Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
File: BG5SgQdApuwTSZPbya0RtkVNmno.mft (raw, json)
Hash identifier: qrhh+Y2uq4Y0lVu1coUX9S22PUPuI+FYQzLjdwBx0SM=
Subject key identifier: 2D:3A:71:81:E0:F3:F1:FF:7B:3C:2C:F1:DF:56:5B:4F:F3:E0:E0:8B
Authority key identifier: 04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
Certificate issuer: /CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Certificate serial: 0197B632C19D154D6560223313732C1BF296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
Manifest number: 05A8
Signing time: Sat 28 Jun 2025 11:01:09 +0000
Manifest this update: Sat 28 Jun 2025 11:01:09 +0000
Manifest next update: Sun 29 Jun 2025 11:01:09 +0000
Files and hashes: 1: BG5SgQdApuwTSZPbya0RtkVNmno.crl (hash: 7leo2qMojNUtyLvqVYd0xNawb3ZBqUthJFe3x1cDA1s=)
2: V1gcgrRQvSf2dtL0E41D42XNa0c.roa (hash: J5zYvKNdV+l5Y6eVeDRqi8ebNs+g0KhpZ1mPMI4wWZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:c1:9d:15:4d:65:60:22:33:13:73:2c:1b:f2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Validity
Not Before: Jun 28 11:01:09 2025 GMT
Not After : Jun 29 11:01:09 2025 GMT
Subject: CN=2d3a7181e0f3f1ff7b3c2cf1df565b4ff3e0e08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:dd:4a:99:38:7f:aa:62:cc:07:55:7d:74:
90:46:d1:63:78:a4:a4:76:73:f8:4f:2b:ce:6d:93:
16:37:07:f8:41:e1:75:fe:f9:08:6f:09:97:10:be:
12:08:f8:f8:13:88:77:6b:e7:d5:f7:bd:7e:2d:46:
b0:75:99:6c:5e:26:5d:5b:fd:93:79:3f:38:3a:67:
f2:09:10:77:26:57:51:4f:63:d9:4c:2c:71:a4:b1:
e1:b8:f8:5d:cd:46:86:81:fe:d0:98:6f:0e:67:3d:
1b:40:54:af:cd:fc:25:78:86:1d:d9:a6:61:ec:69:
ce:d3:c6:a1:65:3b:3e:ea:b9:76:b6:d8:9d:55:b3:
4d:95:9c:0c:40:d2:fb:21:f6:89:2e:09:a5:7f:71:
71:3f:a8:81:b2:39:ab:33:19:6a:fb:6c:55:86:f5:
82:12:89:0a:85:82:29:3e:08:c6:ee:92:b4:a6:1e:
74:70:98:66:7f:1f:c0:80:78:0e:4c:f8:c1:c1:6e:
a6:b9:48:31:02:de:b2:22:03:94:23:b1:7e:cb:80:
fe:fd:eb:32:09:03:12:77:00:c6:7e:8f:d8:83:63:
8b:c0:33:6d:1b:be:b1:9d:74:41:fe:ac:71:10:16:
b7:41:09:2b:67:06:b4:96:d9:a1:d1:d6:3e:c6:e5:
88:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3A:71:81:E0:F3:F1:FF:7B:3C:2C:F1:DF:56:5B:4F:F3:E0:E0:8B
X509v3 Authority Key Identifier:
keyid:04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1c:8e:5d:25:ab:69:fd:af:c5:e8:c8:ab:c1:b2:06:f8:5e:
b9:c4:58:c5:66:7c:73:c9:d3:93:c7:51:a4:79:e4:e2:2a:c1:
9c:9f:77:47:b2:7f:63:b1:e8:89:e5:1f:99:46:20:bf:16:f0:
5d:af:5a:c4:6c:52:77:54:fe:06:73:22:cf:ac:ae:2a:2e:c2:
80:ab:32:4c:9a:4b:9a:a0:23:2b:07:77:39:57:e1:c7:29:80:
0a:89:4c:07:0a:fc:2d:3d:79:26:97:37:ff:52:35:a6:c1:cf:
cc:b4:d2:0a:eb:5f:bc:4e:ee:80:9e:6a:76:3a:a5:02:99:1a:
19:e7:a9:a6:4b:7c:6b:ad:78:d0:af:a0:38:c0:b8:89:e3:ba:
ff:02:4a:e1:1e:d4:41:9c:df:86:48:38:5e:34:aa:d8:26:5f:
26:fd:4d:53:51:8d:16:91:67:c4:ce:84:da:33:ec:62:b0:37:
28:54:d9:0e:42:44:fa:92:3d:21:1d:9c:88:8f:a4:f6:97:07:
5c:47:16:10:62:9e:a5:b5:a8:0f:d5:c0:bc:73:f7:a9:67:5d:
96:67:5e:84:00:c5:e8:20:26:c6:0d:78:aa:68:ad:fe:91:0b:
9b:65:c5:fd:77:78:14:37:7f:fa:2b:32:db:94:b5:eb:1d:76:
92:16:82:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:49 2025 by rpki-client