Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File: BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier: sW3VID3+7rI/uzFUxDDkynp6tHW1HulQ591qZyp5t9E=
Subject key identifier: 31:EF:9E:52:05:C6:1C:0B:5A:99:4E:F7:9B:47:B4:A2:8B:E9:43:86
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer: /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial: 0197458B0F108D1AEDD56C515D11CFA49DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number: 0A31
Signing time: Fri 06 Jun 2025 14:00:30 +0000
Manifest this update: Fri 06 Jun 2025 14:00:30 +0000
Manifest next update: Sat 07 Jun 2025 14:00:30 +0000
Files and hashes: 1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: WBGSalvboEUgNYvU6GKNI2MMf/4wQnzMwjjaPOW+6Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:0f:10:8d:1a:ed:d5:6c:51:5d:11:cf:a4:9d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Validity
Not Before: Jun 6 14:00:30 2025 GMT
Not After : Jun 7 14:00:30 2025 GMT
Subject: CN=31ef9e5205c61c0b5a994ef79b47b4a28be94386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:12:63:fc:9b:d0:09:90:69:0e:c4:de:bc:
a6:63:ac:8c:1a:42:5e:5d:0e:8b:2b:2b:2e:1c:94:
01:da:00:df:60:af:7c:a9:ef:64:63:77:c6:29:84:
9d:d3:63:a5:f7:77:51:d4:96:4a:70:98:ae:c5:aa:
8f:4f:99:8a:18:06:f0:16:dc:47:c6:e9:ba:81:bf:
ca:f4:44:86:d6:44:94:c1:b0:50:2b:8b:df:9f:c1:
fb:7d:44:2a:c2:50:5d:8e:13:cb:97:3b:90:bd:34:
2a:b2:9d:16:fb:d0:db:76:c7:af:c8:ba:a6:b5:48:
f7:97:4c:80:e7:95:ae:d1:35:48:27:20:21:0f:11:
26:c9:dd:b3:95:8f:34:61:8d:d7:07:b6:dd:40:ac:
f8:bf:f9:fb:f4:7e:9f:5a:47:5f:69:28:44:70:f1:
6a:a9:d2:96:86:b1:96:dc:cd:6b:6a:96:68:18:ad:
42:99:95:71:7e:73:a7:83:78:fd:95:da:82:7e:44:
85:5b:03:2d:83:61:91:41:f0:7c:c9:83:57:13:03:
d4:76:89:98:41:3a:33:e5:52:b4:a8:69:32:66:da:
15:b3:c3:1d:0e:ce:ca:45:0c:46:4a:40:77:e0:eb:
b7:a4:47:ca:db:ab:9c:31:30:d6:e3:b1:24:f3:8b:
16:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EF:9E:52:05:C6:1C:0B:5A:99:4E:F7:9B:47:B4:A2:8B:E9:43:86
X509v3 Authority Key Identifier:
keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:bc:b8:8a:4a:15:c7:1b:d7:0c:c8:4e:82:40:5f:4a:2e:42:
f9:03:eb:0a:b9:24:cf:86:ba:bb:30:23:10:76:2c:8a:05:bf:
92:a9:29:23:e8:c7:5a:45:03:d9:b3:c4:79:30:ad:dc:7a:ff:
62:fe:6d:45:bb:d7:a1:bf:94:7c:a5:71:97:9f:40:9f:e8:23:
a7:69:32:d2:ff:ac:b7:99:c4:72:08:ae:37:49:94:6e:e5:44:
2e:2b:40:30:1a:d0:be:86:07:12:4b:76:e9:7f:94:7c:61:a8:
bb:7e:d9:1c:4e:5e:b3:9d:c7:8d:46:e3:fc:d4:ec:b1:86:26:
c6:01:10:6b:cc:09:c2:2b:ac:b3:55:23:d4:94:61:e4:48:bb:
e4:7b:60:34:75:03:c9:08:6e:d6:a8:70:01:a2:8b:c7:fa:a8:
85:ff:ab:82:53:bf:a0:8d:e9:4e:85:69:f4:99:0b:a7:d1:be:
89:bb:0f:a1:9b:86:20:91:59:10:50:09:65:b6:87:35:8a:e1:
46:17:93:4f:9d:33:d0:ab:bb:a6:01:a5:60:17:46:f7:ee:0a:
db:25:45:75:bf:ba:1d:ed:50:84:c4:c5:ef:95:76:48:a2:97:
87:eb:63:82:99:89:bf:4a:a1:5c:9a:dc:2a:1d:10:ed:ef:94:
09:69:09:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdFiw8QjRrt1WxRXRHPpJ3WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NjY5NDBiNmJhNDdmOGNjMTBhN2I0NzhlNDA1NjNjYmI4
YWI3ZjAwHhcNMjUwNjA2MTQwMDMwWhcNMjUwNjA3MTQwMDMwWjAzMTEwLwYDVQQD
EygzMWVmOWU1MjA1YzYxYzBiNWE5OTRlZjc5YjQ3YjRhMjhiZTk0Mzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiASY/yb0AmQaQ7E3rymY6yMGkJe
XQ6LKysuHJQB2gDfYK98qe9kY3fGKYSd02Ol93dR1JZKcJiuxaqPT5mKGAbwFtxH
xum6gb/K9ESG1kSUwbBQK4vfn8H7fUQqwlBdjhPLlzuQvTQqsp0W+9DbdsevyLqm
tUj3l0yA55Wu0TVIJyAhDxEmyd2zlY80YY3XB7bdQKz4v/n79H6fWkdfaShEcPFq
qdKWhrGW3M1rapZoGK1CmZVxfnOng3j9ldqCfkSFWwMtg2GRQfB8yYNXEwPUdomY
QToz5VK0qGkyZtoVs8MdDs7KRQxGSkB34Ou3pEfK26ucMTDW47Ek84sWMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHvnlIFxhwLWplO95tHtKKL6UOGMB8GA1UdIwQY
MBaAFARmlAtrpH+MwQp7R45AVjy7irfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdhVUMydWtmNHpCQ250SGprQldQTHVLdF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83YjI0ODEtZWMxNC00MzY4LTgzODAt
NTUyNjEwMjZmNTIzLzEvQkdhVUMydWtmNHpCQ250SGprQldQTHVLdF9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83YjI0ODEtZWMxNC00MzY4LTgzODAtNTUyNjEwMjZmNTIz
LzEvQkdhVUMydWtmNHpCQ250SGprQldQTHVLdF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy7y4ikoV
xxvXDMhOgkBfSi5C+QPrCrkkz4a6uzAjEHYsigW/kqkpI+jHWkUD2bPEeTCt3Hr/
Yv5tRbvXob+UfKVxl59An+gjp2ky0v+st5nEcgiuN0mUbuVELitAMBrQvoYHEkt2
6X+UfGGou37ZHE5es53HjUbj/NTssYYmxgEQa8wJwiuss1Uj1JRh5Ei75HtgNHUD
yQhu1qhwAaKLx/qohf+rglO/oI3pToVp9JkLp9G+ibsPoZuGIJFZEFAJZbaHNYrh
RheTT50z0Ku7pgGlYBdG9+4K2yVFdb+6He1QhMTF75V2SKKXh+tjgpmJv0qhXJrc
Kh0Q7e+UCWkJtA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:30 2025 by rpki-client