Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: 8IN/WXbSjRpmWxdKA2572WEPvwkhDtJ/pbS310+H+y0=
Subject key identifier: 9F:F8:18:E1:7B:09:43:F8:FA:A8:EF:D6:DB:96:63:3C:51:31:C6:61
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 0197CEDFE0783446EF8621FD47FA47B53363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 15C6
Signing time: Thu 03 Jul 2025 06:01:07 +0000
Manifest this update: Thu 03 Jul 2025 06:01:07 +0000
Manifest next update: Fri 04 Jul 2025 06:01:07 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: Jf+aFhN4yDJCfKgCB0YslvfFhKaCpbEZMiX3RfzFtks=)
2: Lh8yvuYECQW6dDow2L76nBGsr6E.roa (hash: 0hiYjVR3RerVN9RXXudfA5pr9cnXHHQqw5O/Jaf9Snc=)
3: vtX7rusa6fZMmF3lc_ZvTTSyZII.roa (hash: /Q3goqDnJ6EwR3K+qh2LYwfBLshEeT0YC75y12sQLG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:df:e0:78:34:46:ef:86:21:fd:47:fa:47:b5:33:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Jul 3 06:01:07 2025 GMT
Not After : Jul 4 06:01:07 2025 GMT
Subject: CN=9ff818e17b0943f8faa8efd6db96633c5131c661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:5f:4c:db:8a:82:12:96:2d:34:99:ff:55:
bf:a1:65:7d:83:4f:0c:2d:e1:3a:9b:ac:e4:f9:a7:
29:fc:96:0f:cf:09:61:0d:9c:d9:68:8c:ac:25:27:
a4:d7:dd:53:a0:b6:07:cf:1e:ac:ca:77:5d:20:43:
11:f2:6b:97:8e:55:b1:d2:00:3f:96:29:03:8f:35:
0c:98:7b:d6:34:79:cc:f4:87:ac:e0:cb:f5:3f:02:
02:23:99:04:60:60:77:b6:94:c7:36:f9:b5:3a:b7:
bb:c3:78:c5:86:cc:14:d8:41:6e:19:87:4f:99:a8:
98:66:5f:b0:29:ea:8b:c6:f2:3e:7c:e8:85:8c:89:
33:85:b9:ba:09:cb:86:7e:dc:23:c8:97:3a:24:ef:
a9:cb:a4:37:85:99:5c:9e:da:06:be:5e:93:c6:a5:
1a:28:50:6b:1e:f5:4f:5f:6e:d0:1e:38:6b:54:9f:
78:90:ea:16:b2:67:32:b3:10:f5:d6:6f:60:fd:5d:
b4:cf:c9:4d:2b:3e:22:12:41:09:cc:af:28:20:3e:
e7:54:4e:ba:b2:0e:28:a3:1a:82:c0:df:4e:52:ae:
09:6b:ec:9d:c5:b9:e3:fc:e5:79:e5:0e:53:54:a0:
60:a3:77:b6:4b:61:81:a4:f2:18:b5:31:0b:dd:04:
94:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F8:18:E1:7B:09:43:F8:FA:A8:EF:D6:DB:96:63:3C:51:31:C6:61
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:22:5f:3c:c8:11:8c:d7:11:64:47:12:81:58:dc:42:ef:ea:
b7:d5:ce:0f:0d:f9:b8:53:0a:1c:75:5e:84:1c:60:51:b6:ab:
40:3d:72:01:8d:6b:09:4d:46:cb:51:9f:08:f8:ed:98:6b:65:
d7:71:64:2c:26:0d:13:a1:52:85:f0:85:e2:9b:d5:44:13:67:
ac:c3:a0:66:f4:3e:17:13:4e:90:2a:aa:37:e3:88:4a:4e:55:
33:c0:ba:f4:0b:55:f5:15:61:19:6e:c1:79:9c:bc:97:83:5a:
c9:f4:7d:7d:da:78:7e:3b:b9:5c:ad:1b:84:6b:5a:62:2d:ee:
56:77:bf:27:37:39:d3:ae:0c:bb:7f:e3:cc:90:b5:55:ee:33:
24:a1:70:64:42:8c:7a:0e:22:b9:7b:2f:ed:19:eb:87:c3:87:
dd:11:aa:a7:87:bd:ef:1a:de:c1:e0:7e:88:79:04:b0:5a:30:
c7:a7:a6:2f:2b:d6:7b:90:a3:a0:d5:16:68:27:a8:33:9b:bb:
5c:86:f0:95:61:0d:03:56:31:cc:de:bf:f8:00:cf:c3:97:55:
9c:ba:d5:3b:62:84:e1:e7:fd:c7:5b:ce:0f:9c:9c:20:69:8d:
bd:d5:19:6c:a0:f2:5b:65:dc:cd:b8:55:38:ab:42:79:55:69:
cd:f9:31:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:12:08 2025 by rpki-client