Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
File: BgyexdQFhu0yVfD8T8sxV3FN2hU.mft (raw, json)
Hash identifier: t6sXXHaKdpoF+XCXNoeyDffTFs3bYGmfPs0qYVbL5nQ=
Subject key identifier: 19:7B:C5:AA:60:21:44:21:0C:C8:3B:93:56:44:68:AD:BE:13:63:FE
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 0197499F3A5E5F93F7B7914820F8E940AC86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
Manifest number: 10F4
Signing time: Sat 07 Jun 2025 09:01:01 +0000
Manifest this update: Sat 07 Jun 2025 09:01:01 +0000
Manifest next update: Sun 08 Jun 2025 09:01:01 +0000
Files and hashes: 1: BgyexdQFhu0yVfD8T8sxV3FN2hU.crl (hash: Ww76+EItNhSubeOuzPDIHRWliUs9DM0HDoE9pSFPIlA=)
2: SvCn28QlY3H7uObVMGkQTVr8wro.roa (hash: lT4aO9UNqW5C6eAiY2SG9UDFdzGqTUCShh77rO3OfDs=)
3: zXLcc16Hl_V98UU7l_AMl_ZR3t0.roa (hash: zI4peklfsSU0BwGnCgTYFkA1twl5bd7IR0aRBdIFj54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:3a:5e:5f:93:f7:b7:91:48:20:f8:e9:40:ac:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Jun 7 09:01:01 2025 GMT
Not After : Jun 8 09:01:01 2025 GMT
Subject: CN=197bc5aa602144210cc83b93564468adbe1363fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:3b:ab:39:e3:f1:86:c7:2e:39:a9:a6:24:
80:da:52:25:cd:e8:bf:63:56:39:d6:87:08:5e:45:
8a:af:a8:cf:27:95:9c:31:bf:ce:6c:d2:57:4b:98:
df:cf:f5:49:89:9e:a2:3a:ae:e2:37:81:e1:99:c4:
77:b7:0b:ac:94:7c:dc:f2:46:b9:fc:53:fb:1e:8d:
04:a8:26:c1:50:be:02:bf:81:f1:e0:e9:7a:2b:eb:
87:68:38:06:42:59:65:20:3e:3a:3c:b3:f2:bf:24:
8a:cf:fa:e8:a5:a5:f6:d5:48:28:20:51:55:e3:50:
52:87:ad:69:45:5b:aa:12:13:0e:ca:73:74:db:5b:
15:eb:2a:c9:79:83:ef:d2:6e:05:c8:79:30:64:f6:
4f:53:c1:49:f8:32:70:2f:28:4b:dc:43:52:82:2f:
76:08:3c:56:1d:04:d3:78:bd:cf:69:80:ab:a1:5c:
f4:70:85:61:99:5d:a2:a4:37:30:b5:8d:a5:2a:bd:
56:7b:34:01:c3:5e:ac:50:48:b5:d3:0d:bb:a5:f5:
3c:57:3a:b6:53:4e:1c:7c:c3:07:bb:75:60:63:65:
34:45:8c:d6:99:a0:58:e3:86:9b:67:7b:08:e4:18:
4a:43:6e:89:8c:ab:cd:55:a7:fd:90:78:e6:19:d1:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7B:C5:AA:60:21:44:21:0C:C8:3B:93:56:44:68:AD:BE:13:63:FE
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b2:8c:c8:1c:b9:77:5a:a6:f4:38:2a:59:56:9e:d6:b9:b3:
09:f7:13:8d:4f:d2:fa:ee:cc:b8:44:47:aa:c7:73:93:a9:17:
96:ed:eb:7e:40:98:d5:7f:5d:0a:95:01:75:a8:e5:01:90:91:
eb:c6:7d:51:d4:12:b0:54:b1:26:9d:9b:17:0c:49:cc:9a:d8:
37:20:41:c5:84:22:38:64:29:a0:24:b9:3f:3a:69:82:7e:67:
74:55:ad:49:5e:23:05:a9:10:f1:0b:0e:4d:53:0a:6b:22:9f:
fc:62:fe:f8:7a:6d:1c:77:24:65:10:36:ff:19:e4:4c:76:29:
5f:9f:e1:18:d6:0f:9d:eb:bc:15:c1:d4:b3:bd:28:a5:4f:b5:
5d:66:4a:a0:1f:66:da:db:f9:be:bb:4c:e6:35:85:c0:40:cf:
b4:42:49:a9:54:8f:e2:34:24:58:e6:8f:66:59:fa:9b:2f:43:
8a:e9:e6:d2:5d:e3:72:a4:79:ff:27:f3:ea:4f:66:1a:fd:0c:
70:9a:95:db:05:5e:b0:fe:06:74:b8:a9:3a:c6:0f:d6:6e:ac:
d5:97:ac:b7:f7:fb:f9:82:b9:30:1e:d4:2d:88:54:8d:22:8d:
ec:ca:53:9a:30:25:0d:29:06:65:32:b5:3c:24:09:ce:d4:2a:
c5:d8:8e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:37:35 2025 by rpki-client