Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
File: BgyexdQFhu0yVfD8T8sxV3FN2hU.mft (raw, json)
Hash identifier: W8SCrMUPtSSIabZnkzJVh25CbZgt79t3pKZAY7jqzw4=
Subject key identifier: A0:88:06:C1:4E:BE:7F:4A:21:26:90:1A:E9:52:70:1A:91:6B:FE:26
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 01963B40DBAA2634C214CBE84B2E13ADA690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
Manifest number: 1068
Signing time: Tue 15 Apr 2025 21:00:28 +0000
Manifest this update: Tue 15 Apr 2025 21:00:28 +0000
Manifest next update: Wed 16 Apr 2025 21:00:28 +0000
Files and hashes: 1: BgyexdQFhu0yVfD8T8sxV3FN2hU.crl (hash: IVCQrsOHgCPvij2yDFA4WYQJYhPYPr9iHlOfHfYoGqo=)
2: SvCn28QlY3H7uObVMGkQTVr8wro.roa (hash: lT4aO9UNqW5C6eAiY2SG9UDFdzGqTUCShh77rO3OfDs=)
3: zXLcc16Hl_V98UU7l_AMl_ZR3t0.roa (hash: zI4peklfsSU0BwGnCgTYFkA1twl5bd7IR0aRBdIFj54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:40:db:aa:26:34:c2:14:cb:e8:4b:2e:13:ad:a6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Apr 15 21:00:28 2025 GMT
Not After : Apr 16 21:00:28 2025 GMT
Subject: CN=a08806c14ebe7f4a2126901ae952701a916bfe26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:a4:dc:71:1e:b7:5f:ae:7c:fe:fe:82:8c:
98:5a:dd:cc:d7:66:39:53:7f:65:7b:f3:77:19:05:
0a:6e:7a:ab:b6:34:32:a0:78:8f:ce:65:02:e7:36:
24:30:d4:44:ce:33:c5:87:23:a9:7d:0a:c5:43:88:
ad:e9:df:d5:ae:0d:a6:ce:4b:0e:ab:e6:59:2a:4b:
cb:7e:4f:8d:8d:83:c1:19:fc:71:75:46:ab:2c:ff:
6f:57:1e:3f:9d:18:21:9b:0b:19:23:38:fb:12:e0:
e2:90:1c:5b:d8:25:32:fb:12:ab:01:32:3c:1c:fd:
56:53:de:db:a5:ff:7e:08:5a:5b:86:c3:4c:e2:17:
42:fb:cd:04:3b:15:3f:22:39:56:de:5b:89:3b:37:
ac:29:06:88:a5:c2:8c:e0:1e:0a:70:59:ad:c2:13:
a2:34:33:2f:ed:f1:02:9e:d1:c3:8b:94:b7:08:76:
8b:7b:57:a8:87:e7:b0:18:cc:7e:95:34:23:5a:1e:
73:4d:e4:9a:25:cf:62:d0:a3:8f:70:22:8d:36:f8:
36:43:7f:03:a0:1d:e2:b9:c2:c0:ca:a9:d0:23:dd:
8c:40:79:cb:84:5a:32:65:27:9b:cf:ac:5b:0d:dd:
ab:33:2d:18:75:5f:dc:51:bc:2a:20:70:4c:56:c5:
49:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:88:06:C1:4E:BE:7F:4A:21:26:90:1A:E9:52:70:1A:91:6B:FE:26
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:65:44:bf:d7:37:a3:23:2f:07:9a:c6:b5:0d:4e:e8:73:99:
1f:58:30:5b:c7:c7:4d:90:df:9c:8b:ae:0a:3d:6c:80:47:48:
a4:48:11:f1:1f:07:49:1b:a9:24:9b:84:47:ea:67:b5:c2:78:
