Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
File: BgyexdQFhu0yVfD8T8sxV3FN2hU.mft (raw, json)
Hash identifier: m9BZqCHFhBKDjZANswGVGzV4XdClPHeIE+lhnYhfnPs=
Subject key identifier: 5B:D7:15:8A:41:FE:89:0D:56:3C:F2:B8:69:19:5E:0F:6E:DA:6C:A9
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 019857FD52ABC1C06FF3EAC0BFEFAE95EFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
Manifest number: 1180
Signing time: Tue 29 Jul 2025 21:01:16 +0000
Manifest this update: Tue 29 Jul 2025 21:01:16 +0000
Manifest next update: Wed 30 Jul 2025 21:01:16 +0000
Files and hashes: 1: BgyexdQFhu0yVfD8T8sxV3FN2hU.crl (hash: HyX3TEQhLKY8ji14XAQYE6WFyoQaUFFxyC1xc5uaBso=)
2: SvCn28QlY3H7uObVMGkQTVr8wro.roa (hash: lT4aO9UNqW5C6eAiY2SG9UDFdzGqTUCShh77rO3OfDs=)
3: zXLcc16Hl_V98UU7l_AMl_ZR3t0.roa (hash: zI4peklfsSU0BwGnCgTYFkA1twl5bd7IR0aRBdIFj54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:fd:52:ab:c1:c0:6f:f3:ea:c0:bf:ef:ae:95:ef:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Jul 29 21:01:16 2025 GMT
Not After : Jul 30 21:01:16 2025 GMT
Subject: CN=5bd7158a41fe890d563cf2b869195e0f6eda6ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:09:b4:29:89:2b:49:a9:da:7c:48:c7:49:
7a:8e:29:ef:b6:55:d4:f1:d1:14:25:01:e1:b4:3a:
9a:c2:cc:d9:e1:70:ae:fb:2f:51:39:51:ed:2f:4b:
7b:50:6e:4b:3f:a9:1a:e8:10:c4:8f:d4:34:8a:ea:
10:cb:4e:29:ea:1b:b0:e3:54:e0:8a:88:55:32:c5:
a3:f2:25:a0:92:6c:9c:db:cb:82:e5:17:8d:96:6b:
78:88:c0:c1:b6:b3:00:f1:3a:52:a6:70:4c:f7:99:
45:86:0e:09:e7:c9:71:1d:71:18:52:4f:04:e0:c7:
c8:66:7d:c1:fa:45:51:46:7e:77:b4:97:8e:b4:0d:
85:59:08:41:6c:78:b9:a8:b1:44:56:5a:70:f3:ef:
a2:c9:03:de:7c:90:77:3b:d1:fc:3a:31:64:41:74:
85:0c:aa:22:59:f3:e1:80:3c:17:9c:7b:26:ac:f2:
0a:6e:8e:f7:ad:82:de:b4:1a:49:b5:c3:8a:5f:35:
91:18:95:a3:a9:52:21:bf:0d:84:21:01:88:83:81:
5a:88:7d:28:eb:2b:65:09:bb:dc:83:81:6b:01:33:
13:d0:b4:a8:49:ae:5a:29:69:b7:20:dc:66:b4:54:
e8:13:a8:f4:e9:c2:59:7e:7c:7f:d7:53:24:50:c8:
ef:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D7:15:8A:41:FE:89:0D:56:3C:F2:B8:69:19:5E:0F:6E:DA:6C:A9
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c6:8a:34:8b:4c:fa:d5:76:56:c9:2f:c0:f6:6d:35:53:fb:
b2:f5:e9:3a:25:f3:c6:8b:66:4a:f7:3d:3d:37:69:65:d7:04:
aa:5c:bb:88:96:9d:18:8a:48:f5:69:53:62:24:35:c3:0a:b9:
36:48:19:74:0b:1d:18:2b:88:5a:08:d8:b2:31:b1:31:8a:ec:
89:cc:17:8d:7a:f5:80:5c:86:e6:9a:5a:f3:0e:38:0f:e0:a4:
db:a3:3b:ec:e3:05:5d:d6:52:3e:fa:fd:16:30:bb:ee:76:b5:
06:2e:47:02:25:a4:37:8b:fe:d4:20:5b:a7:bc:ad:b0:2b:b7:
1e:11:2a:0b:29:b0:66:e2:6f:96:f1:5e:d6:7f:b6:52:df:77:
0e:dc:c0:8c:d1:0d:96:22:fc:84:61:fa:40:07:5c:97:f1:c4:
2e:a1:cc:ba:57:41:4d:08:96:f8:fc:9d:03:34:b9:d1:7a:21:
3c:f2:8c:e3:da:88:47:7c:c5:1e:98:93:0d:70:30:e3:54:04:
d9:9a:c2:04:3a:42:63:9b:b2:8a:95:d5:af:8b:4b:e7:79:47:
69:ed:a4:02:34:d6:bd:57:b0:ca:b0:5f:74:7d:47:b1:d3:9e:
fa:4e:4d:ff:bd:32:f7:06:8e:ca:9f:0c:59:49:91:5b:64:f5:
8f:d7:3d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:35:29 2025 by rpki-client