Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
File: BGrKxxMSOFbUrmwWBUYCaE39B8s.mft (raw, json)
Hash identifier: tSo41s19wzY5iBohwpWgzfreC09yfptyS0P89thZAqY=
Subject key identifier: 3C:94:B9:3F:80:D2:C7:23:01:2B:A7:DE:7A:7A:6E:FD:4D:02:A8:A0
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Certificate issuer: /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial: 0198526868137DCCB23581CC405E58F278AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
Manifest number: 044E
Signing time: Mon 28 Jul 2025 19:00:30 +0000
Manifest this update: Mon 28 Jul 2025 19:00:30 +0000
Manifest next update: Tue 29 Jul 2025 19:00:30 +0000
Files and hashes: 1: BGrKxxMSOFbUrmwWBUYCaE39B8s.crl (hash: BhfzJiW0/6ZnhCD1Pyr9MxvMOfLBOeiAg/3hBvCujR8=)
2: eKW1kuPZCd7Q2-wUVFiZHmqNaHE.roa (hash: E2zSiIhX/F8uFFD091DwlATetZWIqRRANFto/vLbHCQ=)
3: pudWPRPK-Wa6m4Pmer93cIZQrII.roa (hash: o79B3cprgcfu6XLm8f0k9H9gQI2spOpkuG4dS9wCxDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:68:13:7d:cc:b2:35:81:cc:40:5e:58:f2:78:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
Validity
Not Before: Jul 28 19:00:30 2025 GMT
Not After : Jul 29 19:00:30 2025 GMT
Subject: CN=3c94b93f80d2c723012ba7de7a7a6efd4d02a8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:2d:4e:0a:03:38:d3:09:13:10:84:e1:8f:
ee:96:8e:99:91:aa:77:60:44:67:da:6a:95:90:96:
4e:6b:d1:94:12:aa:86:ce:4c:62:12:cc:07:22:d1:
65:75:c5:3e:9e:08:ae:c3:f8:72:0f:99:81:48:01:
e6:70:c0:00:ce:ff:de:0c:83:52:37:f4:52:43:b5:
31:d8:d8:de:e2:d4:b5:04:7c:59:89:5b:c5:9e:e1:
7a:44:0d:a4:77:76:4b:e1:5b:1a:38:ba:f5:03:08:
f1:32:55:18:6f:bf:df:19:74:fb:ff:75:de:88:e7:
09:fd:66:05:70:23:9d:ad:0a:df:59:ac:fa:c7:6c:
76:c7:9e:06:6c:bb:2f:a3:8d:fd:cd:d7:0a:27:cf:
d7:db:8d:b4:9f:e8:56:53:42:ca:4c:3d:01:6a:27:
78:df:55:f0:d0:e5:b3:83:7c:cd:a8:e3:af:93:9a:
2b:3c:7c:f2:0b:23:e4:2e:94:dc:51:b0:7a:39:0b:
52:72:f3:12:87:d0:61:6e:0f:56:6f:5d:16:bd:02:
c4:2f:e3:2f:00:ba:ab:f0:c5:7b:bf:9d:d5:6a:19:
89:96:cd:bd:b0:f2:46:19:72:8c:d7:ad:09:99:6b:
71:cf:be:be:f6:b9:3a:6b:04:de:7f:4d:b3:bf:0d:
20:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:94:B9:3F:80:D2:C7:23:01:2B:A7:DE:7A:7A:6E:FD:4D:02:A8:A0
X509v3 Authority Key Identifier:
keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9a:60:cc:c2:d5:21:e2:d3:98:8d:a4:7d:d8:e7:90:e4:2d:
4e:ad:a1:b8:63:26:36:ee:4c:37:6c:b6:71:bc:99:95:23:17:
11:fb:bd:f9:f6:70:18:d3:06:ae:f3:4f:4d:35:74:82:70:5f:
d6:f2:60:31:5e:59:fe:dc:05:e0:70:cf:3b:0d:10:07:c8:f0:
fd:38:fc:be:02:a7:57:a4:83:60:e6:4e:20:5e:b3:2e:ec:68:
c5:cd:a5:71:86:86:3a:70:0e:cb:2d:33:a6:b9:29:e3:1b:db:
74:52:9f:03:89:15:c6:bb:ff:ca:68:5d:85:13:9c:06:c2:8c:
3e:d1:21:9a:89:4d:13:bc:7e:ef:bb:60:33:b7:26:14:0f:17:
ab:d1:3c:e4:75:79:18:69:78:0b:30:b0:66:0d:0d:17:b0:08:
66:40:0c:ec:06:7f:da:9c:4f:0a:0d:25:70:cf:12:7c:e1:4a:
3e:4e:ac:bb:40:74:4c:be:7e:9d:ee:c9:9a:bb:79:5b:e2:f6:
ca:81:af:4d:2d:88:94:4e:b8:5e:5c:6c:fe:2e:4c:a4:92:0a:
0d:81:fc:68:cc:1c:4e:7e:8c:97:ff:b9:f4:c8:74:fc:d4:55:
55:6c:7c:cb:ce:fc:64:71:44:d9:b7:08:07:c1:e8:b0:d2:7d:
80:70:5d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:41:01 2025 by rpki-client