Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
File: BGelYhGyHprHzcj7Y58xCpLCEEw.mft (raw, json)
Hash identifier: Mq7dHwt2t096OvSSck9g1TLWWQeRQJ47UlVkLzjJgVs=
Subject key identifier: C0:BC:AB:24:42:18:B1:7E:A6:80:E7:7F:99:B9:E3:B8:9B:CD:8E:9F
Authority key identifier: 04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
Certificate issuer: /CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Certificate serial: 01984B8AD708716E9322B0457D55D7F25FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
Manifest number: 0CE3
Signing time: Sun 27 Jul 2025 11:00:46 +0000
Manifest this update: Sun 27 Jul 2025 11:00:46 +0000
Manifest next update: Mon 28 Jul 2025 11:00:46 +0000
Files and hashes: 1: BGelYhGyHprHzcj7Y58xCpLCEEw.crl (hash: 6tZxUuOtlW5JD43rVKqblCDCcnxNLnF9TPrj/xRdxbk=)
2: vBbw-4MxcReP3ao6MqHjBCu3GcI.roa (hash: W28uSnDMlGVkrCQsXwIvXwkvC/TrS+441MfK9XqL5Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:d7:08:71:6e:93:22:b0:45:7d:55:d7:f2:5f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Validity
Not Before: Jul 27 11:00:46 2025 GMT
Not After : Jul 28 11:00:46 2025 GMT
Subject: CN=c0bcab244218b17ea680e77f99b9e3b89bcd8e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:4f:4c:76:11:08:d5:9f:e0:97:85:ef:c9:
ae:be:7a:ad:e0:6e:6b:d2:e4:9b:c8:45:cd:93:38:
99:04:d4:cd:f4:28:58:8c:e8:26:69:5c:37:e9:54:
0f:90:84:f4:5b:93:49:c9:22:f9:d9:c9:ea:41:19:
ef:0a:00:a3:53:37:14:8d:6c:30:a3:98:14:ee:9c:
cd:ba:75:ce:fc:8f:91:f5:44:66:4b:ae:78:27:12:
b9:df:96:49:32:4f:5d:ba:9f:13:8c:27:b4:5e:78:
f8:59:21:8f:70:e6:7e:4f:68:d0:6c:d5:f1:19:c2:
e1:ca:5d:6f:d5:c5:f9:a1:1a:c0:69:15:30:73:f8:
ee:38:b0:99:86:75:7b:38:eb:f4:1f:30:87:ee:80:
3d:06:33:ab:be:b7:fb:90:01:fc:7b:a9:57:6b:08:
e4:42:fe:34:8b:37:ea:87:2f:2a:e4:b3:9d:13:29:
fe:b6:6b:1c:b3:6b:88:fc:30:70:da:df:35:20:8d:
ac:fd:31:26:d5:90:a8:a8:46:5b:d6:98:50:9b:80:
7d:d9:78:57:e5:3e:9e:a1:c3:cd:3e:08:2c:80:16:
31:11:0b:14:27:32:e9:83:c7:d8:cc:34:b7:23:1e:
c9:29:cd:a3:83:21:ab:82:70:28:d4:11:c4:b8:2c:
90:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BC:AB:24:42:18:B1:7E:A6:80:E7:7F:99:B9:E3:B8:9B:CD:8E:9F
X509v3 Authority Key Identifier:
keyid:04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b2:6a:f5:c4:a1:57:4b:56:35:fd:ac:b7:fe:15:02:ed:0a:
ff:7a:a4:2f:49:91:cb:ed:58:1d:e1:1f:08:d8:2d:6e:37:cc:
24:90:f1:29:3a:8f:d3:30:f8:b0:d1:22:a5:d2:1d:a6:2e:99:
bd:90:b9:70:aa:20:8d:1c:3e:2a:42:ce:8f:2d:2e:5e:55:80:
02:d9:ee:39:1b:ed:2b:e8:16:ee:b0:a5:b7:8d:51:8f:94:ec:
9a:27:04:14:f2:95:ee:83:f9:93:8d:5b:f7:b0:8f:c8:3e:7e:
34:33:7e:db:8e:17:ba:de:ee:2e:83:b2:46:fb:6c:3a:bd:9b:
ea:5e:59:11:70:10:49:10:2f:86:2e:ad:07:15:ae:21:30:c5:
6e:75:45:0b:c1:c2:d6:ce:9f:36:a8:8b:38:fc:68:ef:c0:68:
15:5b:6f:58:25:c0:d5:31:35:61:24:e6:3b:a1:9a:55:43:9d:
11:25:4b:4d:0c:1c:ba:85:13:fd:82:cd:63:c1:f5:3d:15:8a:
fa:10:30:a7:ba:14:62:a5:6e:e1:7c:7a:8e:6d:59:2c:b0:e1:
4e:94:c4:23:11:42:23:db:c7:27:5b:4f:b1:e3:d6:0d:e6:41:
eb:ac:86:a1:41:f9:58:29:c7:c6:f7:52:a6:78:e2:7d:fb:6b:
64:40:96:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:41:18 2025 by rpki-client