Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File: BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier: 1ugtuO9efubu+mbRWrQrbY/f9b/3ZYnTaU4WE5TQ36M=
Subject key identifier: BB:1D:2F:44:C5:BC:21:0B:47:23:9F:32:67:7C:EE:BE:EE:31:7F:3B
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer: /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial: 0198D54E62A10030CAD43105B8D650097E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number: 0B00
Signing time: Sat 23 Aug 2025 05:02:20 +0000
Manifest this update: Sat 23 Aug 2025 05:02:20 +0000
Manifest next update: Sun 24 Aug 2025 05:02:20 +0000
Files and hashes: 1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: axEgpINEihfEUzt5m3DPbPiuw1CX1FcGvIZjttHhfF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:62:a1:00:30:ca:d4:31:05:b8:d6:50:09:7e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Validity
Not Before: Aug 23 05:02:20 2025 GMT
Not After : Aug 24 05:02:20 2025 GMT
Subject: CN=bb1d2f44c5bc210b47239f32677ceebeee317f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:06:b9:be:f5:5b:9f:b7:84:c4:3e:1b:a4:04:
ef:a2:ca:bf:4a:cb:ca:9f:ac:fc:18:a2:f9:e4:99:
11:63:b6:7e:53:bc:9a:34:37:55:53:c0:6a:1f:c0:
99:25:81:9b:00:11:14:b1:15:fc:ca:74:f0:91:34:
7b:88:35:49:d0:b7:44:38:ad:74:61:85:f6:54:e0:
db:52:f4:ba:96:b6:2f:47:f9:8d:cb:0f:83:1b:af:
c1:b3:c6:50:a4:c4:ad:20:8b:54:31:bf:b3:8d:aa:
0e:8d:9f:96:4d:74:ad:39:79:ad:97:d3:d9:56:fc:
2b:6e:52:85:ae:2a:a1:1c:e3:c3:43:bd:b2:f2:49:
32:c1:8e:3a:6d:5f:12:19:91:f7:7a:64:85:5a:ef:
2b:d0:de:ba:b9:29:1d:2a:11:73:a5:5a:e9:43:81:
ad:67:2e:78:b0:a6:0f:56:50:24:10:ad:53:b2:17:
8a:c6:b8:a1:5c:77:5e:c5:db:d8:fe:15:c7:8f:43:
9c:2c:f8:d4:55:0c:21:89:fb:60:df:b0:02:80:53:
d8:cc:9f:3f:25:4e:6b:c8:d9:a5:41:b5:59:42:4b:
50:fe:fb:94:db:ed:21:48:48:c5:05:bf:c6:ec:fc:
21:30:20:7e:99:96:07:36:57:33:9e:2a:7a:b7:89:
54:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1D:2F:44:C5:BC:21:0B:47:23:9F:32:67:7C:EE:BE:EE:31:7F:3B
X509v3 Authority Key Identifier:
keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:50:7b:3f:4e:e3:c4:ed:6f:c4:b2:0d:2e:f5:9f:70:d9:76:
2a:4e:af:e4:29:b8:c0:6b:40:b7:f5:34:0f:18:18:73:81:37:
3a:73:51:74:e4:fb:24:98:84:71:48:0f:b0:b7:6e:6f:9b:3f:
83:2e:e2:cf:be:21:38:44:49:b6:89:c4:10:af:d0:9e:e5:19:
7f:6d:4e:53:e1:e5:32:31:08:d4:a6:a9:ac:cb:5c:1a:71:a2:
eb:06:08:0f:c4:d5:34:0b:14:c9:83:03:02:1b:c4:f7:7f:26:
09:a3:6c:c0:6e:a2:fa:63:08:d0:6c:2f:78:8f:92:d4:41:40:
ba:7e:04:16:db:25:f3:d6:72:1c:60:d2:26:77:83:6a:8f:25:
a9:45:a5:a4:b5:10:c9:37:56:21:79:27:c5:13:00:63:80:cf:
bf:c0:74:a7:9c:58:1d:e5:3f:1b:0b:cd:bb:73:9f:c8:fc:45:
df:4c:50:ea:9a:42:1b:22:c3:ec:94:27:cd:36:cd:20:77:72:
3a:d4:9e:a1:f1:b0:3f:7d:de:b3:35:d2:6f:0b:16:c2:f0:65:
85:c8:06:2b:95:85:dd:42:3e:c4:db:92:a9:fc:18:7b:33:02:
91:c0:42:8e:38:c1:80:9e:7e:29:90:15:ad:6d:f4:ef:49:7e:
c2:36:d4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:11 2025 by rpki-client