Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
File: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft (raw, json)
Hash identifier: fg6QPFtAExMJHRJdlQ73st8K/G5/Pi1Nto8NssW/Fxc=
Subject key identifier: 8B:9F:CC:FA:8B:CB:CC:92:A3:A3:90:AF:95:B8:7A:A2:50:AD:C0:22
Authority key identifier: 06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
Certificate issuer: /CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Certificate serial: 01984B54A3549469FADE9A0784EA717B1DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
Manifest number: 0ACA
Signing time: Sun 27 Jul 2025 10:01:34 +0000
Manifest this update: Sun 27 Jul 2025 10:01:34 +0000
Manifest next update: Mon 28 Jul 2025 10:01:34 +0000
Files and hashes: 1: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl (hash: kEaEQPSPMC0vYFIPpGV/v3NWq5pQn028aWrVAHcxaV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:a3:54:94:69:fa:de:9a:07:84:ea:71:7b:1d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Validity
Not Before: Jul 27 10:01:34 2025 GMT
Not After : Jul 28 10:01:34 2025 GMT
Subject: CN=8b9fccfa8bcbcc92a3a390af95b87aa250adc022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:ef:14:5c:e9:1c:39:0b:1a:61:d4:9e:c2:
59:68:d2:95:5a:d1:4c:d9:2e:54:27:6c:68:13:4e:
02:46:a9:ab:d5:ee:56:01:1c:d8:01:6d:e1:e8:af:
8e:51:5c:2d:14:70:16:27:36:d4:cb:7c:a2:4b:f7:
d3:67:bc:4e:82:0d:78:bd:5d:e5:14:a8:15:84:ec:
87:30:48:cb:7a:02:9c:52:67:e0:60:d8:9f:ba:79:
97:c4:ed:5f:df:98:a9:1d:63:a9:4e:b2:f7:2c:bd:
77:0c:c4:d1:f9:a1:90:8c:74:bf:b5:cf:d9:a6:11:
c9:bf:c8:3a:12:09:9b:b5:6d:58:fe:a0:b9:3d:40:
0d:a7:f5:73:b8:19:dc:70:b2:2e:32:ad:92:68:5f:
f8:f1:40:dc:dc:ce:ff:34:f4:41:74:c3:11:8e:cd:
34:07:84:a6:b3:a9:53:c1:84:9a:7d:2d:5b:62:d0:
0e:6a:54:cd:9d:23:07:2f:71:dc:7a:f0:40:b0:cc:
98:4d:ef:44:17:a4:a3:ce:4a:d3:2c:3a:43:bb:bc:
4a:73:0c:a7:9a:3b:5d:2e:8a:a5:ed:da:b0:2c:a9:
02:99:2e:fd:0d:c7:a3:91:5c:1e:ce:a0:d6:08:14:
6e:1c:e5:e4:9d:36:cd:24:4f:39:2e:c5:84:10:7d:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9F:CC:FA:8B:CB:CC:92:A3:A3:90:AF:95:B8:7A:A2:50:AD:C0:22
X509v3 Authority Key Identifier:
keyid:06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:63:28:56:a8:e4:eb:9b:a8:7e:52:6f:ec:b4:46:89:fa:6f:
90:7e:01:e8:6c:91:d6:e6:ce:53:d5:87:5c:61:e4:16:0c:60:
8f:75:0f:b8:70:8d:cf:06:1a:d7:a6:a7:74:c8:34:4f:0f:a2:
8d:14:36:cd:9d:1a:5d:9b:87:be:7a:c4:be:74:0a:82:d8:35:
22:04:64:38:9b:eb:94:49:5c:30:04:3a:8d:b9:69:0b:7a:1e:
80:4c:5d:7a:ec:61:fc:6d:e0:0a:e6:3b:b6:b2:86:fb:1c:5b:
bf:d9:44:31:c9:f5:01:c0:57:93:79:c2:a8:ae:7a:a2:a3:6f:
dc:ef:83:d0:28:0f:16:ec:e9:62:79:52:ba:4d:0a:ae:6a:da:
1b:fb:b5:42:e9:53:a2:62:7c:19:48:7a:2b:b4:42:a3:59:bd:
df:5c:a2:de:d8:99:33:3a:23:c0:86:0d:5e:b4:ae:c0:85:42:
79:5f:33:df:45:e6:a4:5f:fe:23:5b:95:12:dc:27:a0:c9:d3:
a6:a9:14:2f:bc:0a:a3:e2:b3:d5:39:6b:35:af:7e:94:08:24:
3c:e0:cc:c3:65:3e:7c:70:ac:18:dd:b2:96:3b:4f:b8:27:1e:
0e:c3:b0:5c:e1:43:27:81:ee:67:0e:11:04:54:c2:33:7b:cb:
a2:fa:f3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:16:14 2025 by rpki-client