Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
File: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft (raw, json)
Hash identifier: zg6TFV7fVAmuw5wjy8bk1LCldqf7FcRfophAqvfKSms=
Subject key identifier: 0D:B1:3B:E4:BD:A8:8F:AF:19:C2:F5:BD:FE:15:D8:E1:FA:1F:CA:B8
Authority key identifier: 6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67
Certificate issuer: /CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
Certificate serial: 0196C616052044A21314EB449DF21E557DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
Manifest number: 1038
Signing time: Mon 12 May 2025 20:00:53 +0000
Manifest this update: Mon 12 May 2025 20:00:53 +0000
Manifest next update: Tue 13 May 2025 20:00:53 +0000
Files and hashes: 1: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl (hash: GqpJMe6xPrBSecYQ8PHorphMS9GVyOIdJjJuw2a+AFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:16:05:20:44:a2:13:14:eb:44:9d:f2:1e:55:7d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
Validity
Not Before: May 12 20:00:53 2025 GMT
Not After : May 13 20:00:53 2025 GMT
Subject: CN=0db13be4bda88faf19c2f5bdfe15d8e1fa1fcab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:34:83:b1:31:4c:a0:bf:8e:40:1d:d9:9c:e7:
31:c0:84:d8:46:72:1d:7d:5d:84:d4:7b:b0:3e:b1:
ff:c3:b6:fd:5d:16:4b:6a:f7:c7:59:87:5f:8f:fd:
e7:f3:cd:a2:98:76:cc:b3:42:8f:83:3e:35:66:00:
b4:76:e3:8f:e9:77:f7:72:cf:92:64:1a:2a:ea:c2:
61:4b:b6:5c:89:d7:31:c9:9e:9a:78:29:df:50:49:
29:f3:68:cd:e0:ab:cb:84:a3:f5:3c:3a:b7:d5:f0:
08:b0:e6:df:12:aa:13:1b:98:e0:26:ef:4a:9c:8e:
f2:7b:32:49:23:45:67:82:f7:49:05:e2:11:5f:cf:
18:14:86:1d:57:b9:ee:96:9d:d0:f2:4f:10:1f:17:
bd:c5:39:88:2e:aa:4a:e8:d7:71:c7:e1:a1:7a:dd:
e5:86:a9:0d:05:22:60:12:5f:b6:eb:96:9a:6e:fa:
a5:b9:76:56:56:29:9a:87:84:64:14:26:e1:1c:d2:
73:63:d7:3d:58:b5:76:9b:b1:3e:60:03:53:00:97:
69:18:9d:67:4b:b1:60:76:69:fa:89:8f:86:bb:66:
bb:6d:2b:67:a4:5a:c0:6a:b9:4b:01:e2:51:be:c6:
ff:f0:bd:c0:27:91:0e:a7:e5:b2:33:ed:59:e5:2f:
3b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B1:3B:E4:BD:A8:8F:AF:19:C2:F5:BD:FE:15:D8:E1:FA:1F:CA:B8
X509v3 Authority Key Identifier:
keyid:6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:55:15:5f:75:b8:3b:a4:9d:ea:c5:b3:df:14:9e:e9:ba:67:
9f:4a:a2:a1:de:41:bb:86:b9:f4:5e:fc:5f:87:97:31:ff:f6:
67:ec:97:56:9f:b8:1e:f9:c0:d1:3f:35:e2:1b:2b:9e:43:99:
37:6b:f6:6a:3d:3e:a2:26:79:ef:6a:3a:8c:ca:21:ad:06:cf:
79:44:27:7b:1d:08:f4:1d:9f:45:55:6d:fe:71:3e:d0:03:64:
65:94:cf:9e:34:db:17:be:1b:40:ae:a1:11:68:e6:3e:2b:c9:
6a:7e:5b:f4:34:8b:60:9d:f7:89:be:c0:c6:86:1d:cd:7f:be:
b0:56:7f:c4:a6:ba:9c:eb:be:81:d7:fd:61:af:bb:12:ce:ee:
b2:6f:6f:2c:1a:04:30:df:57:6a:a7:4d:67:85:32:3e:81:50:
20:86:71:8f:8f:c5:ca:69:53:4f:22:8a:08:01:b5:64:78:b8:
66:0e:69:4e:2a:c8:e5:92:cc:3b:98:16:4c:23:d3:30:6a:d9:
e9:76:51:b1:1d:a8:b4:57:53:b4:7e:2e:59:1c:b6:70:96:0a:
8a:76:87:24:87:68:d0:00:f5:ef:10:7c:30:82:1c:7d:62:8d:
9f:02:01:cb:91:ef:c0:b8:88:01:f3:91:55:fc:0b:e5:67:36:
c1:70:a8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:39:13 2025 by rpki-client