52:6d:ca:1f:03:ef:43:28:a3:7b:69:b9:d0:83:f6:58:9d:fc:
75:5d:4d:13:ae:e3:67:71:83:9e:32:79:e4:13:40:3b:e1:96:
bb:65:ba:c9:96:48:35:75:db:4f:67:c2:23:65:24:43:e3:3e:
76:0e:1b:b4:b1:1c:5c:df:58:2f:6d:91:ef:35:fc:7c:64:4d:
a0:68:c0:58:5e:4e:f3:d4:a0:ff:07:ce:5f:e9:e5:9a:dc:d0:
77:c4:a2:13:3e:c4:38:e1:29:ad:f8:b1:24:68:77:87:44:c0:
c3:10:90:2e:d9:75:a8:80:79:b5:bc:eb:70:79:49:fd:45:b4:
c6:f3:16:44:64:36:33:01:b5:06:8d:f2:a0:39:32:c6:0d:ff:
09:5b:0b:cf:32:65:91:fa:16:28:42:68:82:af:9d:dd:ad:58:
71:22:f0:f6:6e:cd:14:85:2a:13:71:75:45:aa:f1:1d:3e:7e:
41:e0:8d:66:41:8e:40:95:ba:bc:73:a6:b8:6d:13:0f:29:92:
66:1b:42:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY7QNuqJjTCFMvoSy4TraaQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MGM5ZWM1ZDQwNTg2ZWQzMjU1ZjBmYzRmY2IzMTU3NzE0
ZGRhMTUwHhcNMjUwNDE1MjEwMDI4WhcNMjUwNDE2MjEwMDI4WjAzMTEwLwYDVQQD
EyhhMDg4MDZjMTRlYmU3ZjRhMjEyNjkwMWFlOTUyNzAxYTkxNmJmZTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQWk3HEet1+ufP7+goyYWt3M12Y5
U39le/N3GQUKbnqrtjQyoHiPzmUC5zYkMNREzjPFhyOpfQrFQ4it6d/Vrg2mzksO
q+ZZKkvLfk+NjYPBGfxxdUarLP9vVx4/nRghmwsZIzj7EuDikBxb2CUy+xKrATI8
HP1WU97bpf9+CFpbhsNM4hdC+80EOxU/IjlW3luJOzesKQaIpcKM4B4KcFmtwhOi
NDMv7fECntHDi5S3CHaLe1eoh+ewGMx+lTQjWh5zTeSaJc9i0KOPcCKNNvg2Q38D
oB3iucLAyqnQI92MQHnLhFoyZSebz6xbDd2rMy0YdV/cUbwqIHBMVsVJmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCIBsFOvn9KISaQGulScBqRa/4mMB8GA1UdIwQY
MBaAFAYMnsXUBYbtMlXw/E/LMVdxTdoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmd5ZXhkUUZodTB5VmZEOFQ4c3hWM0ZOMmhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hZTNhM2UtMmMwYy00MDVlLWJjZDct
OWUwYTUxM2RlZWYyLzEvQmd5ZXhkUUZodTB5VmZEOFQ4c3hWM0ZOMmhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hZTNhM2UtMmMwYy00MDVlLWJjZDctOWUwYTUxM2RlZWYy
LzEvQmd5ZXhkUUZodTB5VmZEOFQ4c3hWM0ZOMmhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGVEv9c3
oyMvB5rGtQ1O6HOZH1gwW8fHTZDfnIuuCj1sgEdIpEgR8R8HSRupJJuER+pntcJ4
Um3KHwPvQyije2m50IP2WJ38dV1NE67jZ3GDnjJ55BNAO+GWu2W6yZZINXXbT2fC
I2UkQ+M+dg4btLEcXN9YL22R7zX8fGRNoGjAWF5O89Sg/wfOX+nlmtzQd8SiEz7E
OOEprfixJGh3h0TAwxCQLtl1qIB5tbzrcHlJ/UW0xvMWRGQ2MwG1Bo3yoDkyxg3/
CVsLzzJlkfoWKEJogq+d3a1YcSLw9m7NFIUqE3F1RarxHT5+QeCNZkGOQJW6vHOm
uG0TDymSZhtCeQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 00:16:16 2025 by rpki-client