Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
File: BGrKxxMSOFbUrmwWBUYCaE39B8s.mft (raw, json)
Hash identifier: GbWD1gMzoABxvO2oXpxFDRo7wWmv5CAU5eE294E4GEQ=
Subject key identifier: B2:8A:42:AB:C6:CB:0D:14:A3:28:B7:87:6D:8B:A5:1C:02:C6:76:BB
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Certificate issuer: /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial: 0197B5FC22264045537CBF5223B62C8EF70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
Manifest number: 03FD
Signing time: Sat 28 Jun 2025 10:01:29 +0000
Manifest this update: Sat 28 Jun 2025 10:01:29 +0000
Manifest next update: Sun 29 Jun 2025 10:01:29 +0000
Files and hashes: 1: BGrKxxMSOFbUrmwWBUYCaE39B8s.crl (hash: oVqB80M953KjwO1F4Am/kAc+iqlMR9h5Ox7VrSEY3r8=)
2: eKW1kuPZCd7Q2-wUVFiZHmqNaHE.roa (hash: E2zSiIhX/F8uFFD091DwlATetZWIqRRANFto/vLbHCQ=)
3: pudWPRPK-Wa6m4Pmer93cIZQrII.roa (hash: o79B3cprgcfu6XLm8f0k9H9gQI2spOpkuG4dS9wCxDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:22:26:40:45:53:7c:bf:52:23:b6:2c:8e:f7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
Validity
Not Before: Jun 28 10:01:29 2025 GMT
Not After : Jun 29 10:01:29 2025 GMT
Subject: CN=b28a42abc6cb0d14a328b7876d8ba51c02c676bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:da:c0:21:03:17:de:d5:df:2b:e6:11:1e:
ab:e1:7a:5f:c4:94:4b:c2:c4:a1:e5:07:04:83:6c:
78:76:c2:4d:aa:73:cd:7d:83:28:e6:98:d2:be:e8:
be:7c:2d:67:11:37:8d:24:ad:35:49:53:1f:fb:87:
80:3e:a3:bb:dd:16:f9:82:27:f7:c3:53:67:92:74:
ae:f7:b0:3c:79:7b:60:02:ca:53:7d:d0:8c:74:04:
8c:db:f2:40:0a:c9:d9:42:46:69:68:25:e4:62:89:
07:63:8f:a5:53:7c:23:a5:03:91:38:e1:d2:8a:ff:
5a:39:74:46:d6:57:59:03:a8:be:21:99:26:45:bd:
33:78:74:99:99:9b:f0:7a:ac:1c:a9:64:a2:c0:23:
64:0c:01:10:39:f1:58:40:e2:c1:8c:8a:76:1d:08:
56:fa:02:3c:16:81:f4:6a:59:15:06:ce:3e:08:d3:
b5:f8:ae:70:69:ab:39:07:22:bf:94:5b:34:3e:e5:
e9:72:07:57:7a:ae:6f:47:1a:fd:b9:bf:b3:ff:69:
62:41:b7:c5:68:73:dc:3d:1d:84:fb:96:f1:c0:48:
9b:c5:09:63:e5:3d:b1:9e:61:88:d2:c4:5d:b5:d3:
3a:cb:ad:dc:98:42:c5:a3:c7:30:cc:86:36:52:5d:
bd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8A:42:AB:C6:CB:0D:14:A3:28:B7:87:6D:8B:A5:1C:02:C6:76:BB
X509v3 Authority Key Identifier:
keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a5:46:21:c9:aa:60:b9:7d:98:d1:89:1f:87:b5:5d:2f:24:
ac:39:33:37:4b:2e:0d:66:7d:0d:46:1d:ad:eb:bb:ce:87:5f:
63:34:ba:7d:55:53:9a:49:41:0f:b2:20:ab:e1:30:b5:f1:06:
70:ef:c6:d2:f6:ce:62:be:17:6e:f8:72:de:5f:a3:86:95:cc:
86:26:0c:87:06:db:7f:1e:af:16:e4:b7:18:5b:a0:a6:2e:fc:
3d:e5:e4:3b:d5:94:08:8d:90:17:48:f1:32:57:ef:1e:89:14:
46:73:98:2f:be:f6:c3:72:fd:a9:de:03:1a:c6:00:eb:93:1c:
18:8f:94:61:13:39:6c:12:40:26:86:e8:08:e7:4e:e5:e4:f8:
ff:b9:36:fe:c3:37:41:97:bf:4a:fc:c4:44:f3:48:3a:54:6b:
d4:f5:41:ad:8d:ce:e7:63:47:24:bd:bc:6a:5a:fa:c8:89:6d:
14:30:91:ee:6f:2c:de:ec:e3:d6:8c:48:70:01:54:1f:05:22:
75:11:b4:1f:eb:cd:8d:f9:ae:0b:b3:cb:76:3d:00:68:2b:ea:
a9:a5:2f:15:35:23:f5:fc:47:79:a5:20:08:ce:ea:0e:dc:22:
f4:51:e6:ba:56:9e:a1:28:45:30:65:af:62:22:88:01:00:bb:
97:81:b4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:44 2025 by rpki-client