Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
File: BGrKxxMSOFbUrmwWBUYCaE39B8s.mft (raw, json)
Hash identifier: wLfjrCbGRHWWrtZ5FE1WTOYpFpLcwO7oYRqDsjn9s9g=
Subject key identifier: A1:84:B6:C4:22:25:47:F5:FD:5B:C7:9D:7F:16:64:E3:DD:E5:1E:30
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Certificate issuer: /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial: 0198D7A8FB1CCB112A0E542C56A353BF9DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
Manifest number: 0493
Signing time: Sat 23 Aug 2025 16:00:32 +0000
Manifest this update: Sat 23 Aug 2025 16:00:32 +0000
Manifest next update: Sun 24 Aug 2025 16:00:32 +0000
Files and hashes: 1: BGrKxxMSOFbUrmwWBUYCaE39B8s.crl (hash: B6nr5vjh29EgMfJ+BIUGGB19N741KsOMzT0zJZ6pkVQ=)
2: eKW1kuPZCd7Q2-wUVFiZHmqNaHE.roa (hash: E2zSiIhX/F8uFFD091DwlATetZWIqRRANFto/vLbHCQ=)
3: pudWPRPK-Wa6m4Pmer93cIZQrII.roa (hash: o79B3cprgcfu6XLm8f0k9H9gQI2spOpkuG4dS9wCxDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:fb:1c:cb:11:2a:0e:54:2c:56:a3:53:bf:9d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
Validity
Not Before: Aug 23 16:00:32 2025 GMT
Not After : Aug 24 16:00:32 2025 GMT
Subject: CN=a184b6c4222547f5fd5bc79d7f1664e3dde51e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cb:48:93:5b:19:fe:e9:65:41:1c:83:af:1e:
11:a2:83:60:63:61:60:60:4c:d3:32:d1:e5:3a:d2:
fd:4d:17:69:18:0b:74:9d:0e:cb:65:16:59:37:ad:
5f:a9:36:48:3f:89:bb:81:dd:fd:66:c1:97:ee:cd:
9a:ae:9f:b8:fb:f9:bf:39:91:15:7b:d3:68:ab:be:
ad:f7:35:97:04:a7:9d:bc:db:d0:0d:e9:92:af:f2:
a4:47:f4:56:1a:dd:f1:51:cb:97:4c:ba:a7:f4:9a:
a9:56:57:d0:e0:f3:04:9f:97:ee:32:75:aa:ed:b7:
3f:97:58:4d:95:aa:e5:96:91:36:83:7e:98:28:36:
3a:a2:53:42:6f:e9:91:10:1e:a1:7d:ea:8b:72:b1:
66:00:51:cb:dd:3d:00:af:16:59:bf:18:5d:f7:23:
d1:b1:2b:8b:c6:19:24:0e:06:ea:7f:7b:8b:9f:91:
04:02:cc:a8:f6:b7:d3:42:86:af:1b:a1:62:8b:75:
2d:a5:ea:0a:ec:21:48:2a:c6:35:0e:ef:bb:9a:31:
73:e3:f8:7d:e5:08:67:d2:6b:2d:c7:6a:11:3a:d3:
6a:e9:6d:21:02:a0:90:6b:79:03:33:2b:9a:df:98:
96:99:d1:28:33:01:aa:ce:17:45:62:40:fd:a4:7d:
4a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:84:B6:C4:22:25:47:F5:FD:5B:C7:9D:7F:16:64:E3:DD:E5:1E:30
X509v3 Authority Key Identifier:
keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:da:99:91:2c:3a:45:da:23:9b:52:f2:48:ba:30:0e:b3:ee:
85:4c:03:44:81:2e:25:a4:dd:98:77:9f:4b:ba:66:cc:e6:2c:
27:a1:25:3f:7e:60:23:a9:3d:bf:bc:b9:3a:5c:be:17:83:04:
ec:13:9a:19:21:86:1c:e0:d5:dc:84:cb:5b:f6:c7:cf:e7:e2:
fe:c2:a2:f7:6b:ee:05:ac:39:84:94:36:12:5b:48:56:89:ec:
e0:45:b0:62:fb:11:89:b8:32:4f:98:c4:31:4c:69:63:5a:9c:
84:08:d0:9f:d0:9e:bf:e7:d5:fd:7d:ab:c8:98:a4:43:e2:1a:
22:dc:fa:65:42:24:b3:d4:6e:ea:12:93:15:ac:e2:6a:70:23:
90:0e:f1:a0:14:42:18:32:c0:35:e0:fc:bb:54:93:b5:b3:9e:
b6:5c:7b:b9:be:a3:e6:2c:22:b1:5b:59:48:e1:84:8a:d1:c0:
d4:28:74:1f:ea:99:ee:57:3c:76:8e:c3:f0:27:95:d6:56:0e:
3f:a5:4c:e7:3e:a1:af:ff:e7:f8:6e:8a:82:77:ce:52:9f:c2:
19:a2:b9:c1:4d:16:14:d5:db:fd:ab:3d:fe:cd:93:83:6b:c7:
f2:8d:96:08:04:b4:c0:9b:33:46:86:c9:d7:b2:3b:d7:a3:27:
81:f6:94:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:20:51 2025 by rpki-client