Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier: vxUwlMSZFre74E7m4m8wA1unDdsPqG5nYFWYa9ki6AY=
Subject key identifier: 38:1A:33:77:C9:36:DF:64:DA:0E:65:AD:FC:BE:E6:EA:DF:A9:4A:D3
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 019750B3ED1007376BE657A0373CC6296CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number: 14C0
Signing time: Sun 08 Jun 2025 18:00:58 +0000
Manifest this update: Sun 08 Jun 2025 18:00:58 +0000
Manifest next update: Mon 09 Jun 2025 18:00:58 +0000
Files and hashes: 1: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: 96gIU+AAuMbWJlELXbu8T7v+Un52OeceO+BiKG10KIs=)
2: CLXmnDFSTo8gYOSfsi36Eul40PU.roa (hash: 8Z8KtVhkqNicLx/HNFdK6oyXYk9JSXXv8S9J27mq/xY=)
3: lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa (hash: 1gPUwLHqyRYBWV9FA/ZpZB+VDiIwSRS3XaQWbg+vKSc=)
4: pzYaLDX-85nYF2riSdG9v-AKZYM.roa (hash: EygpfdGwPkKz8M66wN+etr5plBuJkHzB1mglzx/9MuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:ed:10:07:37:6b:e6:57:a0:37:3c:c6:29:6c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: Jun 8 18:00:58 2025 GMT
Not After : Jun 9 18:00:58 2025 GMT
Subject: CN=381a3377c936df64da0e65adfcbee6eadfa94ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9a:eb:a2:fd:98:52:7c:07:5f:35:72:3b:99:
12:f5:9a:08:88:e9:47:b2:51:61:68:99:eb:f5:9f:
89:7d:c3:3c:28:98:47:72:db:bd:7d:97:e1:46:07:
ed:f9:6d:2a:5f:18:02:f6:db:55:3e:a7:06:69:7f:
d0:d5:ec:62:13:27:dc:a3:c8:b6:4b:e0:82:3d:24:
de:7b:5c:1c:f2:6a:c1:c8:76:20:ef:e8:f9:bc:8f:
37:92:a5:7c:dc:70:4c:ff:89:a7:6a:3e:22:c4:1b:
df:95:20:2a:a7:bf:0e:67:ab:a5:98:55:32:0a:48:
e4:d6:6b:ae:1d:cb:8a:05:11:3d:53:e0:c6:84:a0:
09:6b:9b:1b:f2:27:36:37:fe:8e:1b:df:5b:46:09:
64:c8:02:a6:f3:cc:51:d8:8f:ce:19:47:c4:0a:17:
68:7d:f9:dc:63:7a:27:39:34:f4:b6:ef:24:68:20:
21:5e:57:a7:8b:1f:5f:9f:41:a6:15:38:ae:52:50:
98:84:48:f9:dd:f2:57:2d:73:88:ce:51:03:23:89:
4d:ca:7b:09:cb:6f:58:72:7d:d2:a3:05:4f:54:bb:
de:a8:39:9e:4e:24:5b:fc:29:ce:bc:57:52:9f:36:
52:55:e6:07:d8:a0:f1:5b:99:2c:bb:6d:fc:87:34:
15:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1A:33:77:C9:36:DF:64:DA:0E:65:AD:FC:BE:E6:EA:DF:A9:4A:D3
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:88:99:7d:43:35:a2:4d:71:d7:9a:9f:ea:e7:d3:f4:88:e9:
c6:d9:08:05:d7:f7:10:2f:27:f0:62:3d:18:90:1f:34:e7:64:
df:19:e1:95:1d:fd:6e:3d:1c:78:dd:80:77:a0:89:10:7e:55:
f2:9c:1e:58:7b:80:70:1c:0a:b1:f8:38:1d:a1:fb:83:48:1e:
56:b5:b1:2f:a6:70:2d:79:46:db:d3:c2:25:7f:77:9d:ee:bb:
b8:fd:d5:ea:c8:01:54:ce:7e:16:72:1c:3e:06:dd:c5:ef:47:
a0:91:d1:b5:97:82:78:a5:f4:cb:32:9c:bc:74:d6:80:e8:ac:
ed:b0:07:a5:10:79:e7:3d:ca:a4:6a:6e:ae:af:d2:99:a7:8b:
9c:52:3d:4c:37:f0:aa:87:9b:28:27:b1:25:69:f1:4e:f6:a9:
ad:d5:0e:99:14:73:d6:e6:df:4a:dd:4d:b6:3e:48:fd:e2:23:
c0:8b:ec:2c:93:7e:c5:7a:bf:c2:89:d9:95:1e:e4:9a:fe:8d:
c9:e7:5d:4c:86:ec:bd:22:11:a7:64:8e:31:38:60:64:9f:7c:
5b:cb:a9:25:85:d6:41:11:82:71:39:97:d3:9b:ac:b7:6a:88:
07:94:85:49:cc:a0:b5:89:85:f4:34:8f:bf:c2:c7:b7:c7:80:
47:2b:a3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:34:41 2025 by rpki-client