Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
File: BGelYhGyHprHzcj7Y58xCpLCEEw.mft (raw, json)
Hash identifier: hdJGHvA6WQwUQ5Xds9832qVyFeq+q/1+tU0z2VO6HrI=
Subject key identifier: A1:97:0F:24:89:DD:63:5B:49:D6:74:79:79:8F:D1:26:3C:9A:8D:5A
Authority key identifier: 04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
Certificate issuer: /CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Certificate serial: 01974C9FF7797815B67F8B3B24E5DC8B6FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
Manifest number: 0C5F
Signing time: Sat 07 Jun 2025 23:00:41 +0000
Manifest this update: Sat 07 Jun 2025 23:00:41 +0000
Manifest next update: Sun 08 Jun 2025 23:00:41 +0000
Files and hashes: 1: BGelYhGyHprHzcj7Y58xCpLCEEw.crl (hash: RHFgA+ZV0iaxq8PEyVgsTtoxYeY1kAXX+OHUDSzhwUQ=)
2: vBbw-4MxcReP3ao6MqHjBCu3GcI.roa (hash: W28uSnDMlGVkrCQsXwIvXwkvC/TrS+441MfK9XqL5Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:f7:79:78:15:b6:7f:8b:3b:24:e5:dc:8b:6f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Validity
Not Before: Jun 7 23:00:41 2025 GMT
Not After : Jun 8 23:00:41 2025 GMT
Subject: CN=a1970f2489dd635b49d67479798fd1263c9a8d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cd:b4:f8:c3:1c:ef:b8:25:35:ec:d1:6c:87:
6a:06:89:30:92:c0:2b:1c:de:14:8f:8d:b5:91:f8:
3b:e8:26:6f:ab:64:59:e1:21:ca:21:ed:e0:05:0b:
1b:e9:f1:22:2f:eb:54:12:78:e2:9b:c8:9b:55:3f:
76:02:c6:b2:65:0f:4d:2c:ac:5c:80:43:b6:01:d0:
e5:e0:2c:61:72:28:c9:f2:23:95:0c:b5:9e:39:b2:
1c:41:84:24:6d:5a:35:a8:82:cd:ca:dd:80:c6:d8:
65:b2:9a:15:9c:75:3d:4a:0a:b3:59:67:cb:61:e9:
cf:02:02:ca:fd:83:98:08:83:d2:4c:6f:bc:0d:82:
a3:4b:d8:82:69:1d:d1:48:2b:93:14:a2:95:ad:61:
2f:d1:d7:37:d7:44:30:7d:83:d1:55:d6:39:7d:ed:
ba:d4:26:46:b9:69:1d:54:0f:eb:1a:f7:57:e5:77:
fb:9b:30:54:ef:58:f6:07:07:9b:1e:28:70:b8:28:
f9:b4:8e:0e:9f:e8:ec:e3:e6:cc:53:ae:11:78:6c:
1e:c1:16:ee:64:22:41:96:90:f8:0d:b5:60:c7:49:
37:e2:88:51:e9:3d:11:66:50:1c:69:0b:fa:49:6c:
6e:f5:13:a6:8c:bb:c4:98:77:11:bf:69:b3:14:32:
d6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:97:0F:24:89:DD:63:5B:49:D6:74:79:79:8F:D1:26:3C:9A:8D:5A
X509v3 Authority Key Identifier:
keyid:04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5d:1c:00:94:d4:08:f5:38:20:b0:73:c5:c3:09:d5:21:ea:
21:d4:9f:ab:40:29:9a:b7:09:0f:1f:dd:8c:61:5f:5f:ff:15:
57:cd:ef:0b:6d:a7:41:cc:2d:8b:ce:65:78:5e:7a:b6:f0:9a:
e9:b3:12:a1:59:9b:ca:de:ad:d3:b8:f8:25:cb:bd:c5:d3:2d:
4c:99:e9:83:3e:3e:08:79:4b:40:42:6f:da:79:28:ec:b2:53:
e7:75:46:94:a9:29:37:ae:f5:17:21:d6:77:59:03:b1:c6:62:
d2:3d:c3:4e:6a:15:c4:c3:d1:b4:46:71:85:57:aa:cf:62:67:
42:d0:85:c2:d3:4f:e3:88:75:ce:67:cd:75:8c:81:b4:e9:6e:
35:74:7a:8e:31:c6:54:02:42:ec:99:4a:96:75:f6:02:85:66:
90:ed:f4:5c:b8:a2:2e:c3:5b:15:33:b8:d7:a3:41:94:0c:d7:
4f:5b:4a:ed:b2:5e:f8:be:6f:bb:53:2e:be:c1:90:77:b0:aa:
3e:80:01:e7:c0:7b:a4:f1:55:75:42:63:1f:f2:ec:fd:0c:45:
55:c1:d3:bd:d7:d2:91:1c:17:60:fa:48:dd:e5:62:3d:4a:2c:
e2:18:06:df:f5:55:52:46:2e:d0:b1:db:dd:95:b4:bb:e7:4e:
48:6d:44:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:16:03 2025 by rpki-client