Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
File: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json)
Hash identifier: 6KUBMuEBa3Koz0lQtd1vavZpxsRo3hMKj1WhkZUSwuQ=
Subject key identifier: 9F:CC:5E:13:B1:CA:BD:0D:DD:BC:DC:58:82:BB:72:0E:B6:93:90:EE
Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Certificate issuer: /CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Certificate serial: 0197B89092CD742CAB24BD368648AACAE12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
Manifest number: 12A5
Signing time: Sat 28 Jun 2025 22:02:51 +0000
Manifest this update: Sat 28 Jun 2025 22:02:51 +0000
Manifest next update: Sun 29 Jun 2025 22:02:51 +0000
Files and hashes: 1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: H/A6kV3IRPmZai5TF86luJXHZFRq2pYpUdRlUrXOAjQ=)
2: Y8uuAfRYwx-prudgnWgSWZq97Sw.roa (hash: tQZOFDuCS8oLjLePLd8o7D+wQ3I3iTNhsHY9sfMRza8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:92:cd:74:2c:ab:24:bd:36:86:48:aa:ca:e1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Validity
Not Before: Jun 28 22:02:51 2025 GMT
Not After : Jun 29 22:02:51 2025 GMT
Subject: CN=9fcc5e13b1cabd0dddbcdc5882bb720eb69390ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:e7:2a:d2:e1:16:d6:4e:fb:e7:e8:ae:bc:
8c:c7:8e:ca:70:b7:3e:33:b9:0a:8f:de:a7:5e:43:
48:ea:31:bf:08:e3:8b:cc:0e:7e:75:f9:50:02:95:
09:14:02:6e:7a:73:64:50:d6:67:3d:d4:5f:b4:1f:
b9:41:62:f4:a7:65:63:b4:e4:95:72:bf:39:9d:e9:
ce:52:0a:7e:d0:81:6c:0f:97:03:95:1d:93:b6:e9:
7c:7a:28:0c:65:8b:f3:1a:71:50:a9:4c:37:a5:e9:
76:7a:6e:70:a7:93:1c:be:4b:cd:b2:ee:bf:ee:b3:
b6:12:cb:88:de:8a:2a:d2:23:1f:ff:28:2c:4c:84:
24:3f:2e:14:62:a9:d9:e8:0b:fb:42:04:39:a9:aa:
38:ab:93:11:ac:83:44:17:8e:46:6c:a0:70:bf:b0:
ad:42:88:fc:57:8a:9e:7c:03:c7:55:f3:fd:dd:95:
9c:3e:de:f2:31:fe:c9:c5:11:2b:8c:57:d2:78:6b:
34:c8:5a:fa:8e:14:fa:37:c1:9c:b1:00:19:e4:36:
63:76:e9:b3:f4:03:dc:17:02:a2:96:59:c8:f7:b0:
3b:6f:cc:7e:65:54:d3:83:ee:9a:19:64:18:9c:61:
cf:66:eb:7c:8d:ed:e0:4c:12:67:b5:e6:de:1b:78:
01:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CC:5E:13:B1:CA:BD:0D:DD:BC:DC:58:82:BB:72:0E:B6:93:90:EE
X509v3 Authority Key Identifier:
keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d5:bd:0f:bc:50:a2:21:e6:9d:a9:25:d7:03:d2:fd:54:07:
b7:e0:9f:b6:43:59:50:56:e0:5f:15:08:6d:09:ab:c6:5b:38:
e6:37:1d:0a:04:75:41:aa:da:b4:5a:73:da:1f:07:f5:13:6b:
09:74:26:45:b1:af:36:0c:83:6d:53:67:36:da:65:ef:9c:81:
31:f6:14:a1:6d:a0:c5:05:e4:42:17:d8:d7:64:4f:aa:89:20:
4f:1d:44:49:88:de:9d:b2:6f:45:3f:ae:5f:ce:7c:44:45:84:
f1:f9:a3:ba:47:db:7c:12:b1:26:2d:23:bf:7f:a9:4e:bd:cb:
87:1a:6b:52:8d:e5:81:b2:fd:47:0e:55:52:30:66:0c:54:fc:
2e:da:e0:62:1e:a9:11:47:40:cc:7a:a2:59:17:96:b5:82:97:
11:9b:36:d0:d6:f7:79:dc:1d:19:60:7c:18:e1:70:6f:c4:9f:
03:b0:2d:53:d8:23:80:77:e7:09:cd:b7:11:e4:ce:85:da:89:
b6:e3:3a:a3:aa:ee:2a:b5:31:ee:95:e7:d7:e5:6b:a0:a3:8a:
fd:ac:19:05:d8:87:93:f7:89:d8:c4:e8:cb:2c:40:eb:b2:63:
a0:33:ad:13:7d:17:e6:83:7a:15:07:67:b4:c9:d1:b5:94:d5:
1e:ab:b8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:36:30 2025 by rpki-client