Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
File: BGyntgTsCPb1Sw50iQZUfdN1Z00.mft (raw, json)
Hash identifier: FYMwG0Bnr06yCW7QT0D8n4embpBKhkInXmkKk4Gul9k=
Subject key identifier: 2B:9C:B7:69:EA:36:2F:B7:7E:D2:43:6E:49:2C:81:9A:36:B3:89:4B
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Certificate issuer: /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial: 01964BFD5141CAD8768905BD5C6879B8DD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
Manifest number: 11BC
Signing time: Sat 19 Apr 2025 03:00:14 +0000
Manifest this update: Sat 19 Apr 2025 03:00:14 +0000
Manifest next update: Sun 20 Apr 2025 03:00:14 +0000
Files and hashes: 1: BGyntgTsCPb1Sw50iQZUfdN1Z00.crl (hash: e6TwiLOglJQFT8oWJLzMeC1EYV3x1Qf2FU+0xSCERaM=)
2: W_EWnDN7S-Lr4HAexwKFCibBunI.roa (hash: Hq7myDcvfhXQUDH03db33GGTXzn+mXDa35j7LIpyLJ4=)
3: _h-pD85oM-4QL5S4Ka5s8okAtQk.roa (hash: 0i71BBwnivmIgBhKogySa4VPmpxK93A6N2O06ABsBqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:51:41:ca:d8:76:89:05:bd:5c:68:79:b8:dd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
Validity
Not Before: Apr 19 03:00:14 2025 GMT
Not After : Apr 20 03:00:14 2025 GMT
Subject: CN=2b9cb769ea362fb77ed2436e492c819a36b3894b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:02:83:46:9c:86:c5:aa:27:a8:75:d2:7d:
23:e0:f4:03:1d:82:67:40:62:9e:0b:82:6c:74:21:
94:c0:df:59:2e:ad:25:c6:0f:1a:02:00:60:ee:cc:
99:4e:d1:da:17:54:e8:b8:e0:eb:a1:8e:68:d5:a7:
f2:93:99:91:0f:ae:19:b1:2b:fb:14:7a:95:2e:a8:
96:3e:9d:f9:f5:b3:22:51:7b:10:5f:9b:a0:66:f4:
7f:ff:87:02:3c:4a:75:4b:dd:23:13:bb:63:d3:62:
ed:c7:02:22:e4:69:fe:b0:94:1e:6d:af:f1:c5:70:
78:1a:e4:52:7a:47:d2:7c:20:81:f0:cc:68:4f:96:
21:74:3e:54:55:d4:0d:49:53:4a:66:9b:f1:c4:a1:
80:05:d1:9a:64:9c:63:17:a0:17:ed:22:87:79:2c:
a0:53:7f:e0:42:00:50:1b:3f:4b:ac:8e:7c:46:7d:
3a:65:c2:bd:54:01:f3:2e:b2:e6:6b:52:09:4a:54:
33:46:32:33:a2:3e:15:97:70:3e:cd:2e:a0:8f:8b:
86:cd:3f:33:0f:19:e5:4a:17:f9:cc:0d:14:31:ed:
2e:f2:db:f9:75:be:98:de:11:d4:50:6b:88:fe:ab:
d8:9f:27:18:82:5d:31:6a:9a:fc:49:cb:49:36:84:
4a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9C:B7:69:EA:36:2F:B7:7E:D2:43:6E:49:2C:81:9A:36:B3:89:4B
X509v3 Authority Key Identifier:
keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d5:90:3f:cd:ee:3a:8f:f6:42:cd:f0:66:9f:7f:57:ad:3b:
cf:40:2f:0f:95:fa:12:38:4f:85:df:5d:c7:a9:3f:65:5c:01:
57:1a:cf:62:fc:27:87:21:26:b8:a2:57:f5:e2:bb:79:ba:b9:
c2:59:9c:3c:b2:23:dc:15:fa:04:9e:30:e7:53:39:44:45:7c:
b9:2a:e0:18:30:f8:1c:0d:5c:cc:a8:0b:c5:4e:06:be:1d:eb:
ad:70:33:45:fb:3a:d8:64:89:9a:1c:78:54:99:65:6a:92:46:
df:b6:a5:4d:3b:8d:d6:ea:03:3d:c6:81:91:33:08:e8:79:e0:
72:b0:d3:67:3d:85:8f:9a:d3:c1:63:ca:05:28:97:89:a8:a3:
7c:21:9a:2d:93:86:c1:7b:a4:ab:88:c9:3d:a7:3b:1a:fa:ef:
7d:32:18:09:a3:d6:77:72:dd:54:89:b3:6d:4e:0d:95:63:fa:
3d:9d:11:a6:a3:63:e2:cd:2e:ef:bc:a5:79:50:31:17:fa:32:
86:c8:64:24:4f:af:94:dd:a6:c7:86:5e:bc:be:c0:94:e5:76:
b4:ad:bf:a8:b7:9b:5d:8d:9d:2a:e7:8e:26:bf:4b:a0:cb:5e:
7b:18:eb:55:00:24:94:23:e2:50:ba:b3:da:bc:6a:ea:41:21:
1a:ea:ae:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:11:39 2025 by rpki-client