Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
File: bf7PoOZpJZXPvqUmYHbo5T79lGE.mft (raw, json)
Hash identifier: bYYbeGhogR+7Npx0E+10r24paeXnYU8Lqd5/cerqjYo=
Subject key identifier: AA:D8:61:DA:48:6C:75:63:23:DB:0B:9C:36:58:2A:E8:58:88:C9:C9
Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Certificate serial: 0196AE448F69A6CFC2430A50279364B84528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
Manifest number: 0DC6
Signing time: Thu 08 May 2025 05:00:50 +0000
Manifest this update: Thu 08 May 2025 05:00:50 +0000
Manifest next update: Fri 09 May 2025 05:00:50 +0000
Files and hashes: 1: 8JVtNiH742v8cd9f6HB8HsLnHqc.roa (hash: en+F0ICvUKwr0qrq9ILAxUcATJZUAoxaoEpiR8+7A9M=)
2: GzE_PF4lRurN113fXZhaZRzDRYM.roa (hash: b8RRWDnlm3gv9H+fLurnrwDRk5Rn7Ig722jB2SuqPOg=)
3: O1rsJf608w55c6uzax6qELf-V10.roa (hash: eTLBCFWFUORcPgLfQZK3GxMskhs+vxERoSr/SRYqzwQ=)
4: W0ytEpzp3PGLQgQDEe1kmGvhrx8.roa (hash: Rx2fPbh4hFdhpWyNIm7FiwaS49uoStv5r5BjlCfRWrA=)
5: bf7PoOZpJZXPvqUmYHbo5T79lGE.crl (hash: MBsu7DH9BBXJwWX8OYu7OP9b1paSHLY0ytb1e8uj5nQ=)
6: qfLtpL022R2vNSfmfA6qR_jq_6k.roa (hash: 99hvsDHWBX451/OxAu/FvLR5vG5KLyjpmEGTCKGnQ6c=)
7: s5XW1sPa3LVHkVbaHF8KM4lyi3k.roa (hash: kYlioc7r4tkKKuXQwZeSGnhgTGO7wN8mLbsZJSv0XnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:44:8f:69:a6:cf:c2:43:0a:50:27:93:64:b8:45:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Validity
Not Before: May 8 05:00:50 2025 GMT
Not After : May 9 05:00:50 2025 GMT
Subject: CN=aad861da486c756323db0b9c36582ae85888c9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0c:55:24:f6:7f:56:dd:18:51:9b:0f:cd:f5:
ec:9f:6c:05:2f:2e:80:61:ed:bc:fe:b3:3a:f7:d3:
78:4f:71:25:34:d3:93:03:9a:ba:1a:ff:63:e7:93:
a4:59:08:7d:31:5e:52:ab:30:32:d9:66:b2:33:c3:
7f:23:7e:54:a9:e8:02:b8:ed:3a:ce:76:21:4f:66:
67:48:34:72:aa:93:bb:6a:92:91:71:a8:85:96:45:
45:40:0f:59:67:f1:c4:5d:16:c7:eb:f6:18:bd:2d:
f6:69:3d:dc:0c:ac:a3:3a:b0:97:90:7f:4e:8b:5e:
65:b6:99:b9:00:fe:5e:5a:db:08:d3:68:86:5b:52:
de:5d:d5:4f:32:63:3a:9f:e7:76:2a:79:bc:74:52:
f4:21:fe:f9:b0:02:cb:b8:57:9e:c0:30:8f:b8:f5:
a9:e8:04:3f:d6:fb:13:e2:b0:c3:7a:09:ac:fb:fd:
91:0f:09:35:60:31:61:9f:8f:ba:12:54:5a:7f:13:
bc:f9:2e:98:08:11:57:de:f2:1e:02:49:47:9c:f7:
fa:ca:a1:79:54:70:cc:d1:04:63:3e:f7:d8:96:16:
45:03:fe:94:26:bb:cd:67:02:4d:d0:d6:19:71:43:
16:fa:e5:3e:cd:96:df:6a:56:14:63:e1:4f:73:10:
2d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D8:61:DA:48:6C:75:63:23:DB:0B:9C:36:58:2A:E8:58:88:C9:C9
X509v3 Authority Key Identifier:
keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:42:42:8a:b4:07:a0:8f:e2:06:27:0e:52:30:de:c1:95:53:
6d:fc:8f:a3:bd:89:22:1b:b2:11:5d:08:ce:9e:0b:24:29:ac:
64:4f:52:48:a0:04:f0:16:a0:61:f2:3f:c9:25:f9:77:ec:df:
0f:6c:6d:b4:43:66:68:bf:3a:63:bb:3f:bb:c2:3b:4e:06:8d:
f0:6a:b5:69:1b:d4:d4:b8:56:18:04:20:99:ce:6e:e3:8e:37:
28:ea:93:fa:4f:6e:1c:4c:2d:4d:df:e7:c5:d6:a7:36:a7:9f:
3a:43:e5:7e:86:4d:60:13:f6:75:27:7d:28:fe:74:4f:6d:b8:
ff:88:6f:06:30:d2:d0:38:93:3c:72:bb:11:e2:03:e5:92:9a:
53:32:77:df:e3:f6:43:1d:51:1a:db:8b:7e:77:8e:d6:90:14:
25:e5:64:83:5b:94:ab:fe:47:5a:47:b1:60:58:69:af:1a:34:
f5:f4:ce:c9:01:69:0d:78:d8:00:6f:27:86:24:8e:b1:b7:04:
30:ae:18:01:9b:74:8c:94:30:be:81:73:2a:26:51:ba:e0:0b:
98:39:36:1c:b3:01:cf:9b:e7:94:c7:71:91:7c:a3:90:d9:0b:
9b:e2:b3:03:a0:55:2f:1f:08:3f:ac:7e:9e:c0:ac:3f:0b:b2:
75:13:4c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:35:56 2025 by rpki-client