96:c1:c9:4b:5e:42:36:34:05:2b:ff:de:2d:b1:34:aa:26:
cf:66:f7:8d:fe:f1:92:5e:47:e8:74:39:2e:02:b8:e2:43:ca:
ca:01:9b:30:a4:55:94:b3:41:e3:bd:b8:61:0e:5a:49:17:c6:
25:16:fb:21:39:52:16:28:7f:98:be:9d:14:33:2f:14:9e:b9:
00:c4:16:0a:cc:c4:20:92:70:ee:d2:73:2b:de:77:c1:71:9c:
91:66:88:28:7a:60:ed:b0:b6:87:ea:10:d0:6a:8c:71:28:8f:
a1:22:39:31:67:82:12:6d:d8:53:71:2e:4c:59:14:76:73:01:
9e:68:0f:4f:e8:f0:5e:0e:1c:03:0c:23:c0:00:a2:02:8a:4a:
14:4f:39:89:f8:58:0d:b6:01:41:cc:e6:87:43:ff:e2:a9:da:
c8:aa:f6:c7:fc:8f:ee:9d:16:73:1c:78:de:55:cc:bd:08:d8:
cf:03:08:17:dc:e1:91:93:7d:e8:e9:04:05:79:58:d5:25:a9:
d3:86:9e:81:e2:f5:6c:e8:51:11:ff:66:42:fd:57:76:ef:ba:
64:0c:75:26:4c:cc:7d:a7:78:02:16:c1:61:17:30:d4:cc:6d:
72:73:13:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfTmMjKdVyorFcInmfLmpbGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmE0YTFmZmM3NDliMWM0ZmEzYjZkYTgxOWI2ZGJiOWFl
ODg1YTAwHhcNMjUwNzA0MDQwMTM0WhcNMjUwNzA1MDQwMTM0WjAzMTEwLwYDVQQD
EygwZDlkNDk3NTYyMTE2M2NiOGNlNzY3ZDVjYTM1ZTE5YTM0N2VjMzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoWhUDadNhePU28V4G31jdOIOJIO
0IT63475NJx95gdFsjCB/5rYTmlyVkRgm+3yXmYxjsEpDn3dJRrKvmG8RULiYchI
Us0NrWooJtIwgfV1HfmpSEpxKD1h5VgYBEAuQTKaYRfHcV+jkpeeMKuc1N/Vjvdx
zH7cT/ojgk/DtdR8RThHo3sq7EdB/yTBEiYApUMlDijyS8mUag/lK43Z8OLoFW/4
7dwQWR88XlA+hDReYL90GTqNsGeuvI39awLxKxgTiu30GfMa2SPOkEDVAgMJGeob
zHgWxnZ+j3+yRhe9yRVwkPziuWynmuYzX/OOyw0T45ZMuvpcywmsa8McAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2dSXViEWPLjOdn1co14Zo0fsNzMB8GA1UdIwQY
MBaAFG36Sh/8dJscT6O22oGbbbua6IWgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9mMmYxYzUtODY2Yy00MmI1LThiNDYt
Mzg2NjlkMWUyMzAxLzEvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9mMmYxYzUtODY2Yy00MmI1LThiNDYtMzg2NjlkMWUyMzAx
LzEvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4LFGvHw
arKf4Yk1bhoGcKcOd5bByUteQjY0BSv/3i2xNKomz2b3jf7xkl5H6HQ5LgK44kPK
ygGbMKRVlLNB4724YQ5aSRfGJRb7ITlSFih/mL6dFDMvFJ65AMQWCszEIJJw7tJz
K953wXGckWaIKHpg7bC2h+oQ0GqMcSiPoSI5MWeCEm3YU3EuTFkUdnMBnmgPT+jw
Xg4cAwwjwACiAopKFE85ifhYDbYBQczmh0P/4qnayKr2x/yP7p0Wcxx43lXMvQjY
zwMIF9zhkZN96OkEBXlY1SWp04aegeL1bOhREf9mQv1Xdu+6ZAx1JkzMfad4AhbB
YRcw1MxtcnMTuA==
-----END CERTIFICATE-----
Generated at Fri Jul 4 06:10:22 2025 by rpki-client