Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
File: BGyntgTsCPb1Sw50iQZUfdN1Z00.mft (raw, json)
Hash identifier: Y/hYSZ/BJJExp+UfdOpcKoBkERmB3HBR+CDYGKhcf/A=
Subject key identifier: F9:F7:2A:9E:22:5D:22:BD:EC:37:96:5B:34:D0:D2:45:08:09:00:F8
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Certificate issuer: /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial: 0196A6C16534DC2839D7D86F34692060705F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
Manifest number: 11EB
Signing time: Tue 06 May 2025 18:00:14 +0000
Manifest this update: Tue 06 May 2025 18:00:14 +0000
Manifest next update: Wed 07 May 2025 18:00:14 +0000
Files and hashes: 1: BGyntgTsCPb1Sw50iQZUfdN1Z00.crl (hash: i/AtYHDoMwGZDWe7j/vy4IsWkCkA4RRibBK8nhN7EVc=)
2: W_EWnDN7S-Lr4HAexwKFCibBunI.roa (hash: Hq7myDcvfhXQUDH03db33GGTXzn+mXDa35j7LIpyLJ4=)
3: _h-pD85oM-4QL5S4Ka5s8okAtQk.roa (hash: 0i71BBwnivmIgBhKogySa4VPmpxK93A6N2O06ABsBqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:c1:65:34:dc:28:39:d7:d8:6f:34:69:20:60:70:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
Validity
Not Before: May 6 18:00:14 2025 GMT
Not After : May 7 18:00:14 2025 GMT
Subject: CN=f9f72a9e225d22bdec37965b34d0d245080900f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:b9:42:eb:ff:60:02:cb:2e:b1:e2:c0:40:
c6:2b:1f:96:9a:c5:ab:b9:6e:c8:01:02:c6:e3:53:
e4:8e:09:be:cc:19:06:a2:ed:bc:fd:c9:dc:c2:b6:
1f:84:1a:35:a1:a8:56:38:5e:3d:fb:12:fe:28:35:
e2:e1:e5:5b:1f:d5:e5:80:db:8b:a9:a7:41:04:f6:
90:55:67:8a:d0:07:d7:0b:31:71:d5:d8:24:75:7c:
91:e3:d7:87:c7:73:ce:b1:77:ff:30:13:59:0a:cc:
37:00:57:0e:90:ca:29:e9:6c:2a:8c:6a:70:79:4b:
60:07:f9:3c:f5:d0:70:70:3f:ad:af:c1:cf:da:55:
5e:fe:0f:5d:bf:d8:26:a3:b1:ae:ea:b4:65:a9:ef:
a4:6c:a6:f7:fc:85:f1:c5:78:de:47:b6:d8:09:3a:
83:c4:89:2e:aa:1e:4b:f8:02:fb:dc:eb:0f:3b:4f:
04:e9:7a:1f:15:96:59:78:3a:7d:83:35:fe:c0:1c:
44:69:e9:1d:4f:52:4d:76:42:b1:5f:31:4e:a4:23:
d6:3c:26:2d:31:40:cf:22:98:11:7a:23:78:8d:ea:
72:33:6c:a7:21:10:cc:86:8d:27:c2:bc:b2:e9:23:
c9:11:0e:de:50:77:13:08:01:a1:42:a1:b3:b4:78:
f2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F7:2A:9E:22:5D:22:BD:EC:37:96:5B:34:D0:D2:45:08:09:00:F8
X509v3 Authority Key Identifier:
keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:bf:7f:92:30:9d:9c:31:c0:7c:21:18:12:24:ff:47:46:8c:
72:d1:39:7c:aa:5b:ab:86:46:8c:2f:24:06:0f:64:ed:93:2f:
a5:29:f3:68:28:72:c5:37:ce:54:b8:9e:9d:e6:c9:a7:ed:6d:
40:8c:de:49:70:5a:42:af:ab:9c:37:15:a1:86:6f:6e:d8:24:
66:ff:71:52:1d:de:3f:18:93:4e:e6:a1:89:02:eb:2a:75:fb:
7b:95:7a:9d:4f:a6:25:4b:ec:f8:17:d4:3b:c4:35:e3:57:f9:
24:f1:1f:8e:8b:34:c3:a6:70:a4:52:61:75:58:d4:49:77:ce:
7c:08:95:07:bc:69:4e:8a:39:58:74:c5:90:62:3b:64:18:1e:
a2:01:cb:ca:33:57:fb:f3:85:0e:67:45:f5:1a:53:c0:ac:2a:
22:fe:de:63:2f:bc:f2:dd:6e:ca:29:0c:e8:ac:b8:4f:3c:2a:
c6:40:88:f3:b2:14:70:9c:4e:ef:bf:e6:8e:34:f9:1a:a4:fe:
0a:7b:2c:e3:34:12:1e:fe:aa:a6:4d:0e:0a:69:b1:83:c2:7f:
0c:b0:af:13:37:bc:61:c3:9f:96:f5:f3:aa:33:5e:7d:9d:44:
f6:c8:37:c7:04:07:a3:6b:d0:e4:8a:9b:02:28:b8:b1:12:25:
28:03:3b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:28:46 2025 by rpki-client