
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
File: Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft (raw, json)
Hash identifier: 0V1kLsVCfCPEqHObFNaOAPHMBSl8eEGySx0r9pPEXNc=
Subject key identifier: 49:10:A7:0C:2F:B7:FC:1A:E9:9A:CA:C6:72:21:04:A9:9A:81:FA:EF
Authority key identifier: 06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
Certificate issuer: /CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Certificate serial: 01957A22C672B475BAABD03F15E9B84FBF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
Manifest number: AF
Signing time: Sun 09 Mar 2025 09:00:54 +0000
Manifest this update: Sun 09 Mar 2025 09:00:54 +0000
Manifest next update: Mon 10 Mar 2025 09:00:54 +0000
Files and hashes: 1: Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl (hash: mIueQgX7Vwu8WYpikP/WbPw2REGitrDW9D8qboFUzi8=)
2: aTqNBiMtHyqY4sjo2vUby0yJMKk.roa (hash: 8tR80jRMgENDFDI+mB0B/a9/v+rAAXYdo53Fd7KchX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7a:22:c6:72:b4:75:ba:ab:d0:3f:15:e9:b8:4f:bf:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Validity
Not Before: Mar 9 09:00:54 2025 GMT
Not After : Mar 10 09:00:54 2025 GMT
Subject: CN=4910a70c2fb7fc1ae99acac6722104a99a81faef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1a:8e:45:84:41:8b:49:5b:49:2d:44:d9:06:
eb:82:ea:f0:84:64:6f:49:0f:50:6d:41:00:73:93:
d7:ca:8a:b4:ff:78:f1:20:8a:37:b7:58:94:65:05:
f5:95:93:42:2f:fc:50:b4:c4:12:36:53:4f:24:85:
de:33:10:8b:b7:0c:47:0c:18:04:26:62:51:ac:41:
6d:54:05:ce:54:fc:0a:4b:dc:ae:05:81:d7:21:98:
2f:ba:03:7b:c5:79:1b:e6:4e:41:cf:d7:ed:79:d4:
66:cb:8c:f2:a4:ea:07:ab:d8:e0:8a:e1:65:8d:ab:
f2:28:97:72:da:25:40:27:80:a7:a9:9c:97:d8:13:
8d:4e:50:f2:c7:af:8f:40:4b:0e:82:e4:b8:aa:79:
6a:95:78:66:69:11:5a:62:38:d7:35:a9:7a:4c:73:
3c:92:81:36:2c:36:a6:53:ee:41:29:fb:ce:ec:48:
ef:d3:15:dd:5c:3a:88:6b:12:9b:86:20:db:7f:44:
c7:e8:15:1b:a2:0a:5d:75:ef:97:b8:6a:e3:3c:38:
22:47:81:3b:11:78:bf:cd:50:2e:97:4e:7b:5d:50:
02:ce:8a:e3:e3:fd:f1:f7:5c:39:76:c1:e6:d6:60:
5d:5f:ac:fd:86:33:15:5c:e8:5e:72:94:f1:e9:33:
94:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:10:A7:0C:2F:B7:FC:1A:E9:9A:CA:C6:72:21:04:A9:9A:81:FA:EF
X509v3 Authority Key Identifier:
keyid:06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4d:92:13:a6:66:71:ed:95:9f:17:6c:2f:a6:ba:4e:da:05:
26:71:4f:50:f9:5d:70:f4:9e:a7:8d:3c:4c:61:13:a0:68:24:
c1:2d:bc:c6:9c:a2:82:a7:21:06:8d:d9:76:30:9f:54:9b:91:
a9:91:43:a8:f2:44:9e:30:70:af:71:83:89:e4:da:fd:81:7c:
92:d7:5c:b3:c2:04:10:9c:d7:bb:c0:f8:fc:88:a6:db:32:ad:
91:6d:6e:74:fb:dc:a0:e7:01:06:86:70:5c:80:a0:ac:55:4f:
5a:ae:4d:9f:ee:cb:43:fa:0a:96:70:73:21:e3:0b:a7:3c:40:
49:ec:63:8f:c0:1f:32:36:a5:26:de:0b:6b:b2:6c:99:d9:6f:
99:86:e9:ea:06:54:63:f0:78:e0:fa:8a:7a:31:11:b5:fb:17:
14:bb:d2:d5:0d:c6:a3:ba:30:ca:f5:b9:d6:18:88:23:a0:5e:
52:8d:09:f5:86:91:d5:8c:d2:cb:01:6b:a4:53:da:94:3f:de:
0f:77:cd:57:c3:ec:f9:81:42:ee:6e:75:cc:b0:41:71:7d:d5:
0d:ff:49:26:58:98:bd:f3:b8:e4:60:cd:29:0f:3d:b0:e3:7c:
f5:02:5b:2a:a4:bb:c5:12:38:ed:62:f5:e8:0a:d1:a9:19:0d:
e5:e2:35:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV6IsZytHW6q9A/Fem4T7+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDk3YTcyZTRhZTQwYjZiOTkyOWI3MmY4MWVmZDcxYzUx
N2RkOTgwHhcNMjUwMzA5MDkwMDU0WhcNMjUwMzEwMDkwMDU0WjAzMTEwLwYDVQQD
Eyg0OTEwYTcwYzJmYjdmYzFhZTk5YWNhYzY3MjIxMDRhOTlhODFmYWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hqORYRBi0lbSS1E2QbrgurwhGRv
SQ9QbUEAc5PXyoq0/3jxIIo3t1iUZQX1lZNCL/xQtMQSNlNPJIXeMxCLtwxHDBgE
JmJRrEFtVAXOVPwKS9yuBYHXIZgvugN7xXkb5k5Bz9ftedRmy4zypOoHq9jgiuFl
javyKJdy2iVAJ4CnqZyX2BONTlDyx6+PQEsOguS4qnlqlXhmaRFaYjjXNal6THM8
koE2LDamU+5BKfvO7Ejv0xXdXDqIaxKbhiDbf0TH6BUbogpdde+XuGrjPDgiR4E7
EXi/zVAul057XVACzorj4/3x91w5dsHm1mBdX6z9hjMVXOhecpTx6TOUTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkQpwwvt/wa6ZrKxnIhBKmagfrvMB8GA1UdIwQY
MBaAFAYJenLkrkC2uZKbcvge/XHFF92YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zYTEwOWEtOWIzMi00NWE4LTliMGMt
N2EwMjUxN2ZkOWQyLzEvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zYTEwOWEtOWIzMi00NWE4LTliMGMtN2EwMjUxN2ZkOWQy
LzEvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALU2SE6Zm
ce2VnxdsL6a6TtoFJnFPUPldcPSep408TGEToGgkwS28xpyigqchBo3ZdjCfVJuR
qZFDqPJEnjBwr3GDieTa/YF8ktdcs8IEEJzXu8D4/Iim2zKtkW1udPvcoOcBBoZw
XICgrFVPWq5Nn+7LQ/oKlnBzIeMLpzxASexjj8AfMjalJt4La7JsmdlvmYbp6gZU
Y/B44PqKejERtfsXFLvS1Q3Go7owyvW51hiII6BeUo0J9YaR1YzSywFrpFPalD/e
D3fNV8Ps+YFC7m51zLBBcX3VDf9JJliYvfO45GDNKQ89sON89QJbKqS7xRI47WL1
6ArRqRkN5eI1zg==
-----END CERTIFICATE-----
Generated at Sun Mar 9 11:34:00 2025 by rpki-client