Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
File: BgOecctxUgSoPMJTgi3CmmLHmeY.mft (raw, json)
Hash identifier: wS16ruWilY2muigSaDR6SuCN3iyL/uyz9a2ziGR9cYE=
Subject key identifier: AA:36:C7:DF:EC:89:59:81:0D:46:DC:BB:1D:49:C3:14:C9:B6:45:80
Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
Certificate issuer: /CN=06039e71cb715204a83cc253822dc29a62c799e6
Certificate serial: 01984B53CEE3A097ABEE5723ED6805F94A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
Manifest number: 0713
Signing time: Sun 27 Jul 2025 10:00:40 +0000
Manifest this update: Sun 27 Jul 2025 10:00:40 +0000
Manifest next update: Mon 28 Jul 2025 10:00:40 +0000
Files and hashes: 1: AzSimOOUCBaH0nGWbesdL3p-c-Y.roa (hash: tmnAHG5c86gcxksbrSaGyYNVU434mmJFa3fZgdZ+AZw=)
2: BgOecctxUgSoPMJTgi3CmmLHmeY.crl (hash: fiEm3qbkc50TBI0wu7fRnzSyNr+GH25egYmr7FYgoRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:ce:e3:a0:97:ab:ee:57:23:ed:68:05:f9:4a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6
Validity
Not Before: Jul 27 10:00:40 2025 GMT
Not After : Jul 28 10:00:40 2025 GMT
Subject: CN=aa36c7dfec8959810d46dcbb1d49c314c9b64580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:1e:03:3d:0d:8e:52:bc:40:00:48:7f:11:
55:e1:16:70:b1:30:99:b3:3a:d4:9d:57:29:89:b3:
2a:c6:7a:07:ac:02:c6:de:77:64:ea:5d:e9:fb:b1:
43:7f:26:35:f6:7f:3a:14:15:24:ab:d7:0a:60:dd:
e9:56:e6:66:26:f4:fc:57:c3:e4:41:54:d3:93:26:
41:a6:5d:26:5e:87:6b:b5:b0:ed:45:99:cb:d1:aa:
72:f4:37:b3:c8:85:40:33:ca:40:0e:a6:bc:83:a2:
f9:a1:a7:22:61:1c:d8:24:e7:e3:f5:95:6e:a7:78:
3c:ae:8a:97:41:2c:18:d4:9f:5c:6d:01:97:5f:7b:
85:2d:a5:fa:df:87:c5:2a:31:51:51:16:e7:c0:ad:
5f:83:ce:91:41:0a:99:31:cb:5d:f9:a1:5f:db:16:
67:48:8b:8e:13:64:48:fd:d6:df:15:01:77:4b:d9:
db:af:80:bd:42:d6:e0:b1:d3:2f:da:54:a4:6e:64:
12:ed:63:2d:18:64:74:c7:8b:78:99:da:5e:ec:ef:
5b:94:97:16:f4:94:be:70:7f:bf:67:7b:b6:3d:72:
c3:95:18:ff:ad:63:1b:56:a8:33:33:aa:3b:04:a0:
72:67:b6:8f:9a:a6:18:9c:41:a8:98:ea:b1:64:04:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:36:C7:DF:EC:89:59:81:0D:46:DC:BB:1D:49:C3:14:C9:B6:45:80
X509v3 Authority Key Identifier:
keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3b:34:ed:40:f4:69:56:1c:da:f4:25:b6:d0:36:c0:0a:76:
9e:e2:ce:dc:93:b0:29:ca:b0:a4:d5:3f:af:40:f8:93:dd:87:
d7:d0:b3:7c:5c:0d:b8:00:e4:6f:c5:f8:42:83:88:b1:85:2e:
b4:9a:8e:34:4c:41:47:d3:9f:8b:63:bc:9a:bb:b1:ad:34:ab:
d1:07:27:8e:0c:fa:54:3d:39:b8:cc:c7:0b:64:4f:fb:0a:48:
73:fc:ba:d5:8b:de:36:aa:1e:50:89:87:4c:04:48:d8:7c:1c:
16:79:39:c1:57:16:e9:c0:88:2c:07:49:c1:30:e2:f0:27:0f:
c7:aa:9d:6a:bb:8c:98:45:db:6d:06:a3:c9:af:d5:08:d9:6f:
09:5b:ee:c3:b0:3d:bd:6e:1e:2e:aa:a9:3c:c5:b1:57:6e:55:
5f:61:9c:8f:3f:0f:ba:ab:55:32:1d:5f:d6:90:e3:ab:43:06:
52:48:00:17:ad:0b:63:2a:fd:07:3a:ff:7b:db:dd:80:7f:e8:
8e:be:da:99:73:e1:e1:49:ac:3f:d6:0c:c6:6d:03:a2:86:39:
ee:3f:a1:f3:79:b2:23:35:c1:8a:11:44:e9:60:dd:ec:ce:d1:
cd:57:0c:7a:14:f3:a6:ba:55:da:ed:25:b8:d4:28:86:a2:3d:
dc:c8:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:14:56 2025 by rpki-client