Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
File: bf7PoOZpJZXPvqUmYHbo5T79lGE.mft (raw, json)
Hash identifier: yR/lRJx3fTpylKciQR5kXZbb2jtuCDWI0nyprou5wEI=
Subject key identifier: 1E:87:C2:53:72:4B:19:89:2D:5B:57:93:1B:BE:21:C1:F6:D6:25:75
Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Certificate serial: 0197B6D788B64D6FDCB65FF8525FD8AED4CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
Manifest number: 0E4F
Signing time: Sat 28 Jun 2025 14:01:07 +0000
Manifest this update: Sat 28 Jun 2025 14:01:07 +0000
Manifest next update: Sun 29 Jun 2025 14:01:07 +0000
Files and hashes: 1: 8JVtNiH742v8cd9f6HB8HsLnHqc.roa (hash: en+F0ICvUKwr0qrq9ILAxUcATJZUAoxaoEpiR8+7A9M=)
2: GzE_PF4lRurN113fXZhaZRzDRYM.roa (hash: b8RRWDnlm3gv9H+fLurnrwDRk5Rn7Ig722jB2SuqPOg=)
3: O1rsJf608w55c6uzax6qELf-V10.roa (hash: eTLBCFWFUORcPgLfQZK3GxMskhs+vxERoSr/SRYqzwQ=)
4: W0ytEpzp3PGLQgQDEe1kmGvhrx8.roa (hash: Rx2fPbh4hFdhpWyNIm7FiwaS49uoStv5r5BjlCfRWrA=)
5: bf7PoOZpJZXPvqUmYHbo5T79lGE.crl (hash: kPp0MbSxDmr04P12eRb+X9w+C7FD4F2mWT8rTiRURb4=)
6: qfLtpL022R2vNSfmfA6qR_jq_6k.roa (hash: 99hvsDHWBX451/OxAu/FvLR5vG5KLyjpmEGTCKGnQ6c=)
7: s5XW1sPa3LVHkVbaHF8KM4lyi3k.roa (hash: kYlioc7r4tkKKuXQwZeSGnhgTGO7wN8mLbsZJSv0XnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:88:b6:4d:6f:dc:b6:5f:f8:52:5f:d8:ae:d4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Validity
Not Before: Jun 28 14:01:07 2025 GMT
Not After : Jun 29 14:01:07 2025 GMT
Subject: CN=1e87c253724b19892d5b57931bbe21c1f6d62575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:26:6d:0d:85:52:a3:37:b7:26:bb:7a:25:
96:73:6e:1c:83:f5:37:87:3a:6d:31:52:85:ce:b1:
fe:58:88:44:c1:20:ce:e6:c9:5b:33:ae:d4:c0:d1:
c1:75:2f:28:06:c6:31:53:55:a1:20:e4:2f:57:72:
11:58:29:9b:37:f4:c2:a4:23:04:04:9a:3b:2a:03:
bc:03:41:91:c5:f6:e2:7b:e9:36:06:7f:bd:0f:25:
d8:ed:e3:4f:05:4f:18:ec:6a:57:16:3c:65:3f:a5:
b5:c0:27:a1:d3:7b:a3:cb:9c:1b:99:f8:f7:6c:35:
ba:21:93:8d:0f:09:9d:6f:01:b6:09:64:ee:66:fb:
19:4b:f1:6d:0e:d4:8c:63:08:79:e6:db:7f:81:b0:
1e:63:38:0b:d3:00:15:a8:a2:e6:30:a9:a1:76:4b:
2b:51:17:fb:89:18:2a:21:51:2f:79:c9:4a:20:7e:
06:e2:d8:14:9c:b8:75:5e:2c:e3:7c:45:b3:b9:64:
3a:97:f1:f9:33:92:2c:64:7b:50:d8:c5:80:27:5c:
d3:f7:87:61:3e:52:7d:41:0d:18:5a:e8:1b:49:72:
1e:ca:ec:8c:80:ca:7c:a7:d6:e2:41:3e:9d:67:9b:
a5:88:ee:40:be:b6:4d:94:17:ec:8a:37:ad:c5:62:
77:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:87:C2:53:72:4B:19:89:2D:5B:57:93:1B:BE:21:C1:F6:D6:25:75
X509v3 Authority Key Identifier:
keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:14:9e:d0:71:e9:ca:8a:25:af:45:3e:f8:79:cb:5f:08:61:
ec:f9:21:41:8b:98:d8:51:d0:47:36:6d:31:65:cb:f5:f2:4d:
d7:42:a8:3d:1b:b2:3a:38:df:d6:24:7d:60:ed:f4:24:36:c0:
5d:56:2b:3e:4e:0e:f2:29:a2:7f:e8:3a:c2:da:e2:36:d9:94:
f8:c5:43:07:16:0c:ee:56:73:5b:2e:6a:c9:26:2f:bb:f4:7e:
1e:1b:3e:33:f4:26:55:89:d3:75:d8:18:37:3f:1d:ba:45:28:
2d:0d:05:a9:c0:60:d6:e9:f6:e1:a7:ce:2e:8d:c4:8f:f9:44:
8a:3a:65:9b:a6:3a:19:56:78:88:5d:09:c6:47:19:65:54:a9:
dd:98:d7:4b:65:4c:c1:68:8f:98:56:38:a6:94:cf:da:0c:2a:
62:02:d2:85:45:bb:2d:d2:94:4f:cd:3f:74:62:e7:ea:e2:aa:
07:e0:f5:0e:5e:f8:8c:4a:f5:9b:0a:62:52:d8:f2:02:e9:b1:
7a:b6:0c:0b:80:1f:0b:b9:41:7a:e8:91:6c:c0:04:f0:fc:c6:
be:68:f3:09:37:f3:08:19:e3:55:36:73:04:38:17:33:86:1d:
ff:0b:8a:0b:df:d5:92:68:7c:7c:f8:db:4a:12:13:32:93:79:
ff:05:de:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe214i2TW/ctl/4Ul/YrtTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmVjZmEwZTY2OTI1OTVjZmJlYTUyNjYwNzZlOGU1M2Vm
ZDk0NjEwHhcNMjUwNjI4MTQwMTA3WhcNMjUwNjI5MTQwMTA3WjAzMTEwLwYDVQQD
EygxZTg3YzI1MzcyNGIxOTg5MmQ1YjU3OTMxYmJlMjFjMWY2ZDYyNTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5MmbQ2FUqM3tya7eiWWc24cg/U3
hzptMVKFzrH+WIhEwSDO5slbM67UwNHBdS8oBsYxU1WhIOQvV3IRWCmbN/TCpCME
BJo7KgO8A0GRxfbie+k2Bn+9DyXY7eNPBU8Y7GpXFjxlP6W1wCeh03ujy5wbmfj3
bDW6IZONDwmdbwG2CWTuZvsZS/FtDtSMYwh55tt/gbAeYzgL0wAVqKLmMKmhdksr
URf7iRgqIVEveclKIH4G4tgUnLh1XizjfEWzuWQ6l/H5M5IsZHtQ2MWAJ1zT94dh
PlJ9QQ0YWugbSXIeyuyMgMp8p9biQT6dZ5uliO5AvrZNlBfsijetxWJ3LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6HwlNySxmJLVtXkxu+IcH21iV1MB8GA1UdIwQY
MBaAFG3+z6DmaSWVz76lJmB26OU+/ZRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt
Zjk4OGQ0OGU1MWU4LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4
LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhSe0HHp
yoolr0U++HnLXwhh7PkhQYuY2FHQRzZtMWXL9fJN10KoPRuyOjjf1iR9YO30JDbA
XVYrPk4O8imif+g6wtriNtmU+MVDBxYM7lZzWy5qySYvu/R+Hhs+M/QmVYnTddgY
Nz8dukUoLQ0FqcBg1un24afOLo3Ej/lEijplm6Y6GVZ4iF0JxkcZZVSp3ZjXS2VM
wWiPmFY4ppTP2gwqYgLShUW7LdKUT80/dGLn6uKqB+D1Dl74jEr1mwpiUtjyAumx
erYMC4AfC7lBeuiRbMAE8PzGvmjzCTfzCBnjVTZzBDgXM4Yd/wuKC9/Vkmh8fPjb
ShITMpN5/wXelg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:25:50 2025 by rpki-client