Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
File: BsdGzX1N-VptA8qVVKdUdg1eTgY.mft (raw, json)
Hash identifier: ELoIh5c5gXYOUgz9ogogNVjyzkVEAp6T02XRn6ybiDI=
Subject key identifier: D7:99:D1:F4:EB:68:E1:7C:BF:EC:79:B7:F4:52:B4:19:D0:96:BA:52
Authority key identifier: 06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
Certificate issuer: /CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Certificate serial: 0198D73B971EA3DDAD8DF587C3EEACD5C9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
Manifest number: 06C1
Signing time: Sat 23 Aug 2025 14:01:03 +0000
Manifest this update: Sat 23 Aug 2025 14:01:03 +0000
Manifest next update: Sun 24 Aug 2025 14:01:03 +0000
Files and hashes: 1: BsdGzX1N-VptA8qVVKdUdg1eTgY.crl (hash: 91hp1PNW/EXt2+UnE1u1DAZIh9/O6I3XwSWX5hTvAwY=)
2: X40tLgIMCQZAYRAwmZdn2JjY2Sg.roa (hash: eDaX3dI5fxxRGSOkAJcdOwrelUSaDgM3W7s+OAzNuqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:97:1e:a3:dd:ad:8d:f5:87:c3:ee:ac:d5:c9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Validity
Not Before: Aug 23 14:01:03 2025 GMT
Not After : Aug 24 14:01:03 2025 GMT
Subject: CN=d799d1f4eb68e17cbfec79b7f452b419d096ba52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:65:9b:e9:d5:3d:ca:c4:17:6f:1b:76:66:54:
be:4a:77:d2:b2:c3:20:ac:c4:9b:3d:61:cf:a8:0a:
32:2c:e3:6d:72:05:50:27:38:21:79:0e:11:8c:87:
a8:65:01:85:b1:4e:e9:82:a2:75:72:a9:14:ef:96:
b6:1c:1b:5b:67:14:18:63:49:a7:af:0d:a3:10:72:
97:e2:dc:2b:ee:68:2a:3b:60:a3:f9:a3:7d:4f:22:
5a:59:38:60:98:71:3e:6f:6f:0c:7e:b1:0c:a5:86:
a2:cd:97:38:f9:e4:49:57:f6:d0:c9:5b:41:26:11:
79:36:fd:c0:41:7e:94:5f:ac:1f:c0:39:c7:95:99:
08:7b:14:31:3e:ed:41:85:f1:90:fd:7b:9b:fc:94:
27:f7:51:fb:cb:6e:35:81:cf:be:a7:69:97:78:4c:
79:6a:59:40:81:ab:36:ad:71:15:60:50:32:97:26:
29:82:1b:f4:a2:0b:94:99:db:91:a2:42:f7:ba:e5:
a4:4d:0e:94:d7:bf:a1:e6:ff:6f:72:0e:a6:af:9f:
ee:ef:e8:97:00:d1:54:61:8f:ca:f7:21:02:9d:38:
76:45:67:07:d7:8d:c0:47:25:45:41:8a:3e:7b:02:
b5:73:2f:e9:86:80:6f:7a:31:cc:b4:10:11:60:1d:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:99:D1:F4:EB:68:E1:7C:BF:EC:79:B7:F4:52:B4:19:D0:96:BA:52
X509v3 Authority Key Identifier:
keyid:06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:88:da:99:c3:56:74:1c:af:69:df:3e:a9:3f:8e:e7:97:ec:
fa:11:24:6b:84:01:26:ea:64:cc:6d:88:98:f6:b1:22:05:ad:
5f:fd:11:c0:81:3a:43:af:cd:0a:dc:28:4d:df:44:da:a0:3e:
d1:f6:3c:70:6a:b1:78:78:61:f8:dd:54:f7:8f:42:00:04:b4:
f1:9b:ef:c3:e1:c7:ee:10:54:0b:2f:aa:60:23:ed:be:03:11:
18:e9:ff:bc:00:2c:4e:ed:b1:b6:ed:c4:d2:a3:be:44:d9:de:
95:4a:46:65:07:b4:84:d9:98:fc:39:7e:6f:8f:ce:41:29:40:
25:b0:1e:a9:d8:b4:68:d5:a5:a1:3d:17:1e:85:cf:93:54:c7:
7c:04:a0:c4:89:2b:77:d0:a6:6f:46:29:07:18:9a:df:fc:bc:
6a:77:02:4f:d1:e0:70:4e:3b:65:dd:b0:4e:61:d5:2e:b1:e4:
fd:11:4c:77:69:9c:af:b0:aa:3a:62:6f:1a:40:a3:8b:a5:c0:
4c:c3:0c:21:2e:74:8f:b7:1e:f4:84:5d:10:42:c1:55:bb:3b:
41:9f:41:9a:91:9d:7a:6e:ef:8c:1e:13:9e:b2:90:20:bf:95:
a5:10:4a:1f:50:06:0c:37:56:45:97:86:b2:45:3f:a3:ab:23:
ba:e0:5c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:27 2025 by rpki-client