Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
File: BcgcgJdDfNF58xkYPAKC6mzRylE.mft (raw, json)
Hash identifier: 3Daos7DUy/Ikt08WJTRZyXkBCdHEz/AvqyqjTkxdqQ4=
Subject key identifier: 0E:71:63:92:B3:10:AE:18:17:22:B8:37:AC:02:7D:E5:48:E9:43:8C
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Certificate issuer: /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial: 0198D73BC88D3E1B5F2D47637181D32658BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
Manifest number: 0608
Signing time: Sat 23 Aug 2025 14:01:16 +0000
Manifest this update: Sat 23 Aug 2025 14:01:16 +0000
Manifest next update: Sun 24 Aug 2025 14:01:16 +0000
Files and hashes: 1: 0eEbXaLT72xMShRX80ks6Q4d5oI.roa (hash: qA3gKPtC1PDR4pbDhy0QBVS9nz5AKV5Uc6LznPWBGvQ=)
2: BcgcgJdDfNF58xkYPAKC6mzRylE.crl (hash: DZoHq49hNlR4zpv51w5ewYnUdTdiBNVENYHZncs5ye8=)
3: z0nJV6Vj9yWOU_8BIeua9e3I6JE.roa (hash: YIrDiztONnsPy57n2ZnC2YoDiFkPGBFAHQe2Pe5+Gi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:c8:8d:3e:1b:5f:2d:47:63:71:81:d3:26:58:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Validity
Not Before: Aug 23 14:01:16 2025 GMT
Not After : Aug 24 14:01:16 2025 GMT
Subject: CN=0e716392b310ae181722b837ac027de548e9438c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2d:cb:00:00:50:84:a5:4e:ed:fe:96:79:57:
aa:49:65:09:73:31:cd:0a:ac:94:79:03:b4:b5:be:
0e:2b:58:5f:ea:6d:fa:a9:0b:f0:6e:53:72:7a:8e:
f8:c0:b3:5c:b9:3b:82:33:62:7c:64:91:12:79:9e:
8f:14:30:29:1e:40:1a:ec:a0:d2:42:9a:fe:c1:c3:
2f:48:29:d4:af:5e:7a:93:86:2a:26:68:2d:b5:ef:
38:8d:29:4b:b7:bd:d2:9d:36:85:d0:d6:bc:74:b9:
e5:f0:57:96:7d:a0:15:c3:39:74:23:03:1f:7f:0f:
d5:d8:b3:26:d6:1e:58:ab:f2:24:cd:ea:de:19:89:
d1:20:a7:27:9f:a7:91:29:bc:b4:d4:40:97:c6:04:
43:33:9b:93:fe:fa:65:29:00:fb:c5:1f:be:8b:03:
18:45:d3:0d:f8:1e:a0:c5:29:08:ea:c4:da:04:3c:
16:b0:8d:da:97:60:03:22:7a:8a:0d:a2:2d:51:2e:
1f:49:b9:96:94:a4:7c:2e:0e:61:71:f1:43:e4:5c:
f1:ed:8e:eb:be:fb:b0:ca:74:0f:e6:52:6e:ac:8e:
83:b6:79:8e:83:63:aa:78:b3:f9:60:aa:d3:1f:51:
9b:be:74:70:50:24:cf:55:24:02:37:f2:8b:b1:07:
28:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:71:63:92:B3:10:AE:18:17:22:B8:37:AC:02:7D:E5:48:E9:43:8C
X509v3 Authority Key Identifier:
keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:18:fb:3d:8e:d1:c2:3b:61:7b:8c:cb:1e:12:2b:09:8b:0b:
36:a0:d7:4a:e1:74:bc:28:97:58:bb:b7:f6:17:fb:18:58:b2:
d5:c3:bd:23:f6:25:c2:49:da:b7:5f:d7:52:d2:25:d0:f9:e6:
4f:fd:43:f5:6c:a1:30:04:b5:b0:67:32:50:6c:b5:fd:7c:ce:
9c:b4:8d:a6:e0:06:02:ec:1d:90:d7:a5:bb:5f:85:24:ff:69:
b6:91:68:09:eb:f3:0c:ba:56:14:aa:55:79:97:85:8f:b4:2b:
5d:c2:5e:e7:17:06:ec:ff:3f:70:59:cc:e8:92:bf:25:92:e3:
fe:b1:d3:70:21:2f:22:48:62:e1:ae:b1:0c:b2:b3:34:ba:85:
8b:f3:d8:04:90:12:05:f1:60:1b:74:5f:44:34:60:c9:55:49:
a0:a5:80:3e:5a:b3:72:0b:12:aa:94:42:58:a6:bd:70:ac:0e:
ed:ca:6c:26:12:07:b3:4a:d5:86:aa:6d:8d:bb:5e:99:39:14:
79:80:72:86:b0:13:d1:18:30:0e:ae:e5:99:0d:04:43:d6:e0:
dd:12:a7:d8:5e:0f:b9:f2:15:72:70:19:0e:f7:28:bc:b1:d6:
e4:da:a7:6e:81:04:84:63:4c:8b:8f:2d:ac:4c:2c:d1:8d:61:
eb:7b:9d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:24:26 2025 by rpki-client