Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
File: BG82Rli2TivxUNIPyDjDZCB5deI.mft (raw, json)
Hash identifier: +tv/1znVA0k51ceOp451tBoz1PxhkV6JiJ6QZLf20KM=
Subject key identifier: 29:17:C0:E3:D0:DC:47:0A:03:6A:03:66:9D:F8:74:3E:EE:ED:3E:72
Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
Certificate issuer: /CN=046f364658b64e2bf150d20fc838c364207975e2
Certificate serial: 0197B6A0DEF70C6125A0F1571972E1805172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:25 +0000
Manifest this update: Sat 28 Jun 2025 13:01:25 +0000
Manifest next update: Sun 29 Jun 2025 13:01:25 +0000
Files and hashes: 1: BG82Rli2TivxUNIPyDjDZCB5deI.crl (hash: RjTDjSlUtngwhzPC7Y+M4biLOMxbG8jagep2uEZRXY8=)
2: PhqjprJzbWIvvB7osWR9awoye5s.roa (hash: XDqMhieQTxvY+bO6WNn9WVVliXKsbboocVQsGeYD0FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:de:f7:0c:61:25:a0:f1:57:19:72:e1:80:51:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2
Validity
Not Before: Jun 28 13:01:25 2025 GMT
Not After : Jun 29 13:01:25 2025 GMT
Subject: CN=2917c0e3d0dc470a036a03669df8743eeeed3e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:e6:db:ac:9e:42:19:16:fd:fd:08:7c:b8:
fd:8a:0b:86:a2:42:42:af:df:8c:86:53:71:65:02:
59:b1:35:b2:df:83:ff:9d:6c:a9:24:98:f8:f3:d2:
86:76:6a:8f:6b:07:ae:55:f6:fc:7c:58:42:e3:3e:
d8:88:af:8b:12:68:bf:f6:42:93:ae:b8:9f:7c:4d:
32:d2:71:21:de:5e:4e:90:3d:59:dc:f1:df:d3:1f:
37:c9:1a:6d:11:06:5e:5d:3a:dc:9f:92:63:3b:25:
2f:e8:8d:f1:01:96:d3:94:87:ba:b4:ec:a7:29:5b:
14:2a:e3:b4:96:5d:e4:63:3b:c7:4c:28:88:42:51:
ba:7e:a4:90:d6:b9:b2:50:1a:92:2d:f5:73:e1:dd:
d2:df:bb:9a:61:73:3a:ff:8f:9a:fe:20:4a:c1:20:
b4:34:ca:56:a0:ca:ba:97:12:0a:b4:c9:67:57:0c:
da:61:5c:f7:70:2d:dd:18:56:70:67:fd:30:31:ae:
88:f6:e6:d8:c0:de:bf:44:59:71:6f:a8:ab:98:23:
7a:0b:69:12:c3:c6:f7:9e:a1:69:eb:9e:5c:ff:83:
f9:68:e0:32:b8:7e:fb:dc:5e:a3:5c:20:6a:19:e1:
06:3f:a1:df:ce:e3:9c:44:ec:77:cf:2c:e7:0d:33:
16:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:17:C0:E3:D0:DC:47:0A:03:6A:03:66:9D:F8:74:3E:EE:ED:3E:72
X509v3 Authority Key Identifier:
keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:09:ce:a6:00:a2:b2:9e:d3:05:d0:08:8d:0f:67:ce:c9:1a:
5b:9c:4f:3d:08:dc:54:e1:fa:79:51:a0:80:36:ec:9f:1c:4d:
b1:12:80:6b:6f:76:88:40:13:b1:eb:78:81:1c:53:c9:73:e6:
0d:13:4f:f6:e0:dd:7c:2a:8b:0c:c6:2f:a2:7c:e3:5d:fb:3c:
50:67:16:46:d1:9b:cc:1f:49:7c:97:db:f8:29:87:2f:23:9a:
d5:f0:49:5a:4e:5c:11:3d:a7:88:9c:bc:7d:78:50:97:b6:89:
ac:37:4c:7a:e0:41:1e:84:b4:63:41:25:b3:4d:0d:3c:6e:16:
ac:dd:22:27:23:0c:cb:e0:b2:78:5a:16:47:71:9c:d0:3a:1d:
13:d3:a5:ed:18:a4:8c:29:78:32:50:84:a2:dc:55:1d:a1:70:
5c:45:d6:eb:7c:8d:6f:19:f9:cf:99:5a:f5:6e:97:06:44:43:
b8:67:4e:4e:a2:4e:78:39:69:6e:ec:c9:42:80:53:64:a2:80:
5e:49:a7:db:f8:b6:e0:c7:75:79:e8:e6:c0:97:7f:b8:fa:57:
b0:95:dd:3e:8c:96:55:98:4b:9f:28:b1:fa:67:b6:3d:bc:da:
63:2e:a9:1d:98:04:d6:07:80:b2:d6:c3:f5:eb:8d:0e:46:01:
b3:7f:b0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:38 2025 by rpki-client