Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
File: BGrKxxMSOFbUrmwWBUYCaE39B8s.mft (raw, json)
Hash identifier: W9Fg1SA4+lT2kTTe7SAuxLP27bfSMsSzipQdPS5hg/I=
Subject key identifier: CA:9E:9A:9A:1F:79:3C:8C:60:4F:03:29:6D:E9:F4:D2:08:FB:9D:7F
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Certificate issuer: /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial: 0196C64CDAA483D3F4F9F363041FB8897749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
Manifest number: 0380
Signing time: Mon 12 May 2025 21:00:47 +0000
Manifest this update: Mon 12 May 2025 21:00:47 +0000
Manifest next update: Tue 13 May 2025 21:00:47 +0000
Files and hashes: 1: BGrKxxMSOFbUrmwWBUYCaE39B8s.crl (hash: m7mCpSGwYTxTyuwTBPUpvh/vA5yhvhYvpMfBLh5gILU=)
2: b_K-XO5P7WSoaWNrsvXhJvIjTbM.roa (hash: bfmFzTeuKRR28Ci+54IJObwwwONZ0pFYWnhKp/hu7PE=)
3: eKW1kuPZCd7Q2-wUVFiZHmqNaHE.roa (hash: E2zSiIhX/F8uFFD091DwlATetZWIqRRANFto/vLbHCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:da:a4:83:d3:f4:f9:f3:63:04:1f:b8:89:77:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
Validity
Not Before: May 12 21:00:47 2025 GMT
Not After : May 13 21:00:47 2025 GMT
Subject: CN=ca9e9a9a1f793c8c604f03296de9f4d208fb9d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dc:83:a9:ae:bb:6a:45:05:4d:21:65:68:96:
17:48:5b:00:75:c1:72:b4:29:25:3e:fa:24:8b:05:
bc:96:a6:63:19:da:a2:37:31:f6:f1:c3:09:e4:81:
e7:0e:ce:2b:b4:54:cf:fb:0b:15:82:fd:f9:90:e0:
1d:7f:70:af:a0:fa:ac:a9:d1:7b:3a:01:cb:b4:f3:
59:e5:86:1c:9d:3e:51:b0:69:7b:76:4b:83:34:62:
63:65:37:a6:b9:fe:15:24:ee:be:e6:ba:61:37:3c:
a1:2e:12:82:c2:a1:7a:c1:44:e8:f2:a9:65:5d:ab:
04:f1:1e:44:ed:fb:aa:c8:f9:5d:f4:1b:7f:f4:81:
75:92:71:b2:93:1e:fd:9b:f0:17:78:ca:94:e7:ba:
20:75:85:c7:97:3b:82:df:aa:61:ec:0b:82:74:97:
48:1c:1d:20:36:84:e9:62:d1:05:2b:e3:51:6d:d0:
94:7e:22:9f:a4:ae:f2:d9:a4:9b:2c:bc:60:6b:57:
78:f7:67:6c:6a:39:24:68:44:6c:74:e7:fb:26:aa:
1f:c0:80:96:7f:03:ed:b1:e2:b1:70:b9:07:70:94:
83:e0:ba:5e:20:c1:ab:56:39:38:eb:3b:a3:dd:91:
b1:03:82:74:b7:74:75:46:ad:c4:30:f6:c7:31:a8:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9E:9A:9A:1F:79:3C:8C:60:4F:03:29:6D:E9:F4:D2:08:FB:9D:7F
X509v3 Authority Key Identifier:
keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0c:f0:cd:3f:aa:58:d8:a7:e1:16:3a:0e:23:38:93:cb:f4:
92:43:bd:d0:38:8c:99:c8:cc:3d:02:61:d6:80:aa:03:0e:95:
