
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
File: BgyexdQFhu0yVfD8T8sxV3FN2hU.mft (raw, json)
Hash identifier: beApRUWB8vMUym2KVEinPnPtfXIfD7uoUzGuqIf1iqw=
Subject key identifier: 76:47:C2:CE:51:9A:3F:EB:BB:00:E6:E5:90:E0:0F:C4:14:71:F8:E2
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 01987ABFB3D411D64FE8362E0D968147E382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
Manifest number: 1192
Signing time: Tue 05 Aug 2025 15:00:40 +0000
Manifest this update: Tue 05 Aug 2025 15:00:40 +0000
Manifest next update: Wed 06 Aug 2025 15:00:40 +0000
Files and hashes: 1: BgyexdQFhu0yVfD8T8sxV3FN2hU.crl (hash: j6bIu/yldh/hGFvwQK3JD33yQcySJDmQgcpNs62eP4E=)
2: SvCn28QlY3H7uObVMGkQTVr8wro.roa (hash: lT4aO9UNqW5C6eAiY2SG9UDFdzGqTUCShh77rO3OfDs=)
3: zXLcc16Hl_V98UU7l_AMl_ZR3t0.roa (hash: zI4peklfsSU0BwGnCgTYFkA1twl5bd7IR0aRBdIFj54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:b3:d4:11:d6:4f:e8:36:2e:0d:96:81:47:e3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Aug 5 15:00:40 2025 GMT
Not After : Aug 6 15:00:40 2025 GMT
Subject: CN=7647c2ce519a3febbb00e6e590e00fc41471f8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:59:44:ed:ac:6e:9d:c0:51:fc:17:0e:f3:
33:af:fa:b7:44:8e:8e:56:a0:18:f8:21:de:ee:51:
ba:60:39:f2:ad:72:e0:2d:cd:ee:3d:ee:5d:5b:ad:
2f:0f:22:26:03:f2:1a:00:a2:ae:4a:28:71:1e:37:
74:cd:f2:fb:36:fd:be:49:0f:03:98:2f:37:50:50:
07:8b:93:d1:0d:45:7a:17:cb:e7:4a:bd:8e:5f:c1:
30:9a:0d:6b:85:75:2e:7f:f1:64:cb:2c:8c:88:93:
3b:52:97:0a:07:41:c9:22:4b:df:6c:71:66:d8:1b:
0e:c0:ae:86:90:03:98:1f:d5:18:bb:c2:5b:1f:f2:
c7:8a:16:44:9d:5d:11:c9:16:e4:56:a2:12:15:f0:
41:74:32:fb:77:86:71:81:58:cf:8d:68:86:7e:1e:
a5:a0:e3:c7:30:a9:4f:cd:2b:37:cc:ff:66:fe:f5:
e1:a1:59:1c:f1:e3:e9:fc:59:83:82:70:48:8a:33:
87:f1:81:02:58:a7:24:c1:b6:2e:8e:ba:24:de:dd:
47:2d:ec:16:3d:3a:6a:3d:c2:0b:3e:9b:d7:f5:18:
ea:b3:6f:41:dd:a8:f3:67:bf:64:21:2a:5e:25:11:
8a:0d:86:20:7e:02:78:fe:a9:62:97:5a:3a:2b:47:
16:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:47:C2:CE:51:9A:3F:EB:BB:00:E6:E5:90:E0:0F:C4:14:71:F8:E2
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:12:f4:4f:bb:78:82:be:59:5c:ef:e3:40:e8:8c:f4:86:5b:
5f:22:af:04:ee:31:0d:45:7a:f0:25:9b:5f:c6:a1:55:fc:a8:
70:e0:19:1c:e3:dd:7b:90:0f:4d:64:78:6d:6a:e2:85:cc:af:
64:f2:0e:75:5d:6d:a1:96:2b:e6:90:a9:78:e6:2b:26:c5:c4:
c2:f7:0a:9e:b0:48:cb:0e:29:a1:34:33:1c:b2:a3:0f:b4:6e:
ec:79:0d:e2:1e:87:86:ff:c9:c5:8d:b9:28:48:be:62:9e:48:
da:01:89:77:60:ea:f2:67:8a:7d:1e:3f:28:5d:2d:96:c1:8e:
a3:48:f3:58:bf:e2:51:b5:42:b8:0f:5a:a7:e7:87:c8:5d:7d:
4f:5c:d8:ac:13:83:d3:ce:44:77:c4:28:ca:5f:a1:b7:be:4c:
9a:96:12:8c:1a:20:cc:60:cd:80:7c:ed:42:a3:04:82:32:cb:
24:e2:b2:c0:cb:3a:ce:f8:24:07:85:0c:bc:ce:27:8c:da:8a:
3f:92:82:ae:71:cb:77:15:29:d9:4a:5e:78:03:ed:35:22:fa:
c4:b0:1c:ce:0b:bc:dc:01:32:97:b0:aa:49:c5:05:46:36:cb:
c1:73:57:9d:7c:22:82:c1:45:3f:c3:81:15:c2:e1:c8:2c:77:
30:db:d7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:56:38 2025 by rpki-client