Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
File: BGrKxxMSOFbUrmwWBUYCaE39B8s.mft (raw, json)
Hash identifier: zO69Bq2NLfLN1yIp8FbYahoeGQHr/CyoWnN75ZMD1bQ=
Subject key identifier: CE:C6:E2:FE:6C:E0:5B:C2:8C:BA:E0:F2:75:92:3B:A4:17:15:6D:DF
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Certificate issuer: /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial: 01962BCE625C507171DA5C132EC182F676C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
Manifest number: 0330
Signing time: Sat 12 Apr 2025 21:01:07 +0000
Manifest this update: Sat 12 Apr 2025 21:01:07 +0000
Manifest next update: Sun 13 Apr 2025 21:01:07 +0000
Files and hashes: 1: BGrKxxMSOFbUrmwWBUYCaE39B8s.crl (hash: bnpv9Zw54oIj95tnjlZhfxmqsQ4QkGAl4cxsQH0TvY0=)
2: b_K-XO5P7WSoaWNrsvXhJvIjTbM.roa (hash: bfmFzTeuKRR28Ci+54IJObwwwONZ0pFYWnhKp/hu7PE=)
3: eKW1kuPZCd7Q2-wUVFiZHmqNaHE.roa (hash: E2zSiIhX/F8uFFD091DwlATetZWIqRRANFto/vLbHCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:ce:62:5c:50:71:71:da:5c:13:2e:c1:82:f6:76:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
Validity
Not Before: Apr 12 21:01:07 2025 GMT
Not After : Apr 13 21:01:07 2025 GMT
Subject: CN=cec6e2fe6ce05bc28cbae0f275923ba417156ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:99:6d:06:bd:25:c7:8c:ae:51:db:b2:42:
d2:f9:7c:61:78:06:66:6d:2c:9c:40:c5:03:77:09:
73:ab:93:89:e6:58:51:55:c1:8e:b4:82:ef:10:8e:
87:5e:62:8c:05:62:8c:5d:44:75:7b:be:18:4b:6b:
a2:63:d5:ea:8b:23:eb:2e:1c:d6:11:7d:69:d5:87:
44:38:f7:5c:13:2f:76:4b:4e:9d:06:15:b7:cd:16:
d2:e5:f9:4f:10:5c:e9:e3:aa:87:8f:52:88:79:b4:
5d:9d:ca:87:8a:b0:cc:98:35:8b:de:3b:4d:8f:02:
5c:41:2c:f5:ef:55:7c:08:c2:d4:c4:dc:14:ff:d9:
93:44:0b:db:6b:7f:ee:3b:ac:e9:24:20:86:1b:bb:
0b:b6:10:d4:e2:83:5f:3d:37:bd:a3:3b:5b:7b:8f:
f1:06:9b:f4:77:d2:46:3b:66:e0:7d:c4:48:08:bf:
ef:f9:c3:2f:86:f1:63:28:68:57:57:fe:19:3f:7d:
96:38:b2:67:8f:39:2b:cf:80:02:6e:da:7a:29:ad:
1e:64:8a:6d:eb:e9:5a:5c:7b:87:24:fa:9d:fb:8f:
ac:f4:38:bf:5e:12:3a:a0:a3:9e:4e:ec:ae:ca:f0:
af:ac:9e:0e:5e:3d:db:da:72:4d:43:d5:74:67:46:
fd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C6:E2:FE:6C:E0:5B:C2:8C:BA:E0:F2:75:92:3B:A4:17:15:6D:DF
X509v3 Authority Key Identifier:
keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:36:c4:68:1b:6f:18:c0:24:b6:52:c8:b2:49:5c:d7:ac:29:
ae:1e:84:2f:45:6f:27:ea:27:57:2b:8d:47:72:b5:45:18:04:
65:fc:f0:18:83:ba:20:3c:a5:6e:ae:ca:40:e5:d8:16:59:6a:
61:f6:7e:76:77:18:e3:6a:8a:23:bc:65:89:d9:41:62:41:3e:
e3:ad:4b:6f:aa:26:f9:6a:57:3a:2a:25:d0:d9:9e:91:03:55:
c9:49:0c:37:47:84:02:eb:7e:f4:ca:8e:79:fe:10:84:36:7d:
64:a5:de:0c:27:72:3f:1c:85:f1:80:bf:c2:0b:a4:76:cf:c5:
3a:34:31:b4:f5:3e:09:db:30:90:8c:ad:48:db:98:f8:34:e3:
27:51:e8:d7:52:80:50:c8:17:27:3d:ac:9f:08:a4:10:c9:a5:
bd:58:ac:a2:4d:cb:21:3c:20:75:9c:5b:8c:f2:2d:8f:3e:f2:
6a:e8:5c:60:3e:34:6c:20:5b:48:7c:3e:f4:3c:b8:f2:9c:21:
fa:b0:64:a2:d1:0b:4e:24:ce:d0:68:25:26:4e:cc:56:1e:5d:
4e:2d:1d:3d:7d:09:7c:27:b3:57:b6:9d:55:83:ee:f5:5d:b3:
e9:b4:38:f1:b3:92:e7:d3:eb:09:72:34:cc:a9:be:aa:0e:45:
7e:4c:b3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:42:24 2025 by rpki-client