Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
File: BgOecctxUgSoPMJTgi3CmmLHmeY.mft (raw, json)
Hash identifier: sCW0papWxU+PzJ19cBslI1zd2kabpWGZ7LMkCUHbxes=
Subject key identifier: 89:FE:63:AE:E8:C9:5E:00:80:2C:AB:3C:2E:0F:FA:2B:B8:D6:72:46
Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
Certificate issuer: /CN=06039e71cb715204a83cc253822dc29a62c799e6
Certificate serial: 0197B6A1952E50919D2E644F943AFD2A875D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
Manifest number: 06C6
Signing time: Sat 28 Jun 2025 13:02:11 +0000
Manifest this update: Sat 28 Jun 2025 13:02:11 +0000
Manifest next update: Sun 29 Jun 2025 13:02:11 +0000
Files and hashes: 1: AzSimOOUCBaH0nGWbesdL3p-c-Y.roa (hash: tmnAHG5c86gcxksbrSaGyYNVU434mmJFa3fZgdZ+AZw=)
2: BgOecctxUgSoPMJTgi3CmmLHmeY.crl (hash: +KrYkFEAK+WmVjlOfFkTf/7pM7ByydeEOVuHhbGYnkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:95:2e:50:91:9d:2e:64:4f:94:3a:fd:2a:87:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6
Validity
Not Before: Jun 28 13:02:11 2025 GMT
Not After : Jun 29 13:02:11 2025 GMT
Subject: CN=89fe63aee8c95e00802cab3c2e0ffa2bb8d67246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:99:a8:c6:c5:02:26:47:a2:18:23:51:44:0e:
bf:30:3e:72:7b:b5:0a:cf:a2:d8:61:89:8d:27:da:
18:fc:8a:43:2f:77:6f:81:d7:f7:26:84:68:23:2a:
05:c8:1b:1e:33:cd:44:76:b2:ef:20:ac:bb:a2:f0:
a0:9c:97:17:2a:78:36:1c:f1:d7:18:51:71:1e:b8:
ee:8a:95:99:e9:14:85:5e:42:e5:33:30:e7:92:1b:
dd:e4:07:c8:eb:fb:ec:d6:84:fe:69:1b:1a:1c:c7:
b4:bf:eb:a6:c0:46:3f:a3:67:09:29:40:e7:10:48:
f5:1b:b9:ca:67:00:2e:6c:92:06:a7:78:61:26:86:
1b:46:c7:9e:1e:e4:e5:02:e9:65:a4:0c:bf:35:d8:
d3:be:8d:65:69:99:4b:b0:3f:5e:5c:8e:fb:99:e7:
5f:40:59:c7:42:50:d4:ba:1e:18:6f:37:d3:2a:94:
e8:10:5c:a0:92:44:3f:81:3e:81:f6:3c:d3:59:ce:
75:fc:21:04:f9:b6:44:af:3f:a2:0b:ed:60:53:0c:
99:57:aa:0c:73:b7:f0:18:a3:f6:e1:6e:b5:f5:1d:
35:e9:13:ae:40:20:e9:f0:6f:25:c9:ce:8c:25:c7:
58:44:d1:f5:d4:25:f7:ec:13:a6:83:03:e7:40:9b:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FE:63:AE:E8:C9:5E:00:80:2C:AB:3C:2E:0F:FA:2B:B8:D6:72:46
X509v3 Authority Key Identifier:
keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:4b:51:84:75:d0:39:e4:65:66:73:24:ae:3a:a5:7f:65:3c:
7f:ff:8c:7c:b4:a4:91:71:e4:0f:37:df:b7:ed:a7:a4:71:64:
0a:a7:08:cc:5c:ed:fd:0d:11:43:8d:55:81:fc:f0:01:66:1a:
a7:3d:f4:70:1c:03:46:2f:b5:91:76:b6:84:f8:c9:6d:bd:4c:
c4:53:91:fb:a3:1c:e9:2f:ce:36:64:a6:35:fd:7e:75:4e:7a:
f8:2e:97:be:42:eb:9c:6b:39:be:be:af:a7:ac:f6:00:d7:10:
cd:9d:22:29:b5:94:e5:67:c1:5d:3f:91:bd:ca:b9:9d:74:0a:
41:ed:07:a1:13:2c:7b:11:38:ce:70:ba:b0:7c:88:b1:ca:dc:
2d:6f:a2:8b:6f:7a:e2:40:3e:cb:8c:78:28:4e:4e:dc:02:68:
e5:f3:26:b9:26:b2:ed:db:d7:a7:de:02:ab:51:f6:d1:e9:4c:
fa:d4:b3:e9:c9:d1:13:32:8c:79:89:62:b4:85:34:6c:2d:46:
1a:67:ec:d0:30:4c:4c:40:96:08:fd:ac:00:27:ec:58:10:14:
02:53:a2:7e:92:06:a2:df:20:ed:ac:fb:f8:fc:e2:45:d5:09:
88:0a:3e:25:7e:43:f3:d4:cb:8b:eb:99:3e:a2:c0:f4:57:55:
9c:95:9c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:40 2025 by rpki-client