Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File: BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier: lYpWuQ9k6LWuXI2i+bzTlHTFVl1H3C2Gk5VyFTjD7bg=
Subject key identifier: B5:05:BD:E6:6A:DB:E4:5D:50:23:D6:B8:A0:BA:ED:93:4B:C6:5A:C1
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer: /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial: 0199228CDF8AAE280B2AD53FE24CF96D9A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number: 0B28
Signing time: Sun 07 Sep 2025 05:01:21 +0000
Manifest this update: Sun 07 Sep 2025 05:01:21 +0000
Manifest next update: Mon 08 Sep 2025 05:01:21 +0000
Files and hashes: 1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: r/2ljOn3PpuCXw4lrF+W8mhv8G4oJEA3XgOVaxG6MCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:df:8a:ae:28:0b:2a:d5:3f:e2:4c:f9:6d:9a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Validity
Not Before: Sep 7 05:01:21 2025 GMT
Not After : Sep 8 05:01:21 2025 GMT
Subject: CN=b505bde66adbe45d5023d6b8a0baed934bc65ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:cc:66:5b:9f:9c:4a:dd:27:22:5e:e7:ab:
5f:55:b0:08:22:a1:25:ff:0a:34:1c:4e:f4:48:f2:
b2:43:41:ca:5e:9e:ba:0d:4e:ed:cf:8d:bd:62:e7:
01:ad:69:6b:d0:2f:40:23:7a:e6:cf:ea:d8:e5:b4:
0f:fd:24:14:e8:8b:4f:c6:d2:f5:47:10:a3:09:c1:
29:28:1e:9a:4f:77:a0:a9:4e:7f:f1:74:13:fc:15:
35:63:d3:c4:8b:75:71:f5:21:e4:43:3f:6f:0d:1a:
1e:4f:cf:8b:02:18:d1:c3:74:ab:db:da:d1:b4:90:
ce:c3:b8:89:2a:9b:c0:72:53:de:7d:64:b6:b1:d5:
cf:ab:9e:30:a5:60:59:9f:1e:28:a4:02:dc:05:95:
48:00:d3:74:b7:1a:b3:1d:77:aa:ed:ea:87:ea:bb:
aa:07:9c:f4:c7:e5:f8:26:ad:87:16:45:2c:0f:b9:
31:dd:fb:18:a0:13:c5:ca:b4:9d:4b:88:8e:08:a1:
c4:8a:04:e3:93:f2:6f:d9:b9:15:58:7f:c0:87:69:
0d:1b:42:06:79:31:df:aa:99:26:e0:bb:96:d2:b3:
76:49:9d:7f:91:1f:5c:7d:20:35:f3:92:e7:cf:42:
d2:63:39:36:28:6f:f8:74:59:58:90:17:2d:36:96:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:05:BD:E6:6A:DB:E4:5D:50:23:D6:B8:A0:BA:ED:93:4B:C6:5A:C1
X509v3 Authority Key Identifier:
keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3b:a2:13:bd:8f:60:97:c8:9e:a9:c9:53:05:f4:57:b7:01:
fa:b1:1e:e8:9c:35:1d:6d:09:f5:0b:48:1c:39:e4:95:e9:d0:
b3:da:06:0f:88:63:53:7a:25:a9:8f:72:8e:01:11:94:f7:7e:
32:14:3c:e4:b9:70:28:0d:09:45:49:96:3d:33:52:34:c0:b9:
bb:dd:36:cd:a4:5e:4a:68:c9:d2:d2:18:b2:a0:29:02:ac:80:
36:32:81:29:ea:07:e7:59:8f:31:f7:3c:10:95:6d:61:01:40:
cc:31:75:30:4a:86:94:d7:60:48:57:c1:83:09:3b:5b:36:c0:
3c:62:57:c5:9f:7a:18:27:66:ef:bd:3b:0a:58:5a:de:24:6d:
b4:e7:2b:16:04:aa:5b:ef:e7:f1:c9:c5:36:a7:3c:42:05:a1:
b1:52:25:6e:01:1c:66:97:c1:b5:49:95:ff:81:d4:4f:d0:3e:
6a:8e:1c:92:fd:80:67:55:e0:42:b8:ee:be:24:2d:5a:28:db:
d5:4d:9e:eb:39:f2:66:d6:d3:ee:aa:9f:3e:8b:1b:fb:f1:6a:
f1:29:58:2f:06:d8:02:db:a4:14:05:22:9b:05:54:8d:6a:e6:
5d:26:a9:ed:99:50:f0:d8:5c:53:52:fa:fe:27:22:4c:9c:98:
f6:95:ee:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:38 2025 by rpki-client