Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File: Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier: ETkwtAlbXjN/i6hKOcpocU+JN1VbpFlVqSyV0KRFqIg=
Subject key identifier: AA:1D:53:A7:0C:E9:2E:05:D0:B1:F1:E2:BE:33:37:2A:5C:F6:8C:9F
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial: 0197B6A05F7E8D9608BEC32954E5B0398650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:00:52 +0000
Manifest this update: Sat 28 Jun 2025 13:00:52 +0000
Manifest next update: Sun 29 Jun 2025 13:00:52 +0000
Files and hashes: 1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: kgZr0xWTzuhz379pJOtoYEjU2/4akSkNBIeUr8jWD5M=)
2: GqvJxk6cmO7Tb_I2mDvjscrokEE.roa (hash: yepd+YPVUD07Z1nRvo/cI6UMDSXFFH47vweszFDmLW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5f:7e:8d:96:08:be:c3:29:54:e5:b0:39:86:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Validity
Not Before: Jun 28 13:00:52 2025 GMT
Not After : Jun 29 13:00:52 2025 GMT
Subject: CN=aa1d53a70ce92e05d0b1f1e2be33372a5cf68c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4e:88:ed:37:0b:4c:4e:c8:d9:56:9a:1c:c4:
a1:ea:5f:db:e2:38:be:ac:06:6a:20:9d:2e:0f:84:
04:b3:55:2e:ee:e6:96:bb:dd:62:3a:9d:c8:e6:c4:
7e:fd:ce:3f:65:92:f9:55:7c:c7:b9:93:c7:d1:57:
1d:13:a7:a6:42:b5:00:a2:b6:b7:18:6a:c0:9a:63:
c0:20:f9:c6:2f:82:05:17:57:2c:5e:9f:7d:f9:aa:
b1:20:46:5f:04:bb:ce:6d:c3:4b:45:bf:48:84:c0:
54:56:23:da:4a:ff:87:93:ac:b6:e3:e3:06:70:a9:
98:9f:14:c3:9d:dc:84:3b:3e:f5:d6:87:fe:07:4c:
7c:0e:3f:62:92:bd:10:f8:31:3d:bc:42:b5:dc:bb:
d6:34:02:ca:64:3b:a4:11:4e:67:da:af:e4:b0:26:
be:aa:70:34:c5:2e:86:19:04:3f:24:5d:20:ea:b8:
15:55:ff:40:76:c0:bb:47:1a:45:6a:1e:64:1a:54:
20:af:9f:68:a6:be:36:bc:b0:f2:8b:c4:24:03:40:
dd:00:a6:76:15:91:d2:65:61:40:fd:41:9c:3d:ee:
de:e4:81:50:e3:0e:9f:ed:e5:6c:92:ef:f2:eb:09:
f9:dd:49:c5:d3:9b:5c:17:fd:fa:62:a7:33:2a:9b:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1D:53:A7:0C:E9:2E:05:D0:B1:F1:E2:BE:33:37:2A:5C:F6:8C:9F
X509v3 Authority Key Identifier:
keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:53:a6:dd:97:bd:a9:3a:25:90:a4:d6:30:66:9b:4b:32:ed:
73:01:4c:9f:39:72:fd:7d:29:dd:2f:2d:02:a7:ed:ab:de:fb:
77:03:f5:8b:8c:0e:fd:49:21:dd:d2:10:03:c4:8e:8a:aa:da:
2e:ac:7a:21:e8:58:b4:69:7a:89:e3:b1:eb:7e:02:9f:2e:1f:
78:18:5d:4b:66:1e:9c:7d:4d:5c:c9:8e:39:0a:07:ee:bd:ec:
f5:23:ff:64:fb:9e:40:1b:17:ed:66:f3:cc:01:5f:0e:4c:06:
00:29:f4:8d:aa:6f:18:f5:30:32:ba:4d:b1:d4:08:90:6e:2b:
83:e8:56:ba:c1:8c:2b:54:d4:58:12:02:62:a0:73:7b:04:86:
79:35:88:1e:55:5c:1d:e0:b1:d8:5d:79:bd:99:24:6d:52:ff:
96:61:21:bf:a2:40:f6:a8:70:1d:be:2c:a0:20:30:0f:61:d0:
46:a6:23:36:24:70:61:49:19:16:e7:6d:57:31:93:a8:99:61:
da:b3:e0:f8:5b:74:da:ec:14:02:63:3a:4b:a0:b2:45:e3:e2:
c5:80:dc:d6:fc:09:38:1b:d5:c7:4b:94:b6:6f:b0:e0:0c:5b:
00:02:d0:f2:38:7a:06:dd:32:2e:5b:d2:8f:50:98:03:86:8f:
8f:b2:0d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:47 2025 by rpki-client