Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
File: Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft (raw, json)
Hash identifier: m/IU50Zu9kiz36X8U0F+9lqSWKVjkjNthnap/kjZH8o=
Subject key identifier: FB:41:53:AF:81:1A:EB:79:58:41:70:1B:11:5F:68:12:71:CB:B7:18
Authority key identifier: 06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
Certificate issuer: /CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Certificate serial: 01969DBEAEC66319E7A3A91ED4980B164E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
Manifest number: 0146
Signing time: Mon 05 May 2025 00:00:41 +0000
Manifest this update: Mon 05 May 2025 00:00:41 +0000
Manifest next update: Tue 06 May 2025 00:00:41 +0000
Files and hashes: 1: Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl (hash: 8A9nOTnQlaO+cG0qV1h+toTWPqpOU5wpOOuhu3plj3c=)
2: aTqNBiMtHyqY4sjo2vUby0yJMKk.roa (hash: 8tR80jRMgENDFDI+mB0B/a9/v+rAAXYdo53Fd7KchX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:ae:c6:63:19:e7:a3:a9:1e:d4:98:0b:16:4e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Validity
Not Before: May 5 00:00:41 2025 GMT
Not After : May 6 00:00:41 2025 GMT
Subject: CN=fb4153af811aeb795841701b115f681271cbb718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:50:84:10:3c:3a:bf:99:77:8b:87:22:16:
e9:00:86:92:99:95:e6:07:34:aa:ea:d6:5a:dd:b0:
c8:3b:39:05:d2:08:06:65:c4:2e:5e:ad:46:dd:96:
d1:9a:39:27:c1:56:a9:89:60:49:50:9f:8e:ad:ab:
14:eb:82:31:e5:29:09:cb:a1:a7:4a:56:b9:dd:86:
0e:db:4e:78:13:b9:5b:92:93:cb:25:2f:8e:2b:ed:
6c:f6:9e:34:53:c8:cd:a4:6c:74:87:0e:c1:89:7f:
6e:5b:57:9b:0e:a3:e0:3f:83:0e:2d:af:ec:8c:d2:
26:a7:2f:b8:61:62:8a:06:c0:c3:4f:05:b1:ce:8b:
89:be:f5:cd:77:c1:72:e7:4b:b6:9a:9a:a7:b1:6b:
5e:09:9a:d6:a1:da:dc:6d:46:9a:6f:ad:fc:d2:cc:
1c:e9:64:c6:2b:14:1f:e9:02:d2:92:eb:d4:e3:b0:
23:f0:12:5f:86:41:ea:f3:aa:e2:65:f9:c4:97:3f:
70:f7:fc:67:53:28:e2:d1:9d:16:08:af:d5:83:1a:
ad:3f:bc:f4:3a:83:2b:be:8e:04:57:90:fe:0a:43:
db:70:06:ee:bb:c4:f6:4f:f2:bd:b4:4a:cb:2b:d9:
82:3a:4a:de:c8:33:03:e6:25:63:0c:c9:b4:17:14:
73:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:41:53:AF:81:1A:EB:79:58:41:70:1B:11:5F:68:12:71:CB:B7:18
X509v3 Authority Key Identifier:
keyid:06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:25:ab:e6:fa:00:b2:6d:77:23:72:09:f6:4a:83:b8:31:c4:
bb:6b:ed:4d:6c:d4:be:6c:81:d2:ac:8d:7d:e6:41:42:27:db:
e1:cd:b2:cd:25:2b:0f:2b:f2:f9:02:38:0b:5c:24:54:55:85:
27:ef:76:e8:94:e8:1f:5d:38:f2:69:95:41:2b:47:6b:02:3d:
03:64:7f:33:e5:97:43:3c:f8:21:f2:df:de:01:bf:c3:76:7c:
00:d3:79:87:2d:ab:ea:01:d9:95:13:21:b1:40:02:c4:40:de:
8a:78:d7:38:c1:76:04:b4:da:51:ab:b6:5a:b9:10:a8:de:b0:
bd:d5:3a:50:3a:8e:6b:e3:ee:d3:5a:ad:83:bd:2e:54:7e:56:
ee:c2:e4:ee:f7:66:61:58:39:fc:25:92:6b:33:88:1f:bf:f0:
19:38:65:f7:17:99:7e:e7:85:af:6b:7f:90:f6:ed:27:ed:fd:
97:c0:c4:4d:e2:20:69:86:d2:d8:b7:ac:19:c5:41:f6:33:09:
a0:23:12:67:e7:30:eb:2b:13:a2:c0:9e:51:f5:15:99:4a:76:
07:f4:b6:92:99:7c:27:46:ef:ab:ba:90:7b:ee:9c:a8:48:45:
10:f2:d7:52:b7:1d:be:31:07:a8:eb:61:06:2e:cc:9a:b7:ec:
eb:2b:0b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:43:26 2025 by rpki-client