Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
File: BgecQppxRvH5qgSb20LKlRRLdNo.mft (raw, json)
Hash identifier: e3ex1w9VDpAfUacd39JoiSzxKYNB2km8cjDWSBFQxXs=
Subject key identifier: 1B:3B:8C:B8:04:84:7B:56:CC:5C:6B:DA:94:1F:06:17:A9:75:85:4C
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Certificate issuer: /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial: 019750B3C49CAB30D7C08FE950FA4FA0EB90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
Manifest number: 158A
Signing time: Sun 08 Jun 2025 18:00:47 +0000
Manifest this update: Sun 08 Jun 2025 18:00:47 +0000
Manifest next update: Mon 09 Jun 2025 18:00:47 +0000
Files and hashes: 1: BgecQppxRvH5qgSb20LKlRRLdNo.crl (hash: ZRNLpswzoXs9puHyPhK/6+LL/hL6y211s0FOTjCMbNA=)
2: LrxwZvPINeksQvETDOEipmKUBtE.roa (hash: mTC/swC0iM7xlEfSlqCGI1ogIVmyM2L2H3WafcUtAOE=)
3: vQy6a6NTEAZwwzZEgqZ7s7CD2Sw.roa (hash: eCRwk/+JF3YykOACMbGT9h5ea0SspdLqSge077r4Iz0=)
4: vYyERfzMQqwkNDEj2uOXG_S6t8w.roa (hash: WXsRMU1133zUyQTKxrB9Bygige89E8eXSL5nflVhMAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:c4:9c:ab:30:d7:c0:8f:e9:50:fa:4f:a0:eb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Validity
Not Before: Jun 8 18:00:47 2025 GMT
Not After : Jun 9 18:00:47 2025 GMT
Subject: CN=1b3b8cb804847b56cc5c6bda941f0617a975854c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:50:0d:b1:95:83:73:b7:c7:23:7e:b0:bd:
2e:81:9b:1f:a1:3b:c1:48:f1:f2:fa:ab:cd:17:1d:
fe:9b:98:36:a9:5d:77:32:40:89:4e:8c:d0:f8:8f:
64:8e:fb:55:68:54:30:1c:09:29:c9:d6:fa:4a:2d:
5e:91:08:fe:0d:2c:d8:ac:38:ec:bc:32:03:a4:24:
71:21:e2:8e:2f:61:6b:f5:38:b0:6d:ac:50:13:45:
1d:78:a0:93:fb:54:38:b1:2e:10:3c:c3:82:1a:4b:
16:31:06:d0:cb:34:56:72:c5:ff:6f:de:33:f7:99:
6c:c6:41:5f:50:06:9d:b8:25:7e:16:e8:d5:3b:56:
b9:c8:b1:b0:6e:67:9d:98:8d:5f:97:e7:50:95:1b:
36:39:24:0d:75:33:54:f0:5a:bf:47:9a:2e:a9:c4:
6d:99:20:5c:2d:d2:7b:6b:8d:88:0d:ad:9d:77:3c:
8a:25:a6:d9:80:06:0b:61:aa:b4:bb:37:b9:55:2e:
8f:4f:72:df:72:1d:ca:e0:6c:1e:c9:22:a8:86:d1:
6b:8a:09:98:57:d6:c1:8a:43:25:3a:34:2f:92:2a:
0a:8b:ac:e2:50:de:14:64:a6:21:e7:83:a9:96:48:
f8:c2:38:e8:2f:10:cf:6e:78:a4:fa:e3:fa:fb:32:
17:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3B:8C:B8:04:84:7B:56:CC:5C:6B:DA:94:1F:06:17:A9:75:85:4C
X509v3 Authority Key Identifier:
keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6f:43:2d:9b:20:34:5a:76:e9:f0:af:88:8d:0c:1d:7c:c0:
30:29:7e:52:a4:ac:dc:c1:f2:5a:7d:e7:83:62:5e:38:c9:56:
36:6c:99:a7:5b:bf:1d:ed:b0:dc:38:aa:80:f5:32:1c:62:88:
c7:0b:e8:8c:b7:cc:af:88:c1:08:cb:92:3f:62:42:b0:a7:4d:
b6:bb:10:4b:d5:8a:ac:fa:a6:f9:3e:fc:15:7f:19:94:82:80:
c7:87:13:d2:36:d5:fd:59:a5:cc:a2:46:e7:7f:c8:f9:c7:5b:
79:14:52:50:d5:d6:1f:1a:aa:53:58:06:55:06:1c:cb:c3:1b:
99:37:4d:75:cd:c0:1e:d2:84:e3:6b:2c:14:ac:31:5c:1b:0a:
48:29:40:e4:ea:ea:cc:c9:23:6e:f4:f0:21:e8:cf:a1:fe:43:
5b:2a:54:fa:e4:df:03:9e:01:42:4d:f9:15:d1:71:d7:cd:18:
6d:aa:76:fa:f2:cb:53:60:84:3c:96:71:1f:0e:63:4f:6c:7b:
56:fb:61:1f:e5:71:ab:d3:d6:a6:b2:09:33:8f:4f:fe:8c:a5:
f2:fe:fd:85:cb:d6:fa:ec:3a:52:a5:3a:e4:81:25:d2:ea:ee:
1e:3e:bb:48:88:71:05:d9:67:04:83:18:65:1b:5e:e6:ce:20:
47:6c:12:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:43:31 2025 by rpki-client