Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
File: BG5SgQdApuwTSZPbya0RtkVNmno.mft (raw, json)
Hash identifier: QJ2GzmZREnhfq/xYewCS9ZNmHK0TLyCJsKrCAaq4GAU=
Subject key identifier: F7:52:1E:13:95:1C:20:A8:99:B8:E7:4D:12:32:09:99:F7:3C:72:4A
Authority key identifier: 04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
Certificate issuer: /CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Certificate serial: 0198D5F185ABDC07FFA57D6F4CBDC5A74CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
Manifest number: 063D
Signing time: Sat 23 Aug 2025 08:00:32 +0000
Manifest this update: Sat 23 Aug 2025 08:00:32 +0000
Manifest next update: Sun 24 Aug 2025 08:00:32 +0000
Files and hashes: 1: BG5SgQdApuwTSZPbya0RtkVNmno.crl (hash: NCSrzEmna8DP9iH52tQ56i4Kl2xpDeWgKnCJOzYHloQ=)
2: V1gcgrRQvSf2dtL0E41D42XNa0c.roa (hash: J5zYvKNdV+l5Y6eVeDRqi8ebNs+g0KhpZ1mPMI4wWZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:85:ab:dc:07:ff:a5:7d:6f:4c:bd:c5:a7:4c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Validity
Not Before: Aug 23 08:00:32 2025 GMT
Not After : Aug 24 08:00:32 2025 GMT
Subject: CN=f7521e13951c20a899b8e74d12320999f73c724a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:89:7c:02:46:a7:0a:be:16:72:d4:59:af:
63:62:67:e3:69:af:61:a3:93:24:4b:9f:a7:f9:35:
ec:e7:f0:27:a0:7f:e4:8e:c6:4c:1e:55:11:e9:9c:
99:55:ca:63:99:72:0e:0c:c9:3a:25:02:e1:79:a0:
2a:f2:bf:f0:8e:43:18:a9:b6:0f:e4:de:d7:2c:55:
b9:59:8c:41:db:f6:70:8b:d8:f8:04:79:59:30:41:
bb:51:29:dd:c7:d6:59:fd:91:46:aa:77:ef:f0:fd:
ab:21:25:a8:98:e0:02:a4:a5:b3:82:8f:71:41:d8:
93:1b:72:63:65:98:b9:51:dc:5d:d2:b1:76:cf:c0:
33:ab:68:31:b1:4a:3c:ff:77:cb:c6:e3:88:4d:d9:
f4:e0:58:8c:49:fd:25:42:9a:2d:cc:f6:ae:eb:1f:
17:4e:22:4a:94:35:e2:ac:0e:b7:8a:c2:7a:16:4e:
a3:9e:11:2e:a0:ea:39:f4:74:4d:a3:b7:0a:58:a0:
05:3b:40:ca:03:74:a4:88:b0:c1:88:66:dd:3a:23:
63:8f:7b:54:b3:35:cf:8a:d5:6a:5d:7b:8f:be:19:
c3:bf:cf:b7:c0:cf:c3:0a:88:d3:e4:41:18:50:e9:
de:58:e5:f2:f1:05:f0:66:fa:99:7b:fb:ad:df:26:
55:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:52:1E:13:95:1C:20:A8:99:B8:E7:4D:12:32:09:99:F7:3C:72:4A
X509v3 Authority Key Identifier:
keyid:04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:51:a4:55:23:26:02:da:80:1a:eb:d2:fa:d0:21:2b:21:d8:
04:28:99:7c:9f:4d:aa:c0:4a:1e:f1:19:fd:e6:b6:da:70:1c:
3c:25:eb:ba:37:85:85:d4:c2:c4:28:6b:7f:61:13:44:d6:20:
d5:35:86:ba:d8:1b:34:77:00:d2:7c:51:22:cc:be:23:b7:80:
d7:01:78:ad:58:f4:ad:51:31:d6:ff:c0:b4:a7:36:16:fe:30:
96:04:1e:d6:0a:c8:89:99:21:64:b1:84:bd:17:0b:e3:a2:1e:
dd:da:fb:c1:a3:fa:c5:95:5c:66:f9:e0:1c:6a:4c:33:a3:ea:
b5:80:1e:7f:d8:be:c0:32:90:37:7a:8d:3e:79:19:0c:46:fd:
d0:00:30:67:63:7e:0d:5a:ab:12:27:d4:93:3e:1a:7a:06:5a:
aa:a9:ce:81:38:b8:69:e2:f5:0a:87:72:d4:e4:d3:da:89:a6:
90:71:30:81:4c:b7:39:d0:14:8e:1f:07:cf:e0:ad:68:d8:70:
4c:fb:7b:2d:6a:3e:d2:c4:8e:73:15:2e:1b:a2:49:07:16:27:
d2:e3:ec:fb:41:81:29:88:b2:ba:be:1e:c9:1a:b3:83:cd:06:
37:ab:43:c8:08:f3:94:c1:4f:1a:08:59:53:82:0f:2f:5e:1b:
51:d7:56:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:13 2025 by rpki-client