Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File: Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier: 3YOxRsIqL5CvbVfxYn6Mr9Tn/bG/XykIEky+SUitlAY=
Subject key identifier: AE:9F:75:16:89:22:B5:CC:D1:22:FE:95:95:71:6E:C3:73:FF:E3:46
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial: 01964D7E999EF23D8FF2B5C8CB3C3BBFC392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 10:01:04 +0000
Manifest this update: Sat 19 Apr 2025 10:01:04 +0000
Manifest next update: Sun 20 Apr 2025 10:01:04 +0000
Files and hashes: 1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: RWF0t8bD5X0DPTlwvbM2bGQx8fH7DNif92lf6o5WoZ4=)
2: GqvJxk6cmO7Tb_I2mDvjscrokEE.roa (hash: yepd+YPVUD07Z1nRvo/cI6UMDSXFFH47vweszFDmLW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:99:9e:f2:3d:8f:f2:b5:c8:cb:3c:3b:bf:c3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Validity
Not Before: Apr 19 10:01:04 2025 GMT
Not After : Apr 20 10:01:04 2025 GMT
Subject: CN=ae9f75168922b5ccd122fe9595716ec373ffe346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:ca:d9:5b:6c:7b:fa:a9:6e:a3:71:90:e3:
40:03:46:45:24:06:f2:71:c5:9c:b9:af:6e:0e:73:
20:27:19:ee:46:73:fd:52:58:a5:31:02:90:78:aa:
cc:98:43:2c:cf:9e:af:db:01:ee:ac:6e:44:d2:bc:
00:1f:9b:d2:ca:5e:52:26:83:47:2d:2d:0a:99:17:
2e:1f:21:7f:e4:31:51:86:a5:fe:2d:46:75:17:84:
64:c0:03:96:1c:f6:96:79:a4:4a:4a:ab:e2:91:b7:
2e:ed:3c:5c:fc:54:e2:d9:27:c6:a3:6f:42:5c:fe:
6e:71:a0:2d:45:2c:07:b7:2a:4d:1d:ab:51:59:0a:
f4:1f:e2:78:15:f4:0b:a4:3a:fd:1f:81:2a:a3:51:
23:d1:d0:50:d5:02:85:8a:17:8a:f1:c6:2f:f8:03:
45:b0:4c:3a:05:60:d5:18:56:37:7e:b7:96:01:4a:
11:e3:44:f1:98:cd:a1:2f:60:3b:a6:30:28:58:e4:
d5:fc:4e:71:a6:a8:a0:07:3a:a4:b3:9b:94:4e:82:
c9:80:db:54:cc:38:1d:6f:5f:36:7f:da:85:d7:4e:
aa:a0:2e:2a:1c:69:5c:2e:45:3e:4a:56:f8:f9:74:
d8:65:ca:64:59:b3:4f:41:e8:f8:a7:b2:d2:28:58:
bb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9F:75:16:89:22:B5:CC:D1:22:FE:95:95:71:6E:C3:73:FF:E3:46
X509v3 Authority Key Identifier:
keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3e:42:f5:cf:87:e9:35:4f:b1:2e:68:2b:71:6d:42:73:6c:
7c:dd:64:6e:08:aa:86:f2:8f:54:e9:fd:c7:45:3b:66:8f:65:
57:0c:c7:2c:83:5e:f7:52:cd:10:ec:4b:aa:d6:c8:8e:9a:b4:
5c:49:2c:16:49:13:2d:83:36:76:ed:58:76:a4:2d:ec:00:02:
0b:26:ca:7d:18:04:e1:7d:49:bf:8e:f9:36:be:98:21:cb:02:
df:b4:9c:f2:7a:6a:d2:c2:dc:2c:d0:d1:c7:db:2e:b9:19:40:
53:c5:eb:11:bb:a1:e8:88:b9:c2:27:9c:f2:02:9a:73:5a:31:
dd:f0:df:2d:ae:cb:bf:ea:40:77:0c:bd:08:6d:ad:73:1c:58:
1e:af:a3:f8:db:73:58:a4:5f:a0:4b:97:67:01:0c:e2:18:b7:
ba:fa:7b:80:d3:4a:aa:28:f3:a9:74:82:a0:5c:b2:94:4c:6e:
4e:89:68:33:05:6b:ee:03:b3:78:6f:f2:11:4e:ae:b0:3c:a7:
5b:bb:6d:de:bd:ed:f7:3c:dc:d9:2b:a1:9c:66:7b:10:6f:7f:
bf:62:a0:56:52:ab:73:71:76:02:33:0b:03:d2:fb:7a:da:56:
da:67:24:82:70:98:f0:fb:90:70:09:4f:dd:f9:bd:ae:64:45:
fe:2e:a2:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfpme8j2P8rXIyzw7v8OSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDhhZGU4NmExY2NmN2E0ODNiNGMyOTYyMDQ1ZGI4ZDBl
ZjgyNmQwHhcNMjUwNDE5MTAwMTA0WhcNMjUwNDIwMTAwMTA0WjAzMTEwLwYDVQQD
EyhhZTlmNzUxNjg5MjJiNWNjZDEyMmZlOTU5NTcxNmVjMzczZmZlMzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkfK2Vtse/qpbqNxkONAA0ZFJAby
ccWcua9uDnMgJxnuRnP9UlilMQKQeKrMmEMsz56v2wHurG5E0rwAH5vSyl5SJoNH
LS0KmRcuHyF/5DFRhqX+LUZ1F4RkwAOWHPaWeaRKSqvikbcu7Txc/FTi2SfGo29C
XP5ucaAtRSwHtypNHatRWQr0H+J4FfQLpDr9H4Eqo1Ej0dBQ1QKFiheK8cYv+ANF
sEw6BWDVGFY3freWAUoR40TxmM2hL2A7pjAoWOTV/E5xpqigBzqks5uUToLJgNtU
zDgdb182f9qF106qoC4qHGlcLkU+Slb4+XTYZcpkWbNPQej4p7LSKFi7OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6fdRaJIrXM0SL+lZVxbsNz/+NGMB8GA1UdIwQY
MBaAFAYIrehqHM96SDtMKWIEXbjQ74JtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQt
NDIxOTAyMjM1MGZhLzEvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQtNDIxOTAyMjM1MGZh
LzEvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGj5C9c+H
6TVPsS5oK3FtQnNsfN1kbgiqhvKPVOn9x0U7Zo9lVwzHLINe91LNEOxLqtbIjpq0
XEksFkkTLYM2du1YdqQt7AACCybKfRgE4X1Jv475Nr6YIcsC37Sc8npq0sLcLNDR
x9suuRlAU8XrEbuh6Ii5wiec8gKac1ox3fDfLa7Lv+pAdwy9CG2tcxxYHq+j+Ntz
WKRfoEuXZwEM4hi3uvp7gNNKqijzqXSCoFyylExuToloMwVr7gOzeG/yEU6usDyn
W7tt3r3t9zzc2SuhnGZ7EG9/v2KgVlKrc3F2AjMLA9L7etpW2mckgnCY8PuQcAlP
3fm9rmRF/i6i3w==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:48:47 2025 by rpki-client