Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
File: BGrKxxMSOFbUrmwWBUYCaE39B8s.mft (raw, json)
Hash identifier: Zb/Yr86K6mkn+bBxb9ltKKD5/6fZY7sJDqmkg/sgEg8=
Subject key identifier: 45:2B:BF:A3:68:90:AC:FD:D0:61:41:A1:33:DC:E6:C5:35:60:93:37
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Certificate issuer: /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial: 019745C28C65313B37998C0F5752EFB38CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
Manifest number: 03C2
Signing time: Fri 06 Jun 2025 15:01:07 +0000
Manifest this update: Fri 06 Jun 2025 15:01:07 +0000
Manifest next update: Sat 07 Jun 2025 15:01:07 +0000
Files and hashes: 1: BGrKxxMSOFbUrmwWBUYCaE39B8s.crl (hash: YVdlc50zpGYokADC2ZW0UclYoJn2ld7Nxvs/cUW+3AU=)
2: b_K-XO5P7WSoaWNrsvXhJvIjTbM.roa (hash: bfmFzTeuKRR28Ci+54IJObwwwONZ0pFYWnhKp/hu7PE=)
3: eKW1kuPZCd7Q2-wUVFiZHmqNaHE.roa (hash: E2zSiIhX/F8uFFD091DwlATetZWIqRRANFto/vLbHCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:8c:65:31:3b:37:99:8c:0f:57:52:ef:b3:8c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
Validity
Not Before: Jun 6 15:01:07 2025 GMT
Not After : Jun 7 15:01:07 2025 GMT
Subject: CN=452bbfa36890acfdd06141a133dce6c535609337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:65:ae:c4:83:30:1c:3d:f1:f0:4c:61:ae:
cb:25:8e:c2:0e:a3:1a:10:d4:dc:2c:f7:91:1c:38:
12:ec:67:c0:d4:d8:45:0a:85:22:5d:d9:71:96:91:
4a:11:8d:eb:52:30:44:e7:71:0d:3f:1f:cc:8c:ec:
f0:bb:14:22:e0:5e:26:93:6d:fc:ab:c3:39:8d:02:
bc:ab:81:fe:7c:69:3f:2e:b8:67:94:54:4f:67:ba:
11:31:72:70:42:98:26:82:53:f8:ce:85:07:e2:04:
14:70:1f:9e:f0:cb:86:87:d2:4c:bc:0e:ac:cb:b8:
cf:cb:59:84:f8:24:82:8e:b4:b1:09:7e:a7:54:63:
20:7c:b4:c5:bd:18:89:a5:24:62:6c:f7:51:fb:3a:
fe:0f:29:10:d5:8d:32:8a:df:40:44:6f:c0:a0:64:
bc:80:8d:f6:6e:d6:26:1a:a0:d1:7b:ae:9c:2e:40:
98:f8:fd:12:87:72:72:47:83:12:67:39:d5:19:9e:
72:0e:98:1a:d1:6c:7b:21:5f:ca:1e:5b:08:5e:d0:
ce:8a:f8:56:59:a0:c2:9e:1c:79:53:08:81:31:cb:
af:36:91:0c:c8:82:af:a1:e0:81:f3:5d:4d:83:dd:
9a:83:da:e6:66:80:7b:71:49:f5:2a:b0:e0:28:1a:
16:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2B:BF:A3:68:90:AC:FD:D0:61:41:A1:33:DC:E6:C5:35:60:93:37
X509v3 Authority Key Identifier:
keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0a:64:42:7d:39:29:38:bf:c2:af:1c:4a:96:f3:8a:45:50:
c0:24:a8:02:13:5a:02:c3:06:70:06:de:4c:ea:a2:e1:86:88:
e8:01:20:b0:64:34:11:b3:d1:f9:ab:8d:96:66:d9:8d:ee:e9:
d3:6a:e5:01:b9:c8:87:3c:9c:8c:07:76:4e:d2:fe:51:28:c0:
ba:46:8d:c6:d5:a7:a7:92:56:6c:df:e5:5e:ba:e5:3e:f3:82:
04:c9:39:a7:21:cc:31:c1:4f:a1:c2:18:22:00:b2:a6:30:36:
4e:fe:a7:48:62:f9:a6:66:7a:6a:9a:33:87:51:fb:92:16:7d:
4c:36:33:ec:78:89:06:c1:a6:ac:e6:c1:64:d5:46:9b:6c:61:
49:e0:f7:cd:2f:55:63:0d:2f:57:35:9d:20:9c:3a:e8:5b:1a:
76:7c:94:99:de:6e:69:a4:24:b3:42:a3:92:e2:b8:db:8a:42:
ef:e9:3f:12:16:71:9a:1e:5e:12:ee:30:fa:ad:8c:ac:5e:b1:
08:e3:07:24:ee:15:9c:fa:21:2e:a5:46:f7:cf:14:c4:a8:9d:
9b:47:52:77:49:13:82:4f:f3:44:37:30:0e:84:f3:1d:ce:8f:
46:e1:f7:7d:75:fe:93:c1:dd:dd:9d:d4:62:35:2d:4b:df:87:
af:92:fb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:45 2025 by rpki-client