Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
File: bgC7pk9Ra41jNaAc8wS4It7hrtA.mft (raw, json)
Hash identifier: sg9HuoSs4xedd8/75t2Vapw5Xb0HU4vTdU+wUj/KLRs=
Subject key identifier: 01:F2:41:C5:16:31:E0:99:15:0D:69:C9:8C:08:32:1D:91:34:50:74
Authority key identifier: 6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0
Certificate issuer: /CN=6e00bba64f516b8d6335a01cf304b822dee1aed0
Certificate serial: 019853E930AE22C542E83DAE54CE4DAADBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
Manifest number: 1604
Signing time: Tue 29 Jul 2025 02:00:47 +0000
Manifest this update: Tue 29 Jul 2025 02:00:47 +0000
Manifest next update: Wed 30 Jul 2025 02:00:47 +0000
Files and hashes: 1: bgC7pk9Ra41jNaAc8wS4It7hrtA.crl (hash: Rh98h70qYx2xGI1foAvXntXdbG8Ab6ucYyYSj8eHoXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:30:ae:22:c5:42:e8:3d:ae:54:ce:4d:aa:db:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e00bba64f516b8d6335a01cf304b822dee1aed0
Validity
Not Before: Jul 29 02:00:47 2025 GMT
Not After : Jul 30 02:00:47 2025 GMT
Subject: CN=01f241c51631e099150d69c98c08321d91345074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:9f:f9:dc:02:e7:68:a7:ff:56:59:d0:e8:
0a:a9:56:c8:f9:7a:89:4b:ba:6c:36:ca:4a:2e:c5:
93:96:34:82:2d:0b:78:b9:78:6e:e9:c2:5a:83:32:
e7:be:76:19:af:27:2a:43:1d:58:fe:a8:c1:e3:92:
ed:cb:a9:be:2d:45:71:a8:8c:e8:8c:08:5a:74:67:
b4:96:a6:c7:a5:72:3b:8f:92:a4:76:02:de:f3:64:
44:83:c9:55:d5:fa:04:c9:c6:ac:69:99:bb:67:37:
eb:d6:6b:af:29:d3:a9:a5:48:02:ec:06:dd:d7:51:
c2:7c:88:92:1d:d9:6a:54:a4:1b:b7:a3:22:76:ae:
3e:eb:e4:0e:25:ce:c5:5c:1b:d7:b8:7c:1c:60:a5:
6f:bc:3a:ba:ee:a7:22:ea:1a:b6:c3:5f:06:b3:dd:
84:c1:35:1f:fd:45:64:40:56:f4:6d:b8:58:54:bf:
b1:6f:3e:97:2b:3f:6c:63:d4:ba:8c:a1:f5:1f:95:
0b:a6:7c:d6:93:ac:a9:81:a9:92:2d:ef:97:07:31:
56:2c:e5:0d:d4:95:29:8d:62:7b:07:08:d1:04:92:
08:ce:d0:09:cc:26:01:6e:ad:c0:a4:07:f6:b7:96:
d7:8b:4e:a8:af:d0:4d:5e:35:5d:6b:69:84:77:0c:
eb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F2:41:C5:16:31:E0:99:15:0D:69:C9:8C:08:32:1D:91:34:50:74
X509v3 Authority Key Identifier:
keyid:6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:94:de:59:8f:8e:6a:3e:4f:5b:38:2b:04:32:8b:8d:13:27:
7a:0b:52:03:27:13:89:74:18:b4:d9:12:65:5b:b3:5f:15:70:
41:ca:b3:76:e8:1b:9e:88:f9:4a:d9:7b:9e:d2:3b:8e:61:b0:
7a:10:40:4f:77:5b:8e:fd:52:a1:80:19:da:bd:d2:6b:c6:c7:
cc:7d:57:2e:ee:be:24:4f:c8:a9:88:2d:51:96:13:ac:e8:d2:
46:62:33:6a:7c:45:6d:7a:81:d2:73:7c:f0:76:98:7d:b1:0f:
37:ea:a0:cc:56:fd:ae:a5:01:7d:67:06:0e:7d:6d:73:89:8b:
89:77:ac:bf:38:29:a9:a3:2c:36:af:9f:df:4b:69:f1:61:5d:
f8:b8:01:87:88:1d:28:a4:6e:80:78:39:8b:b4:f6:ab:70:27:
39:5f:7e:38:ba:7a:4d:a9:6b:31:22:a9:91:0d:00:21:5a:cb:
69:11:f2:43:1e:15:66:15:62:0e:63:15:64:e0:9e:a6:ad:80:
c6:c5:ac:0c:f2:e1:b0:49:06:26:7a:be:d0:de:32:f2:f7:db:
0e:66:c0:e4:1d:13:9c:93:57:8e:a7:66:ad:7f:cc:df:b7:4c:
08:a0:ac:b1:c2:70:73:77:04:29:b0:05:54:13:73:cc:f7:19:
bf:ca:38:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:51:05 2025 by rpki-client