Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
File: BgPfkU3wTkf1a9li8vncPwQ0pdM.mft (raw, json)
Hash identifier: r9h/sSppQefvxsGyd7PQKC8xvTyD8abCQqAvJDeBsaI=
Subject key identifier: 7C:02:23:8D:CB:E0:31:FA:9C:23:FD:78:E4:F2:32:B9:F5:EA:E8:F4
Authority key identifier: 06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
Certificate issuer: /CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Certificate serial: 0197B70EC88BA0E7E7DA35DB51F5177224BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
Manifest number: 0800
Signing time: Sat 28 Jun 2025 15:01:28 +0000
Manifest this update: Sat 28 Jun 2025 15:01:28 +0000
Manifest next update: Sun 29 Jun 2025 15:01:28 +0000
Files and hashes: 1: BgPfkU3wTkf1a9li8vncPwQ0pdM.crl (hash: BodfZCLiPYpb3LfO+3AAirRHyZ7C3E28wn65Ar6+EXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c8:8b:a0:e7:e7:da:35:db:51:f5:17:72:24:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Validity
Not Before: Jun 28 15:01:28 2025 GMT
Not After : Jun 29 15:01:28 2025 GMT
Subject: CN=7c02238dcbe031fa9c23fd78e4f232b9f5eae8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:f1:d2:80:8b:40:eb:69:ed:0d:0b:81:cf:
c4:86:93:dd:5a:e7:3e:42:d0:9f:88:d1:e5:48:a8:
7a:db:09:33:0b:47:47:b8:a0:2f:58:92:ba:e8:60:
8d:0c:86:0f:f2:d9:2b:4c:53:48:e0:04:91:b5:5f:
ad:36:38:ab:2d:51:f9:e1:24:61:94:5a:a5:c7:2a:
56:c0:2b:8a:ee:7b:d8:f5:f5:cb:3c:99:bf:29:ed:
46:57:44:2f:4c:04:9d:71:4e:5a:cf:1e:da:f7:6b:
57:b0:6c:a7:8d:c0:db:a5:a3:49:01:92:61:90:e3:
2d:fb:c1:94:4a:1a:59:93:63:91:12:72:52:52:bc:
9a:33:7e:06:5a:6b:4d:46:5f:c1:be:19:37:83:20:
e7:0d:96:71:83:1e:6d:f2:54:cd:56:cd:f7:78:1c:
46:d2:e6:03:d5:f0:1d:a3:43:a1:40:10:c3:bf:d1:
10:5a:1c:56:df:e4:d8:22:1d:aa:ca:b1:a2:f7:d9:
ec:40:c1:ef:db:d3:c6:a7:81:7c:ab:8e:c5:4a:0d:
66:f8:ea:71:f9:eb:2e:7c:d7:2f:76:2d:5b:00:ea:
71:8b:be:8a:60:cf:6c:f2:5e:bf:2e:9a:45:2b:1f:
40:59:b0:76:14:b2:f2:db:a8:d4:70:23:df:a3:ef:
23:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:02:23:8D:CB:E0:31:FA:9C:23:FD:78:E4:F2:32:B9:F5:EA:E8:F4
X509v3 Authority Key Identifier:
keyid:06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c2:88:fa:1c:cf:bb:ff:4f:5e:84:a9:3d:2f:a3:e8:9e:2d:
d1:e8:fe:fa:bc:6c:56:94:c1:86:48:28:24:04:2e:56:94:90:
95:b7:41:69:00:26:72:27:0d:9f:ad:1a:12:70:f7:9d:86:67:
a2:94:05:b8:4d:9a:a3:ca:f1:17:ac:40:9b:21:a3:39:67:6f:
ca:dd:e6:0c:dc:3c:d4:f5:d5:e9:f6:eb:88:f6:47:ed:e1:8c:
bf:6d:7f:98:71:b8:91:3b:44:38:e1:13:98:3e:a5:25:f8:33:
01:06:3f:41:21:b0:a3:22:b1:14:38:e6:a8:2f:94:8e:d8:a8:
07:29:5e:e3:11:27:c6:33:3b:c9:87:9c:fb:07:f3:b7:87:23:
23:1b:88:34:0b:8c:c2:d9:d0:56:ac:1c:1d:ef:b9:1f:74:a9:
17:51:d6:27:b4:c4:60:e5:2a:62:96:73:45:8e:dd:ff:31:5a:
fe:d5:80:77:88:11:cc:e7:1e:a6:6f:eb:f9:b6:90:c2:92:2c:
6d:67:08:a0:5d:46:03:f5:73:20:3a:79:e8:54:13:f4:98:27:
c6:41:47:f9:73:02:f1:18:29:e8:01:81:62:e9:78:47:39:a8:
e2:e1:36:17:e5:d2:e0:0f:7a:4e:5f:c6:56:84:74:36:89:92:
b0:5a:f6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:29 2025 by rpki-client