Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
File: BsdGzX1N-VptA8qVVKdUdg1eTgY.mft (raw, json)
Hash identifier: kCk8NzbF1PtM560v3jCa47JMUwlOqRH2mU04aWQK8Nw=
Subject key identifier: F1:4A:FD:73:25:5B:32:AA:70:23:3C:CA:34:A2:E8:D2:EB:3B:A3:80
Authority key identifier: 06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
Certificate issuer: /CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Certificate serial: 0197CACCBF3B64DA330332650578D1EEFC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
Manifest number: 0636
Signing time: Wed 02 Jul 2025 11:01:45 +0000
Manifest this update: Wed 02 Jul 2025 11:01:45 +0000
Manifest next update: Thu 03 Jul 2025 11:01:45 +0000
Files and hashes: 1: BsdGzX1N-VptA8qVVKdUdg1eTgY.crl (hash: lTuymx5eKy2xw9NqCCT+jgDYrwQa+DjSetBS7f7RncU=)
2: X40tLgIMCQZAYRAwmZdn2JjY2Sg.roa (hash: eDaX3dI5fxxRGSOkAJcdOwrelUSaDgM3W7s+OAzNuqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:bf:3b:64:da:33:03:32:65:05:78:d1:ee:fc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Validity
Not Before: Jul 2 11:01:45 2025 GMT
Not After : Jul 3 11:01:45 2025 GMT
Subject: CN=f14afd73255b32aa70233cca34a2e8d2eb3ba380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:ec:2f:04:55:89:6f:b2:9c:8e:b6:7b:3c:96:
27:a8:d5:69:75:b2:2b:e6:84:65:3f:78:14:75:be:
d2:b9:89:f3:76:3a:78:f0:95:b1:9c:13:9b:13:16:
b4:7d:a4:e1:f8:3d:8a:ae:54:ed:da:fc:2b:1b:04:
90:2d:ef:fa:f2:39:76:06:f3:4e:80:1d:57:df:ed:
29:27:f9:fb:c5:d6:90:86:0a:3a:a1:04:ae:86:86:
f8:46:b1:c5:71:15:c7:42:bf:99:66:3a:79:a7:e7:
85:52:5d:31:31:b5:c5:55:24:b9:ad:71:70:81:5d:
d7:8d:4d:53:7e:d0:62:f9:33:f0:9a:19:3d:86:70:
e6:20:a8:32:13:ee:10:91:5d:12:10:67:77:bc:38:
8c:de:0a:41:b8:2c:cf:80:e0:4e:94:4b:6b:09:07:
41:3d:29:cf:32:c5:0a:74:c4:b1:fc:5b:9b:d5:8c:
15:3d:f9:b8:3f:9f:50:95:95:4a:94:b4:97:10:de:
ff:80:c2:10:25:97:6c:78:20:84:79:cb:c5:54:c8:
11:47:ed:29:f9:62:29:4f:cb:52:5e:49:2d:7a:a3:
f4:59:1e:5b:f3:69:b4:da:8a:35:7e:35:2c:ad:e9:
9c:9a:62:3c:4f:e2:43:17:1c:26:2d:ec:a7:ea:ec:
b0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4A:FD:73:25:5B:32:AA:70:23:3C:CA:34:A2:E8:D2:EB:3B:A3:80
X509v3 Authority Key Identifier:
keyid:06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:85:6b:57:26:1f:a8:51:d8:f1:25:fc:e4:51:d8:0f:25:53:
be:da:f2:cd:06:ea:da:7f:ac:67:2e:8c:95:f2:a0:db:6c:b9:
ac:89:c6:c7:e9:71:9f:fd:5e:04:b0:b0:71:35:a6:b7:d4:bf:
8d:01:ab:16:9f:cc:e2:61:6d:ec:8b:db:3f:ac:66:87:53:c9:
f9:60:39:da:f1:22:5f:3b:50:37:b0:c4:6c:13:89:9d:e6:57:
a5:ad:ab:67:ea:66:ea:98:73:d6:27:aa:ec:3c:d4:55:ea:51:
89:a3:2a:89:e4:f9:48:cf:99:cb:cd:c9:f1:de:fb:78:52:d9:
aa:15:6e:e0:23:54:c1:73:84:e9:d6:94:c9:94:93:83:cc:9c:
c4:5a:9d:8e:66:66:70:75:69:3e:05:e1:4a:25:a4:9a:83:f0:
fc:05:25:f9:47:94:d2:c9:1f:28:d7:42:71:3a:98:96:e2:4d:
f7:69:b1:b6:5c:a9:a7:d4:78:61:7d:ad:4c:c1:6d:7a:8d:ed:
9f:1f:a3:0c:71:7b:00:25:b0:7c:8d:c2:24:ce:45:14:1b:8a:
81:96:1a:01:af:e8:eb:b7:43:9e:22:cf:75:8f:11:37:0b:38:
8d:6d:47:a1:19:6e:77:87:8c:99:d7:31:a2:97:7e:2e:2d:be:
14:c0:ae:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:10:38 2025 by rpki-client