52:76:d5:2e:34:e3:5a:8a:ea:09:a7:ed:b8:62:34:24:fe:15:
00:01:f6:57:66:d1:92:3c:73:fe:ae:f7:e4:02:cf:96:a8:a9:
64:08:dd:b1:6b:1a:a2:55:cd:23:30:f8:73:89:46:69:82:fd:
63:fa:2c:51:2e:0d:8c:e8:2d:b1:c5:77:54:23:0f:76:10:14:
0e:10:36:3a:92:8b:1c:65:ca:c9:a7:85:c0:fa:9e:6d:dc:ae:
98:67:a0:29:4d:54:a6:20:e3:2d:c3:51:a6:31:71:93:89:fb:
c9:f9:34:1b:6b:9c:bd:b1:05:38:6a:32:ca:0f:af:3e:fe:2f:
ae:45:0c:23:02:26:66:6a:f4:fc:f9:a1:aa:7a:3e:21:b3:c0:
02:ec:2a:15:2a:55:63:10:eb:7c:52:cb:03:fa:10:61:96:88:
21:4c:78:27:93:db:37:41:4d:5e:b1:6a:7f:f9:58:56:58:cb:
6d:72:77:61:1e:e3:a3:24:ff:01:34:6e:7f:3d:22:56:aa:d0:
6c:99:72:da:60:f0:f0:7d:58:ea:c2:96:9a:2c:4e:7f:58:0d:
ba:fd:83:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGTNqkg9P0+fNjBB+4iXdJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NmFjYWM3MTMxMjM4NTZkNGFlNmMxNjA1NDYwMjY4NGRm
ZDA3Y2IwHhcNMjUwNTEyMjEwMDQ3WhcNMjUwNTEzMjEwMDQ3WjAzMTEwLwYDVQQD
EyhjYTllOWE5YTFmNzkzYzhjNjA0ZjAzMjk2ZGU5ZjRkMjA4ZmI5ZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tyDqa67akUFTSFlaJYXSFsAdcFy
tCklPvokiwW8lqZjGdqiNzH28cMJ5IHnDs4rtFTP+wsVgv35kOAdf3CvoPqsqdF7
OgHLtPNZ5YYcnT5RsGl7dkuDNGJjZTemuf4VJO6+5rphNzyhLhKCwqF6wUTo8qll
XasE8R5E7fuqyPld9Bt/9IF1knGykx79m/AXeMqU57ogdYXHlzuC36ph7AuCdJdI
HB0gNoTpYtEFK+NRbdCUfiKfpK7y2aSbLLxga1d492dsajkkaERsdOf7JqofwICW
fwPtseKxcLkHcJSD4LpeIMGrVjk46zuj3ZGxA4J0t3R1Rq3EMPbHMaiBXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqempofeTyMYE8DKW3p9NII+51/MB8GA1UdIwQY
MBaAFARqyscTEjhW1K5sFgVGAmhN/QfLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdyS3h4TVNPRmJVcm13V0JVWUNhRTM5QjhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MTg2ZTQtYTJhMC00YmRhLWJjODgt
ZTZlOTI4Y2U1MzRmLzEvQkdyS3h4TVNPRmJVcm13V0JVWUNhRTM5QjhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80MTg2ZTQtYTJhMC00YmRhLWJjODgtZTZlOTI4Y2U1MzRm
LzEvQkdyS3h4TVNPRmJVcm13V0JVWUNhRTM5QjhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgzwzT+q
WNin4RY6DiM4k8v0kkO90DiMmcjMPQJh1oCqAw6VUnbVLjTjWorqCaftuGI0JP4V
AAH2V2bRkjxz/q735ALPlqipZAjdsWsaolXNIzD4c4lGaYL9Y/osUS4NjOgtscV3
VCMPdhAUDhA2OpKLHGXKyaeFwPqebdyumGegKU1UpiDjLcNRpjFxk4n7yfk0G2uc
vbEFOGoyyg+vPv4vrkUMIwImZmr0/Pmhqno+IbPAAuwqFSpVYxDrfFLLA/oQYZaI
IUx4J5PbN0FNXrFqf/lYVljLbXJ3YR7joyT/ATRufz0iVqrQbJly2mDw8H1Y6sKW
mixOf1gNuv2DXA==
-----END CERTIFICATE-----
Generated at Tue May 13 02:48:13 2025 by rpki-client