Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
File: BsdGzX1N-VptA8qVVKdUdg1eTgY.mft (raw, json)
Hash identifier: tropII6cS/sS3hUi9le2HhZjfKLmp25/YXSD6xe++ao=
Subject key identifier: 5F:A1:4D:F0:F6:EB:4E:5E:AF:97:C3:43:AC:35:A5:DA:59:8C:DF:3C
Authority key identifier: 06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
Certificate issuer: /CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Certificate serial: 0197B77CC575CE9FD3824B2B6A65365FF6F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
Manifest number: 062C
Signing time: Sat 28 Jun 2025 17:01:36 +0000
Manifest this update: Sat 28 Jun 2025 17:01:36 +0000
Manifest next update: Sun 29 Jun 2025 17:01:36 +0000
Files and hashes: 1: BsdGzX1N-VptA8qVVKdUdg1eTgY.crl (hash: Pkr5L2k8pzeThGAXn7qpL6AcAeoUzECmcq30ZZPZqj8=)
2: X40tLgIMCQZAYRAwmZdn2JjY2Sg.roa (hash: eDaX3dI5fxxRGSOkAJcdOwrelUSaDgM3W7s+OAzNuqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c5:75:ce:9f:d3:82:4b:2b:6a:65:36:5f:f6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Validity
Not Before: Jun 28 17:01:36 2025 GMT
Not After : Jun 29 17:01:36 2025 GMT
Subject: CN=5fa14df0f6eb4e5eaf97c343ac35a5da598cdf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:71:53:8d:36:27:f0:b4:0c:d1:0d:e4:c1:5f:
23:54:2b:90:d6:db:ed:b7:4b:16:a6:b4:f6:87:03:
a7:b9:14:35:27:ef:2f:0b:74:6c:d4:22:90:90:41:
7f:a1:bc:af:19:1a:ce:53:41:f4:2d:e3:1b:19:8f:
61:62:64:97:b0:65:bd:b2:13:c5:e9:66:ac:c7:99:
d6:49:52:0a:15:ef:d9:4a:c5:0c:90:a9:23:81:9d:
82:1e:e6:24:06:60:3f:dc:8d:28:e7:1c:73:3a:53:
eb:6a:cb:79:15:fe:7f:0f:7d:5c:58:cf:98:37:af:
8f:84:0f:32:cf:c1:04:b2:87:6d:ad:cd:21:5d:43:
f0:29:d9:f1:2e:83:61:13:f3:b1:c2:0f:ca:42:8c:
cc:6e:0f:ea:2e:15:20:ac:95:cb:b3:fa:d2:56:e5:
d0:d9:4e:1a:43:39:98:29:5d:6d:aa:4e:0c:3f:af:
d0:5b:c5:92:be:28:f7:a5:db:28:ed:7e:f5:9c:ff:
72:47:8f:2a:4e:f4:12:a0:71:ac:24:14:b7:5b:98:
ff:c8:a2:ca:4f:46:ec:39:df:c5:c8:c5:03:c9:a6:
1c:5a:89:29:bc:dd:8f:33:35:cd:90:98:05:16:62:
80:d5:9d:93:49:5e:e0:9b:c8:18:b2:29:ae:6f:e3:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A1:4D:F0:F6:EB:4E:5E:AF:97:C3:43:AC:35:A5:DA:59:8C:DF:3C
X509v3 Authority Key Identifier:
keyid:06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:4a:5e:cc:2c:96:06:82:93:41:07:81:fd:6f:17:24:3f:82:
78:bc:89:8e:0c:86:a4:02:6b:f8:b4:6e:6d:79:bd:8b:73:65:
d6:a3:fa:23:fa:63:eb:cb:52:48:12:7f:db:ef:1f:ee:cb:42:
75:85:29:00:8d:a3:12:74:5d:59:ef:e2:41:f9:f4:31:ce:68:
5c:20:94:30:c6:e8:27:11:57:5f:cc:6e:a6:dd:b2:6a:8e:fa:
37:63:a2:61:ee:bd:91:fc:b1:43:81:35:14:0a:e5:04:e9:82:
64:14:1b:72:a5:ce:aa:cf:4d:00:26:f8:f3:44:3a:34:a1:fb:
77:58:ed:43:d5:dc:78:6f:ed:60:73:43:6b:a3:5a:25:16:0b:
30:7c:74:63:fc:53:a5:39:a6:b8:0b:f5:f7:1a:c7:e0:b5:88:
5d:b0:c7:c2:76:86:b4:51:55:97:53:15:2b:0f:71:c6:69:c5:
80:75:d5:97:16:ef:69:ae:65:72:1b:29:91:60:75:c1:00:c0:
87:33:76:57:8c:08:d8:87:45:eb:17:ea:5b:e7:2c:92:77:7a:
3e:61:46:93:20:ea:80:4d:18:f2:67:9d:a7:89:6e:a2:18:0d:
e5:b1:bf:d1:0b:49:92:81:08:ae:11:0a:f7:b9:89:b1:1d:d1:
67:1e:e1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:59 2025 by rpki-client