Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
File: BgOecctxUgSoPMJTgi3CmmLHmeY.mft (raw, json)
Hash identifier: YI4qFEiCV2ZYHMz9pyhftA6qmqxAsSqAB1rjTnbg8Fg=
Subject key identifier: E7:8F:7D:AC:69:77:76:C8:D4:0C:C3:41:E6:5E:73:66:90:8D:8B:1A
Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
Certificate issuer: /CN=06039e71cb715204a83cc253822dc29a62c799e6
Certificate serial: 0196B1B334BBC669A8E30043679CFE86A1E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
Manifest number: 063F
Signing time: Thu 08 May 2025 21:00:33 +0000
Manifest this update: Thu 08 May 2025 21:00:33 +0000
Manifest next update: Fri 09 May 2025 21:00:33 +0000
Files and hashes: 1: AzSimOOUCBaH0nGWbesdL3p-c-Y.roa (hash: tmnAHG5c86gcxksbrSaGyYNVU434mmJFa3fZgdZ+AZw=)
2: BgOecctxUgSoPMJTgi3CmmLHmeY.crl (hash: zzbxnm6Vivhlk7tDg8k5iJ04ktdd3xhRwm7w58MQIK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:b3:34:bb:c6:69:a8:e3:00:43:67:9c:fe:86:a1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6
Validity
Not Before: May 8 21:00:33 2025 GMT
Not After : May 9 21:00:33 2025 GMT
Subject: CN=e78f7dac697776c8d40cc341e65e7366908d8b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:87:3e:8a:97:aa:ba:78:25:3a:ca:dc:36:c8:
e8:2b:ff:0c:44:ab:37:9b:47:02:28:34:26:1f:3f:
18:a1:6b:b8:21:6f:e7:19:87:5a:50:8c:32:78:7b:
8b:4a:00:81:e4:88:dd:ee:60:53:4e:a6:77:53:3d:
4a:be:0b:69:7a:57:fa:11:3e:d7:d5:fd:ce:18:00:
88:36:5a:f4:56:db:a4:19:d7:15:d6:5f:f1:57:3c:
03:55:17:3b:07:e6:f1:9f:78:95:3c:bd:e0:2f:7d:
2a:cb:b6:f9:fb:ac:ae:26:7d:48:07:fe:80:5e:70:
e7:6b:80:a9:6b:0b:87:42:01:76:74:40:df:da:e6:
b3:df:66:c0:64:dd:5a:dc:17:35:32:07:bc:f7:1e:
c7:1c:a3:b9:b4:d5:4a:cb:eb:0b:90:31:77:f2:67:
93:76:df:5b:08:44:06:3f:0c:7d:1b:c0:5e:66:c4:
27:95:95:9c:ca:03:f3:86:07:53:f3:e0:3e:09:8c:
d9:09:a1:f3:7c:bf:5e:b5:7c:c6:80:7e:97:5d:d2:
e9:0b:a3:a7:ac:96:fd:fe:f8:54:fb:62:7d:f9:31:
7d:51:0a:1a:0d:ad:04:5f:04:22:f6:48:4f:96:f4:
04:f7:2a:e7:b7:32:c9:7f:8f:43:20:ba:82:7b:90:
69:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8F:7D:AC:69:77:76:C8:D4:0C:C3:41:E6:5E:73:66:90:8D:8B:1A
X509v3 Authority Key Identifier:
keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:03:4f:05:44:56:38:10:43:33:84:6d:e1:c8:a6:c2:c1:25:
95:a6:e6:5b:dd:02:51:8b:2f:d3:27:f1:f2:92:01:72:55:86:
29:20:c6:aa:a8:20:08:e4:e6:51:4f:52:50:48:78:01:28:70:
7b:86:6e:2f:ef:74:73:3c:ca:29:55:34:8e:73:e0:20:25:11:
bf:87:40:ad:86:bf:6e:98:64:b6:8c:28:4e:90:1e:86:e8:d1:
e5:45:80:97:31:c2:5a:2a:01:b6:f9:a6:e9:63:4c:7e:90:e6:
4a:9a:ba:f2:a8:ff:1e:26:cc:65:62:f6:21:31:70:f3:67:15:
6c:e5:c2:94:6d:aa:73:13:4a:f6:0b:9e:08:32:0b:75:29:11:
6c:1b:5a:a2:20:b9:f6:a0:2d:9c:23:1b:49:d2:74:d5:b8:83:
bb:ce:c0:55:a3:6c:22:3e:ad:ff:bb:30:0c:85:67:3d:2c:88:
cb:4f:5a:ea:e2:71:27:2e:b4:fa:c2:5c:24:ef:6c:4d:b8:bc:
59:a5:33:29:c8:4b:ec:83:db:24:36:3f:2c:cd:00:7f:59:a7:
d8:e8:c7:37:29:22:5b:f1:69:c3:c9:ea:20:46:5a:46:6c:ea:
03:ca:c6:95:4d:6a:38:eb:d6:4d:df:24:a4:ac:4e:ec:ab:9d:
6c:f7:47:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:01:32 2025 by rpki-client