Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
File: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft (raw, json)
Hash identifier: KoQ+IfW6lPA6FN0AU58CLJLtn4Fjyb3iELgViDmWbhg=
Subject key identifier: 1B:DD:D2:1C:1C:B0:A6:17:D1:F7:AC:F7:BB:08:F1:D9:DE:A9:8A:AA
Authority key identifier: 06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
Certificate issuer: /CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Certificate serial: 0198D473FBB8A1C54F878F78BBD9083C1E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
Manifest number: 0B11
Signing time: Sat 23 Aug 2025 01:03:47 +0000
Manifest this update: Sat 23 Aug 2025 01:03:47 +0000
Manifest next update: Sun 24 Aug 2025 01:03:47 +0000
Files and hashes: 1: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl (hash: B30+DuhDDklN8ltvVqwjXGygPs375mtol01aMlxPX/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:fb:b8:a1:c5:4f:87:8f:78:bb:d9:08:3c:1e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Validity
Not Before: Aug 23 01:03:47 2025 GMT
Not After : Aug 24 01:03:47 2025 GMT
Subject: CN=1bddd21c1cb0a617d1f7acf7bb08f1d9dea98aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:27:73:6d:9d:c2:6c:d3:e4:d0:bf:03:6e:c2:
d2:b6:d6:57:71:76:11:5b:22:79:86:4f:c1:77:ca:
f7:23:21:7c:7f:d0:81:1b:b1:c5:b0:90:53:ef:a9:
ec:a5:b6:5f:e4:82:30:22:77:9f:64:09:a6:7a:0a:
f7:c8:51:0e:09:18:50:e8:11:e2:6b:ff:3a:0c:ff:
33:56:1d:7c:5a:65:ab:c7:79:e2:e2:e3:3c:db:78:
00:e5:52:f7:e2:d7:56:d5:8b:24:23:f9:1e:df:c1:
0f:8e:cb:7c:7c:6a:b0:47:68:4a:5d:55:b9:d2:4a:
67:4d:83:d7:57:e3:1d:34:06:7b:37:f1:c8:2b:69:
3a:55:19:17:8a:94:03:a0:d2:a3:f5:18:59:84:11:
6c:87:43:78:33:a9:2f:5d:69:7d:ee:ec:e5:c5:0b:
ff:12:74:5f:e8:a5:bf:6a:51:65:bf:11:6a:5c:ca:
5a:81:38:05:ae:61:8c:69:3f:18:f2:2c:00:42:95:
00:a3:43:1f:d0:66:ca:b4:a3:bb:c9:fe:6a:9c:c0:
67:06:64:f0:a5:0e:23:a7:16:a7:7f:70:93:34:d9:
cd:07:31:be:84:01:61:b4:74:cc:b7:9f:4f:57:64:
8c:48:96:22:8b:fa:b9:88:fc:40:90:e2:4e:f8:45:
96:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DD:D2:1C:1C:B0:A6:17:D1:F7:AC:F7:BB:08:F1:D9:DE:A9:8A:AA
X509v3 Authority Key Identifier:
keyid:06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:60:7d:c9:44:42:d1:f1:e7:ff:88:54:9a:ca:d9:bf:fc:35:
53:ad:f3:de:87:a9:db:03:a4:e6:73:ae:33:e1:76:c1:72:a1:
16:b5:28:96:3f:df:1f:f8:c9:71:59:dd:18:9e:a1:82:71:52:
3a:61:89:7d:25:0a:8a:8e:43:09:54:63:75:c0:e4:12:50:ed:
12:32:c6:81:de:12:d9:7d:ae:a5:4f:78:21:3d:12:13:55:7a:
e8:08:60:34:22:e8:9d:ec:be:72:bf:99:aa:5e:30:d4:c9:a9:
07:16:57:3b:e8:d7:a7:d1:43:2f:fe:de:fe:b6:f4:ec:ff:b8:
e2:97:e2:41:d5:8c:79:b4:a4:f6:bc:01:2f:de:64:05:54:6c:
42:58:ca:93:0f:62:3e:3b:08:c1:d3:0c:e3:c4:21:ce:db:50:
90:e5:50:ee:18:00:a7:3a:0c:23:ed:10:80:ef:aa:c4:b0:03:
fb:37:e1:08:c4:e0:da:08:bf:ae:a3:a4:69:cc:bf:3c:06:5b:
2d:94:dd:97:1d:fa:59:b5:c0:0b:b7:37:77:5c:8d:5b:f4:24:
1d:8d:ce:3f:89:4d:59:95:86:48:c4:63:a9:d9:b1:11:d9:97:
fd:4a:f6:11:51:f5:38:94:84:10:f0:c2:8f:30:08:75:5b:64:
d1:37:23:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:14 2025 by rpki-client