Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
File: BcgcgJdDfNF58xkYPAKC6mzRylE.mft (raw, json)
Hash identifier: wzFNt8ceEDuKDo7MHcL1oJkaQPmTy0lvUetg6N2foPQ=
Subject key identifier: D5:CB:71:4A:39:31:52:AD:95:89:28:55:F4:CA:41:D0:F3:53:15:5F
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Certificate issuer: /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial: 0196C61569AE1B7FB8FFCA2E9EC67E81F77E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
Manifest number: 04F6
Signing time: Mon 12 May 2025 20:00:14 +0000
Manifest this update: Mon 12 May 2025 20:00:14 +0000
Manifest next update: Tue 13 May 2025 20:00:14 +0000
Files and hashes: 1: 0eEbXaLT72xMShRX80ks6Q4d5oI.roa (hash: qA3gKPtC1PDR4pbDhy0QBVS9nz5AKV5Uc6LznPWBGvQ=)
2: BcgcgJdDfNF58xkYPAKC6mzRylE.crl (hash: IgvULAw3tCEbcZU420rSOXt7yVXu4qTIsXdEfGHHEI4=)
3: z0nJV6Vj9yWOU_8BIeua9e3I6JE.roa (hash: YIrDiztONnsPy57n2ZnC2YoDiFkPGBFAHQe2Pe5+Gi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:69:ae:1b:7f:b8:ff:ca:2e:9e:c6:7e:81:f7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Validity
Not Before: May 12 20:00:14 2025 GMT
Not After : May 13 20:00:14 2025 GMT
Subject: CN=d5cb714a393152ad95892855f4ca41d0f353155f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:d6:d3:6d:4e:6a:13:b8:f1:87:fd:d3:3a:
01:2c:07:bb:bb:2d:db:af:0c:60:bf:d5:e9:62:e7:
4f:57:b6:ba:75:18:28:2c:cd:c3:2e:6a:f1:ba:45:
7d:2b:36:56:d5:dd:15:27:00:64:f4:a9:a7:70:df:
2f:a6:63:31:58:6d:1b:78:f8:74:f9:62:b1:3f:f9:
2d:3b:a3:c6:7e:2a:eb:96:c9:6d:b4:e7:50:c3:2f:
53:b1:06:f1:ea:92:ab:20:1d:a0:74:d5:0d:1a:25:
bf:96:8c:13:5e:c8:7c:c9:14:b6:be:b2:45:0d:e9:
37:ac:6b:13:00:a4:33:44:25:89:bb:8b:c2:bf:8b:
e4:fe:88:96:9b:df:48:a3:1a:d7:2c:4f:9b:33:dd:
48:f3:e2:43:f7:7d:1e:1e:a7:13:2e:97:c5:6c:7d:
70:06:20:3f:d0:f2:28:08:56:65:73:35:c1:97:1d:
fd:cb:bd:94:8b:07:17:a4:b1:c6:e4:e0:b1:43:a7:
70:e8:1c:70:e8:93:12:e6:48:18:aa:3e:55:33:1b:
ad:a6:c9:0f:be:6b:31:7e:93:29:ce:7b:f0:9f:ed:
f2:cf:26:22:b0:3c:14:fe:c6:04:d8:3b:97:9c:64:
6d:0d:5f:72:21:00:bc:14:02:ef:e2:e8:9a:34:45:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CB:71:4A:39:31:52:AD:95:89:28:55:F4:CA:41:D0:F3:53:15:5F
X509v3 Authority Key Identifier:
keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:75:1e:19:69:da:72:a3:c3:d4:1a:8a:8b:24:f6:04:ff:6e:
fe:82:97:55:ea:03:22:f1:b3:56:60:e4:5e:99:35:9a:ef:c0:
bf:11:09:b5:f9:a1:9f:9d:c7:9b:68:59:3e:33:a9:e0:8c:2c:
88:a6:c1:8c:b3:f4:ea:27:de:cd:1a:1d:e2:a7:91:f2:43:dc:
86:4a:8a:a7:5a:de:0b:91:e4:48:49:55:86:c4:e0:93:11:e9:
69:d0:c2:46:26:fb:e4:bb:d5:e7:1e:11:7d:2b:1a:19:73:61:
d0:1f:4d:44:c1:b4:13:83:f4:be:f1:c5:01:e3:33:37:77:d8:
b1:bc:85:eb:bb:55:c6:79:5a:69:1e:7a:f3:ee:30:a7:84:8f:
db:53:af:e4:98:a0:31:a5:26:cb:9c:c5:0c:e9:52:46:2f:92:
9f:60:72:2e:7c:62:c5:9c:ae:73:8f:05:5a:38:73:0c:2c:41:
87:2e:07:89:3a:73:de:88:24:1f:ba:00:b5:f3:53:62:2a:cf:
ea:0f:7a:ac:23:73:43:12:2a:c7:c0:ce:64:93:51:5c:b9:9f:
e3:4a:ce:c5:d8:3c:98:5d:ea:a8:42:28:61:ec:8c:50:70:ca:
04:bb:33:40:93:57:59:74:c7:0a:2f:79:75:ed:12:a8:60:cd:
88:0c:9e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:47:29 2025 by rpki-client