Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
File: BgOecctxUgSoPMJTgi3CmmLHmeY.mft (raw, json)
Hash identifier: 3byw3xR3HlOnIMglZ0u+Lh1w8krHHFvKPv2yLsm1j5Q=
Subject key identifier: D5:46:FC:9E:71:8A:5B:4F:70:D5:C9:BB:75:1D:E7:D9:C1:88:87:69
Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
Certificate issuer: /CN=06039e71cb715204a83cc253822dc29a62c799e6
Certificate serial: 019655007E66377D8BD781372A745D70F625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
Manifest number: 060F
Signing time: Sun 20 Apr 2025 21:00:17 +0000
Manifest this update: Sun 20 Apr 2025 21:00:17 +0000
Manifest next update: Mon 21 Apr 2025 21:00:17 +0000
Files and hashes: 1: AzSimOOUCBaH0nGWbesdL3p-c-Y.roa (hash: tmnAHG5c86gcxksbrSaGyYNVU434mmJFa3fZgdZ+AZw=)
2: BgOecctxUgSoPMJTgi3CmmLHmeY.crl (hash: B6p3py7LLF1aizDEzbyA49cui0taZ9DlXP25i/yNz30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:7e:66:37:7d:8b:d7:81:37:2a:74:5d:70:f6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6
Validity
Not Before: Apr 20 21:00:17 2025 GMT
Not After : Apr 21 21:00:17 2025 GMT
Subject: CN=d546fc9e718a5b4f70d5c9bb751de7d9c1888769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:dd:05:e6:fc:7b:08:6d:75:31:02:76:5c:
79:09:fa:86:73:78:14:5f:1b:01:29:23:fe:67:f3:
f8:61:56:14:e7:46:43:25:0e:77:0d:68:85:1a:a3:
9e:30:f0:2a:b1:42:6e:3f:ea:ab:85:43:fe:fc:fe:
d2:01:91:cc:5d:72:fd:a9:96:9a:6c:39:f4:6e:28:
92:ac:91:45:e1:7f:c2:d1:35:05:bf:e3:22:87:8f:
a2:31:4a:c3:44:d3:7e:17:e1:30:a3:42:83:af:84:
6f:8f:5f:ca:4c:03:de:b0:5e:47:3b:c2:1f:56:b9:
b0:90:fa:a9:30:7d:d6:5f:14:cc:77:5e:ff:bb:45:
ad:07:f8:9e:f2:a1:e0:d6:6e:20:f8:8d:d7:39:35:
00:44:77:a1:b3:50:1a:6d:20:9d:b9:24:7c:fa:3d:
69:57:26:70:92:38:50:93:b0:57:24:a2:8e:12:60:
d0:d2:f1:24:88:38:80:52:0a:a2:58:72:ac:74:1b:
d7:36:a7:09:57:0a:b2:96:15:9f:86:47:6e:f6:9d:
81:da:71:71:6a:c3:5c:06:6b:ae:c3:c5:4f:32:02:
2e:1c:ad:fc:5c:13:59:db:e1:1d:ba:d7:11:e3:cd:
cd:7e:32:e5:da:18:36:26:62:2c:e5:48:56:42:80:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:46:FC:9E:71:8A:5B:4F:70:D5:C9:BB:75:1D:E7:D9:C1:88:87:69
X509v3 Authority Key Identifier:
keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:62:a9:73:3f:24:06:9f:d7:53:d6:eb:05:02:f8:dd:b0:11:
98:a8:d4:55:ec:b7:61:3b:a7:3b:05:6f:d1:4c:7b:59:5b:b9:
a6:ff:e8:f4:ca:f9:33:fe:f2:02:10:bd:b4:7e:53:7f:a3:6b:
64:d1:e3:17:4b:8c:d8:58:44:17:cc:51:b6:4b:89:0d:75:ba:
4d:fa:b2:bc:3e:03:45:69:07:7f:c0:da:f6:41:26:1d:1e:f2:
92:af:8c:40:95:69:19:aa:56:5c:17:33:75:a0:a1:d5:ae:4a:
d7:0c:e1:cb:c7:1d:22:d9:73:b2:e6:31:50:8b:d4:73:96:0f:
75:6c:80:5c:fa:52:e5:01:69:91:82:bc:03:b4:7c:fc:4b:d2:
93:c9:e2:5b:1e:88:3d:39:19:4e:76:bb:47:14:5b:fd:ef:83:
d2:70:73:1d:9b:ec:5e:e8:4f:eb:57:09:29:ce:dd:a4:ca:29:
93:2e:9d:ac:ae:42:48:a1:e6:c2:16:8e:13:16:7d:1a:78:d3:
d6:11:35:55:cf:cd:c7:0e:c2:e4:9d:88:ee:0e:82:ee:02:3f:
f0:fe:a2:6c:fa:d8:30:7b:f8:c1:45:8d:6b:a0:07:78:d2:d3:
2f:07:a4:9d:ef:2a:71:ef:5a:e9:97:e6:d4:67:8a:d0:1e:9b:
ac:aa:1d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:38 2025 by rpki-client