Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
File: BgecQppxRvH5qgSb20LKlRRLdNo.mft (raw, json)
Hash identifier: KRb6OAhi0LvAso4XrCHQYYYfRrUh9Fx9bi5cTQy7dEQ=
Subject key identifier: 4C:38:33:9F:AA:91:8D:DA:7B:FD:8F:FD:67:17:58:08:F2:2B:06:4E
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Certificate issuer: /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial: 0197C86FF952E7E784D7D63C0A9C34C7E01A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
Manifest number: 15C8
Signing time: Wed 02 Jul 2025 00:01:10 +0000
Manifest this update: Wed 02 Jul 2025 00:01:10 +0000
Manifest next update: Thu 03 Jul 2025 00:01:10 +0000
Files and hashes: 1: BgecQppxRvH5qgSb20LKlRRLdNo.crl (hash: 6WMT06UU4mbjIr12Fl+9pgtWJD7pPhhMK+x2vVC0aOE=)
2: LrxwZvPINeksQvETDOEipmKUBtE.roa (hash: mTC/swC0iM7xlEfSlqCGI1ogIVmyM2L2H3WafcUtAOE=)
3: vQy6a6NTEAZwwzZEgqZ7s7CD2Sw.roa (hash: eCRwk/+JF3YykOACMbGT9h5ea0SspdLqSge077r4Iz0=)
4: vYyERfzMQqwkNDEj2uOXG_S6t8w.roa (hash: WXsRMU1133zUyQTKxrB9Bygige89E8eXSL5nflVhMAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:6f:f9:52:e7:e7:84:d7:d6:3c:0a:9c:34:c7:e0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Validity
Not Before: Jul 2 00:01:10 2025 GMT
Not After : Jul 3 00:01:10 2025 GMT
Subject: CN=4c38339faa918dda7bfd8ffd67175808f22b064e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cc:01:f9:b0:bc:34:28:08:f7:c2:70:88:8d:
18:3a:37:2f:96:a2:57:0d:d1:1b:0d:42:e8:4a:11:
39:cf:5d:ee:00:90:11:54:0a:72:59:fa:97:6e:4b:
d7:e7:b4:30:e2:06:05:24:de:93:36:80:13:0a:7e:
e8:40:95:85:b3:18:ef:8e:ab:68:16:dd:66:16:4c:
65:63:15:aa:73:93:f5:02:38:5a:61:a7:25:ed:5d:
cd:78:cc:e1:e3:97:d9:18:28:c6:9f:3c:c8:c7:80:
e5:d3:15:fd:10:7f:1e:25:4c:47:9d:fd:51:89:b1:
54:62:c2:7a:70:c7:83:57:cb:b6:3c:2a:e8:67:22:
f2:d3:a5:c7:66:2c:15:5c:2f:2b:0a:ba:24:c5:78:
6d:6a:d5:f3:23:8d:8c:3a:8f:40:40:fa:4f:a7:e9:
3f:03:73:18:55:8a:aa:de:ed:99:8d:a7:a4:3c:6d:
e5:6f:ac:81:6e:b8:8e:1b:91:1c:dd:92:62:93:be:
f7:3f:e6:25:79:f8:d9:88:da:d3:98:73:a6:82:f7:
b2:95:5b:da:8f:42:55:14:a2:9d:c3:96:98:35:5c:
5f:a7:08:b5:42:03:0b:14:e2:cb:75:05:50:1c:4e:
f3:73:61:70:a6:4e:24:9b:88:35:ce:4a:f7:7f:29:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:38:33:9F:AA:91:8D:DA:7B:FD:8F:FD:67:17:58:08:F2:2B:06:4E
X509v3 Authority Key Identifier:
keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ad:a3:8e:f4:5d:a7:e5:a9:74:fb:fa:28:09:22:b5:9b:b6:
22:f0:e7:f2:78:50:bc:2b:aa:e3:ba:c2:c6:65:66:4d:2b:79:
d7:c8:57:bb:77:52:23:22:a7:c2:e3:9a:ed:32:90:32:d9:e9:
84:cd:3e:54:e0:ab:23:a8:69:e2:c4:90:a5:b8:18:d9:20:98:
87:03:3f:aa:e5:d0:f1:c8:0c:3f:ee:e3:5f:38:a8:08:b3:29:
bd:23:f6:5c:dc:8d:bc:b6:be:56:f2:3f:bb:97:a4:6e:54:83:
5a:ef:08:bb:ce:2f:2e:f4:d9:00:b4:d7:d9:7c:08:e7:0f:4b:
aa:7a:9e:50:e8:d7:17:54:83:0e:17:44:e0:b3:39:9e:30:39:
ef:52:04:a9:51:d1:3b:86:61:74:1a:3a:ac:e9:46:91:ae:5f:
ce:b1:5c:29:3e:72:38:df:b8:74:6e:97:b8:5a:5e:73:8b:f7:
1c:ec:3f:a9:c4:3d:3a:c4:67:b2:37:9f:4d:37:86:e3:09:10:
04:a1:1a:a6:f4:01:07:e4:80:39:35:0e:db:eb:2b:f9:c6:28:
26:25:67:08:e3:c1:db:e4:7d:56:99:60:9d:57:c7:98:8e:a4:
09:d4:1f:fa:c9:ae:a3:11:7c:a0:18:c7:06:08:5f:43:c2:5b:
86:0c:69:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:23:44 2025 by rpki-client