Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: o8Ec5Lg9qU/pYOq3q9FOEAWCQ7iPU0BSRoxpEsKG5e8=
Subject key identifier: CD:FB:F4:DF:71:4B:94:EF:8F:B0:92:AB:EC:60:71:08:97:62:B6:F8
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 01974A7B70AFF3DC8EC19588210F6035D080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 07BB
Signing time: Sat 07 Jun 2025 13:01:33 +0000
Manifest this update: Sat 07 Jun 2025 13:01:33 +0000
Manifest next update: Sun 08 Jun 2025 13:01:33 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: ZSHOOlEPoBt+1EM/iPcfJptropIavWDSDN7+KSfMQ/M=)
2: G7hpWPyXuPCdcjaRbCuAbyP7XNA.roa (hash: CuG2DStYKEKyAlh0IJta5/FjSh93nl0CeskY3cbZDZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:70:af:f3:dc:8e:c1:95:88:21:0f:60:35:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Jun 7 13:01:33 2025 GMT
Not After : Jun 8 13:01:33 2025 GMT
Subject: CN=cdfbf4df714b94ef8fb092abec6071089762b6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:69:86:34:3c:93:ac:3d:93:8e:e0:ea:e4:
b4:9a:1d:98:27:27:f6:1d:43:3f:93:be:c1:08:52:
59:ef:3d:e0:5b:01:61:58:8e:90:7d:0f:4a:38:81:
88:b7:4a:65:30:72:f2:bb:83:d1:90:1c:d5:ed:38:
e7:88:86:08:0f:e6:4a:ad:15:8b:da:ae:97:40:f4:
ac:de:b3:7e:3c:e7:48:53:b6:cb:7b:e3:e1:83:6a:
e1:2f:a8:1e:13:dd:09:f8:a6:39:94:c8:35:37:55:
7a:39:59:4a:e0:ce:a4:91:08:18:8e:4c:70:d2:c8:
a2:15:8e:d6:fe:ea:d8:fa:76:ab:b8:99:bb:5d:1f:
e5:1a:06:58:ba:b8:7d:88:33:7f:01:bd:e2:7b:d9:
ae:01:29:ea:72:7d:a2:50:a2:2f:44:c7:34:56:09:
65:66:9c:64:8b:f5:bb:27:a1:d3:02:f8:8c:f1:8c:
5f:f5:68:99:fe:ce:44:c5:86:8c:94:b8:3f:54:b3:
2d:86:f2:42:c9:ee:4b:d6:18:0b:8a:e2:88:6e:56:
0b:a6:3c:c3:33:9d:cd:71:01:53:cd:d9:89:29:09:
ce:31:a0:64:90:02:d6:84:94:0c:b3:7d:99:cc:56:
21:81:38:16:3b:9e:82:4d:f7:ff:79:c8:d3:9c:dd:
e1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FB:F4:DF:71:4B:94:EF:8F:B0:92:AB:EC:60:71:08:97:62:B6:F8
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ef:20:fd:2a:76:e1:9e:90:45:64:80:6e:88:17:5e:27:e4:
6c:d8:0a:aa:04:9d:34:f4:c1:97:12:64:89:65:9b:80:c9:e3:
39:06:4e:8b:f6:7c:fa:95:59:9b:69:3b:0b:c2:09:71:09:21:
83:fb:8a:33:85:7c:23:9e:72:22:2d:33:3c:10:63:c1:96:60:
5b:95:60:73:d0:cd:0b:ca:2a:47:cf:ad:8c:0b:ce:6e:cd:cb:
b2:f8:ff:1f:59:d6:94:da:c1:ce:a7:36:6c:b8:22:40:c2:e1:
ef:32:15:c7:2c:0a:41:29:1e:fe:94:a0:17:97:15:bf:7f:b0:
e6:ab:53:3b:9a:74:48:c8:be:14:64:82:0f:dc:43:d8:e0:16:
d6:44:88:37:34:c4:c6:cc:f0:02:16:13:ef:6b:fe:9a:7a:a2:
eb:e4:27:0d:9b:4c:19:4a:64:55:c9:86:65:46:65:9c:4f:90:
01:77:e9:8d:be:ff:0c:6a:87:46:84:46:38:c7:1a:bc:46:88:
28:1b:a6:86:06:77:a9:08:1a:f0:b6:78:4a:42:5f:14:40:47:
b8:44:68:b9:cb:d9:ae:9b:d9:8c:93:64:48:db:18:eb:55:99:
c2:12:ed:51:bb:c3:3c:2e:71:1c:74:00:e4:bc:d8:95:36:ac:
21:78:71:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:14:07 2025 by rpki-client