Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
File: BcgcgJdDfNF58xkYPAKC6mzRylE.mft (raw, json)
Hash identifier: yje8EkGQ7fisl4lvYfYs7Q7swGG8K8qgBOrtG0NCXBo=
Subject key identifier: 99:58:ED:16:69:61:C6:E4:04:1E:46:BE:0D:E4:3E:28:C5:D2:56:50
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Certificate issuer: /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial: 01984A40C09AD9EA0C931DB130B882E9FCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
Manifest number: 05BF
Signing time: Sun 27 Jul 2025 05:00:14 +0000
Manifest this update: Sun 27 Jul 2025 05:00:14 +0000
Manifest next update: Mon 28 Jul 2025 05:00:14 +0000
Files and hashes: 1: 0eEbXaLT72xMShRX80ks6Q4d5oI.roa (hash: qA3gKPtC1PDR4pbDhy0QBVS9nz5AKV5Uc6LznPWBGvQ=)
2: BcgcgJdDfNF58xkYPAKC6mzRylE.crl (hash: ee4OqGrraIzlTdu5wJYbeR6XTCRQRtB/SGXMSP97ZmA=)
3: z0nJV6Vj9yWOU_8BIeua9e3I6JE.roa (hash: YIrDiztONnsPy57n2ZnC2YoDiFkPGBFAHQe2Pe5+Gi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:c0:9a:d9:ea:0c:93:1d:b1:30:b8:82:e9:fc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Validity
Not Before: Jul 27 05:00:14 2025 GMT
Not After : Jul 28 05:00:14 2025 GMT
Subject: CN=9958ed166961c6e4041e46be0de43e28c5d25650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:57:91:d2:3f:bf:67:03:b9:ab:21:6f:94:
5b:bb:be:3a:a8:85:ad:1c:53:58:dd:be:89:6c:3a:
fb:95:be:8b:d7:66:a0:06:c8:50:98:c8:54:b4:bc:
d7:75:f3:2f:0b:ae:a9:f7:26:64:64:e3:e3:6f:2f:
7c:ab:cb:d0:8c:db:4a:e1:48:3b:2c:72:af:75:69:
bc:4b:b5:34:1c:95:8e:c1:20:59:5d:aa:77:8c:3b:
54:84:ff:77:ef:97:7c:c9:5a:6d:c2:9d:e7:dc:42:
4d:c7:1e:a2:17:31:67:64:d9:fd:28:e7:34:81:0d:
a0:b0:3e:8c:06:24:7c:e7:9c:96:fa:d3:88:8b:96:
27:91:32:7f:8f:b3:33:8c:53:58:85:6c:6d:5a:3b:
78:f0:a0:83:17:09:5c:01:84:44:74:96:2f:09:a5:
b7:3b:a8:be:f8:59:f8:7b:70:53:cd:c9:9e:c2:9a:
d9:1c:50:09:e0:d5:21:e6:b2:cd:fb:c3:09:8d:d1:
c3:d1:e0:62:9c:6f:aa:70:89:5f:2f:2c:93:c2:80:
16:5a:b4:47:04:84:8a:9f:4e:3c:e6:43:23:03:d0:
00:a7:d3:44:7d:dc:b7:b4:f0:13:3c:1c:7b:df:68:
07:26:78:b8:ed:86:fa:c7:76:28:fa:32:1f:32:4e:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:58:ED:16:69:61:C6:E4:04:1E:46:BE:0D:E4:3E:28:C5:D2:56:50
X509v3 Authority Key Identifier:
keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9c:73:f6:a2:cb:90:52:36:4b:4c:0e:19:1f:8c:53:6c:71:
e5:64:07:e5:5b:e5:72:58:f2:50:a1:54:b9:96:79:b6:1e:73:
81:bd:2a:d7:72:88:91:93:01:8a:bf:9c:09:8d:af:ac:e0:75:
75:98:30:6d:fc:5d:d3:12:85:cf:25:c4:f3:7c:ca:12:24:e7:
b8:e5:6e:e6:aa:13:b0:c7:a1:a8:97:ee:63:04:fd:9b:eb:14:
a9:d9:9a:32:f4:c0:e9:65:2e:07:0c:01:13:4c:d5:de:e3:79:
b3:6c:fd:c1:f7:95:60:ab:5a:0e:c9:84:04:c8:d2:3e:9a:16:
62:f2:c0:7a:48:bf:29:14:da:d8:85:8b:cb:9d:6a:dc:e1:e4:
7e:26:12:e0:dc:27:c0:96:85:b3:7b:2d:74:c0:70:8b:0a:33:
a8:47:5b:d1:5c:2a:d6:7a:b8:a8:0e:4f:61:5c:34:26:58:76:
ce:47:b5:21:62:c0:bf:f3:de:fc:42:ac:c7:6b:e4:2e:c1:86:
74:76:a2:19:e3:a8:91:94:73:9a:6e:18:04:11:c3:20:eb:2b:
9e:85:1a:ee:e9:37:1f:33:c0:04:0e:c7:00:c9:9b:72:9f:ed:
7e:7d:aa:98:02:b9:56:e4:d6:2b:20:8c:1e:23:f8:77:22:fa:
19:2c:45:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:02:25 2025 by rpki-client