Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
File: BGyntgTsCPb1Sw50iQZUfdN1Z00.mft (raw, json)
Hash identifier: 6eVCFMCCXMftLNK5XEKO6fiJl+j0N0GFp/wW07aavCk=
Subject key identifier: FF:1D:B9:F1:06:E6:40:E3:3B:52:48:59:2B:1A:BE:B4:32:3E:5E:E9
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Certificate issuer: /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial: 0197B70EE407AFA437C34454646DAEC57E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
Manifest number: 1278
Signing time: Sat 28 Jun 2025 15:01:35 +0000
Manifest this update: Sat 28 Jun 2025 15:01:35 +0000
Manifest next update: Sun 29 Jun 2025 15:01:35 +0000
Files and hashes: 1: BGyntgTsCPb1Sw50iQZUfdN1Z00.crl (hash: qZF3vkWxzmlwJv3OMY18e98omOLxgZLCaqHCMG2uAGI=)
2: W_EWnDN7S-Lr4HAexwKFCibBunI.roa (hash: Hq7myDcvfhXQUDH03db33GGTXzn+mXDa35j7LIpyLJ4=)
3: _h-pD85oM-4QL5S4Ka5s8okAtQk.roa (hash: 0i71BBwnivmIgBhKogySa4VPmpxK93A6N2O06ABsBqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e4:07:af:a4:37:c3:44:54:64:6d:ae:c5:7e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
Validity
Not Before: Jun 28 15:01:35 2025 GMT
Not After : Jun 29 15:01:35 2025 GMT
Subject: CN=ff1db9f106e640e33b5248592b1abeb4323e5ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:4f:17:e7:13:23:24:41:cf:05:09:5f:84:
16:81:7b:41:37:40:b1:65:77:ef:c9:ca:51:98:97:
e6:f6:45:cf:c6:40:8d:90:2e:c7:04:5a:d5:3f:c1:
57:98:bb:d0:86:b3:c2:c0:91:1a:9a:f5:0c:f3:34:
9e:98:88:50:b2:58:12:ca:cd:4d:a7:d0:3f:87:6d:
a0:e6:6f:ab:39:ad:2e:d5:95:4c:25:8f:b4:df:a7:
98:b3:a6:a6:8a:bd:63:38:b0:da:97:d8:84:0b:4b:
20:07:27:31:8f:f1:bc:e5:6d:af:e1:7c:ca:18:2c:
00:a5:88:3c:59:fa:c5:c6:51:b5:f1:54:d3:e0:4f:
14:a8:5d:64:02:79:73:e7:3f:c1:ce:63:b2:9c:ab:
eb:1d:7c:14:b6:5d:cc:04:fb:00:21:c6:37:5d:41:
43:c1:f5:df:fa:70:3f:08:a6:f2:c7:68:16:ab:1d:
31:2c:45:d9:a1:9b:f0:d1:3c:2a:f8:ce:02:33:22:
60:fb:6c:c5:06:8d:d9:4c:a0:84:9d:91:87:07:a3:
9b:d4:79:93:98:75:36:00:e6:c1:30:bb:ec:87:d7:
79:4d:0e:ea:e7:a8:20:bb:f4:60:5f:32:a9:7c:ed:
76:1b:a7:aa:40:0c:c6:7c:6f:9c:2c:1e:d2:6b:67:
9b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1D:B9:F1:06:E6:40:E3:3B:52:48:59:2B:1A:BE:B4:32:3E:5E:E9
X509v3 Authority Key Identifier:
keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:66:ae:35:d1:a3:7c:41:ff:fc:be:75:0b:3e:3b:63:24:2a:
2d:58:44:0b:f6:4a:19:28:10:ed:93:7e:70:d6:f6:64:cd:50:
4d:8e:3a:7b:f2:bd:66:72:35:c7:93:05:ae:95:aa:18:ab:5f:
66:2a:35:e2:8b:1c:57:f3:c0:93:96:a6:02:4f:cd:02:82:ef:
80:a7:81:b1:a8:40:94:bf:73:06:3c:57:53:9d:a9:f1:08:1b:
4e:27:06:88:a8:d1:54:06:6e:fb:74:75:57:21:3a:45:40:ac:
0b:73:73:75:db:b9:47:14:f4:44:f8:c8:f5:08:80:16:c8:9d:
a7:42:b6:cf:4c:f2:1c:7b:f8:90:ff:59:1c:97:d6:3c:67:32:
c9:54:cb:11:43:38:d0:d0:1e:47:0b:f9:9f:d4:a2:54:ea:80:
5b:f8:6f:33:cc:39:f3:29:33:52:b3:04:8e:64:6d:1a:f7:d8:
f4:04:fa:37:58:40:f6:5b:bb:7c:86:0e:c1:3f:cd:4c:28:59:
1f:02:0d:35:c4:a4:1d:d0:fa:4e:03:7b:9e:ae:b4:9a:65:27:
c6:48:91:42:df:23:56:e6:4f:64:a7:01:48:60:83:81:c6:9e:
86:c0:cd:f5:04:30:c6:9b:eb:76:18:e6:1b:9a:4e:69:2d:52:
5f:a9:04:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:34 2025 by rpki-client