Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
File: BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json)
Hash identifier: ekCrZDQo/T8x7z7yv12MbqVkLPMj+yXkRrPN4+I09XU=
Subject key identifier: 2A:73:BE:65:2E:8E:B4:C7:C9:DB:C6:42:13:80:D7:08:41:3B:35:73
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial: 019749D5D154E6E7E6064D2B45A66DCE32B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
Manifest number: 0F72
Signing time: Sat 07 Jun 2025 10:00:38 +0000
Manifest this update: Sat 07 Jun 2025 10:00:38 +0000
Manifest next update: Sun 08 Jun 2025 10:00:38 +0000
Files and hashes: 1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: WcUaU0ZWkPuthJz15nbF7pY+BiAVmp/zLSoVzU5vmT0=)
2: elV1APoKiSk_9XkOBJQhYkqxHiw.roa (hash: 8zT6bhkdxlFlI+FWNJggqU5g/ZNnR60ACpbk2nou4yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:d1:54:e6:e7:e6:06:4d:2b:45:a6:6d:ce:32:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
Validity
Not Before: Jun 7 10:00:38 2025 GMT
Not After : Jun 8 10:00:38 2025 GMT
Subject: CN=2a73be652e8eb4c7c9dbc6421380d708413b3573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:a2:01:ad:37:d1:e1:bd:67:3c:9e:95:84:
de:71:ed:7f:e7:08:ca:66:d6:30:87:08:93:24:d4:
06:86:b9:6c:2d:42:99:c3:c7:c7:38:99:c7:b2:dc:
69:b9:73:82:f2:61:83:16:28:97:ee:a8:26:9e:e1:
05:b8:8b:5a:2e:10:10:7e:1d:86:74:c4:b8:ef:02:
0f:f3:91:a5:79:87:fe:6b:6a:74:98:b1:b5:32:be:
e9:8e:78:6d:36:f6:9e:7f:3d:13:fb:bb:c2:44:37:
6a:ef:35:34:db:56:9e:3d:77:81:1d:b2:68:e9:f7:
77:3b:31:bc:e0:05:c7:2f:d9:af:09:e1:f3:c9:73:
e9:8e:b8:b6:56:82:6c:9f:48:44:cc:a3:a8:8b:af:
ff:b8:61:0c:18:55:98:ab:90:18:d1:e4:1c:67:10:
ff:bb:18:47:28:11:f6:cb:51:fe:9c:13:7f:97:f7:
88:62:c1:42:b4:0e:13:d0:40:88:e0:68:b8:91:b1:
3e:fb:11:17:61:b8:62:0b:b5:94:6c:f7:01:9f:78:
45:96:8b:6b:f8:f7:e6:1d:92:22:c3:56:51:0f:9b:
e4:2e:4a:8a:4a:ba:ee:61:c7:f9:e8:27:12:a9:79:
14:a8:92:c7:ee:8d:d7:1f:8b:2d:3b:7e:c9:92:88:
4c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:73:BE:65:2E:8E:B4:C7:C9:DB:C6:42:13:80:D7:08:41:3B:35:73
X509v3 Authority Key Identifier:
keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a4:e1:05:ad:03:51:9a:fc:99:04:3b:0f:e2:25:b5:f8:0f:
a4:38:d3:f1:2c:e1:96:5f:3e:25:60:92:89:c2:21:a9:ec:4a:
7a:d2:e1:d6:61:53:28:90:01:e6:50:86:d3:af:47:f3:c9:75:
03:26:72:64:79:28:de:48:12:3f:6d:1d:87:2d:e7:40:1e:b3:
5c:03:6e:e6:ee:82:03:4d:9e:7d:40:8b:d0:2f:e3:72:7c:29:
64:81:3f:70:b1:06:ad:bc:35:c3:3b:f6:00:2f:60:4a:23:38:
e3:ff:a2:f9:a7:53:8d:41:dc:2a:a4:35:62:29:14:86:13:59:
67:04:f4:af:0b:6f:97:9c:13:d3:3d:2c:08:c4:6c:7f:82:18:
09:a5:ab:7f:e0:c8:9d:4f:4d:df:99:e6:c0:44:97:cd:53:eb:
29:f8:da:65:44:a3:61:35:81:fc:a6:db:a5:58:4a:18:f0:26:
d1:30:83:00:80:ad:8f:33:88:20:9a:88:24:dd:2c:aa:eb:5b:
23:28:5d:b0:aa:62:11:f3:98:4f:a8:df:f2:e5:56:a7:14:c3:
61:6e:42:c6:76:5d:74:7c:ab:ff:70:93:9e:7a:62:9a:d1:f9:
3c:15:d3:e0:de:11:87:ba:7b:74:1e:3b:d2:fc:d3:e2:3d:ac:
15:c0:0f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:53:04 2025 by rpki-client