Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
File: BG5SgQdApuwTSZPbya0RtkVNmno.mft (raw, json)
Hash identifier: JkEeCRtrk5hyht2cGGAU5wxOWRCDvfGw/lFxlrF2ewI=
Subject key identifier: 0A:53:D5:29:2F:01:C6:CD:D2:F1:E2:02:0F:E3:68:BB:3D:F1:21:62
Authority key identifier: 04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
Certificate issuer: /CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Certificate serial: 01984AE571400F4405BA2F04AFB5C5B6CCB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
Manifest number: 05F5
Signing time: Sun 27 Jul 2025 08:00:07 +0000
Manifest this update: Sun 27 Jul 2025 08:00:07 +0000
Manifest next update: Mon 28 Jul 2025 08:00:07 +0000
Files and hashes: 1: BG5SgQdApuwTSZPbya0RtkVNmno.crl (hash: HDUEo7wYO8LGu4KZU3CXd6qkTjD0P4AXFTR6heOShIU=)
2: V1gcgrRQvSf2dtL0E41D42XNa0c.roa (hash: J5zYvKNdV+l5Y6eVeDRqi8ebNs+g0KhpZ1mPMI4wWZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:71:40:0f:44:05:ba:2f:04:af:b5:c5:b6:cc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Validity
Not Before: Jul 27 08:00:07 2025 GMT
Not After : Jul 28 08:00:07 2025 GMT
Subject: CN=0a53d5292f01c6cdd2f1e2020fe368bb3df12162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ca:81:d1:0b:24:67:27:f9:11:15:0d:32:46:
8d:b7:63:05:c0:7c:0a:be:79:3c:86:5e:b1:a0:bd:
b0:0a:17:04:c9:0e:9a:a1:84:49:93:c8:cf:4f:88:
14:2c:bb:15:6e:9d:a6:81:71:6a:7b:38:0a:5d:ee:
b9:9b:10:7e:69:48:1c:cb:2d:d3:c9:3d:0b:d0:75:
90:af:6d:fd:fc:43:b9:e7:4c:65:6a:63:a0:e8:a0:
5e:2e:6e:2f:09:5d:96:55:93:e7:8a:23:5f:21:f7:
85:25:8f:b2:2e:0d:29:1a:71:83:d8:cd:3f:8e:1c:
dd:dc:2a:64:6e:17:ce:39:0a:d5:d0:c8:53:86:88:
87:9f:18:1b:0e:25:38:2c:87:ce:98:50:ac:4e:ed:
b6:bb:50:aa:a2:a9:cf:bb:d1:34:da:24:8f:93:1b:
ae:cc:c7:40:11:0d:e5:37:56:11:78:6e:f5:9a:99:
5c:49:f9:ee:03:d5:62:64:80:00:b5:34:39:48:ee:
e6:36:01:ac:67:61:67:4c:94:3d:bc:fe:84:14:b3:
f5:39:5a:91:af:08:e3:84:8a:dd:58:00:d8:af:de:
69:89:80:7d:3b:49:f6:1f:ef:61:9c:18:4c:e6:9c:
a7:64:43:d0:5c:0a:93:3e:bc:30:00:c6:5e:51:3b:
3c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:53:D5:29:2F:01:C6:CD:D2:F1:E2:02:0F:E3:68:BB:3D:F1:21:62
X509v3 Authority Key Identifier:
keyid:04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b3:f3:3c:b7:c6:0d:d9:41:0c:9a:c6:5e:50:de:eb:62:9a:
c0:44:79:89:dd:6f:4f:85:ca:d4:9b:d6:52:6f:13:54:c5:62:
87:96:80:e9:e3:9c:44:80:ea:9e:88:38:68:5d:34:55:f7:f8:
61:da:10:ab:e6:e4:c3:92:f3:74:8c:0a:33:7b:5f:17:a2:ed:
36:b7:19:1e:5b:f8:a3:45:7a:8f:14:cb:26:19:ae:3c:10:a9:
a3:b8:2f:75:de:a0:6a:0e:79:4b:44:56:4a:85:cf:25:c8:cf:
8c:05:44:2a:b0:73:23:2f:59:f6:ff:50:f7:00:f8:b6:ee:e0:
02:f0:24:38:64:89:fb:ca:02:26:dc:e1:3c:f1:64:57:71:e8:
bd:87:55:3c:b6:b5:6b:ef:b8:32:29:8b:70:3c:97:bc:5d:cc:
41:de:86:2e:fe:41:32:d7:21:a1:65:4a:69:c1:2a:33:f2:ae:
36:41:1b:a0:9a:72:54:c0:d8:66:8c:31:74:ce:dd:2b:d2:f8:
be:06:59:67:8a:93:ae:3e:a3:37:76:55:3a:3c:75:93:1d:29:
54:5c:90:b4:20:39:a1:5e:ef:4f:45:cd:cf:d5:f7:6e:6f:55:
6e:0b:98:5d:3b:7d:47:f6:0f:77:33:56:37:ee:c4:fe:0a:b6:
d0:1f:83:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:08 2025 by rpki-client