Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
File: BgyexdQFhu0yVfD8T8sxV3FN2hU.mft (raw, json)
Hash identifier: 825OQAxCCw1SXJ+LfLxk0scfWItrlcWRAzP0mihve2I=
Subject key identifier: 4A:2A:82:BD:11:F9:AD:B0:C3:C5:4B:E6:9F:A8:63:C1:C0:B5:4D:D2
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 01967530BD3E0FF2F29BE31A6B0D13FE0E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
Manifest number: 1086
Signing time: Sun 27 Apr 2025 03:00:50 +0000
Manifest this update: Sun 27 Apr 2025 03:00:50 +0000
Manifest next update: Mon 28 Apr 2025 03:00:50 +0000
Files and hashes: 1: BgyexdQFhu0yVfD8T8sxV3FN2hU.crl (hash: 565Cb1iB3NWRuMWYk+7MMvjNQAQShfBxarjmgUXncMU=)
2: SvCn28QlY3H7uObVMGkQTVr8wro.roa (hash: lT4aO9UNqW5C6eAiY2SG9UDFdzGqTUCShh77rO3OfDs=)
3: zXLcc16Hl_V98UU7l_AMl_ZR3t0.roa (hash: zI4peklfsSU0BwGnCgTYFkA1twl5bd7IR0aRBdIFj54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:bd:3e:0f:f2:f2:9b:e3:1a:6b:0d:13:fe:0e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Apr 27 03:00:50 2025 GMT
Not After : Apr 28 03:00:50 2025 GMT
Subject: CN=4a2a82bd11f9adb0c3c54be69fa863c1c0b54dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c8:33:1b:5d:a7:aa:d8:3b:94:64:26:be:91:
eb:7f:a7:cd:25:23:a5:71:9b:ee:29:ad:e0:5d:7b:
c9:cf:8a:1b:48:59:98:27:98:0e:d7:a7:5f:01:fa:
85:29:65:38:39:7a:19:37:1d:8e:b1:5c:52:cc:65:
26:bb:24:ac:52:24:c5:db:24:57:19:81:dc:8b:8d:
62:0e:20:57:e1:e4:53:75:36:ca:60:01:66:a7:4b:
cf:db:50:8f:00:11:c2:29:4e:80:e4:63:69:66:18:
03:de:7a:48:44:2c:05:c2:82:bf:e1:77:a3:1e:57:
8c:8c:ea:6d:84:b5:d1:b0:90:9f:6d:d6:e5:c1:4b:
d6:15:6b:c8:9c:6c:02:e7:5a:5c:c3:4f:0f:b0:97:
2c:fc:74:03:6d:b9:be:b2:4c:06:fd:4c:33:a3:43:
5f:61:56:2f:44:2f:e7:02:f8:87:1f:70:a7:0e:7d:
d5:88:0c:8b:30:fa:91:d5:7d:a4:c2:75:a0:8f:9a:
28:35:f2:3d:3b:a3:4c:91:ad:e4:82:41:ca:6f:0f:
87:f7:c6:ab:de:c6:99:3a:c4:b3:0b:fb:ce:fe:30:
2f:cb:03:1c:7c:ca:11:37:d2:47:6a:7e:68:ec:a6:
6a:ad:89:e4:3e:a3:5c:25:81:3e:3e:e2:84:dd:f8:
7a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2A:82:BD:11:F9:AD:B0:C3:C5:4B:E6:9F:A8:63:C1:C0:B5:4D:D2
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b0:92:e3:5f:0e:5d:7e:eb:2c:a8:ab:27:1e:f3:f0:43:2d:
9d:3b:b8:96:80:18:4e:db:6b:fc:cf:e9:1f:05:63:ec:af:b4:
27:e3:1f:7e:56:4f:74:b1:9d:15:fd:98:42:28:4c:9f:26:04:
c6:b5:8a:34:fe:e5:06:79:ab:f9:4d:75:19:77:97:6b:09:62:
d8:0a:5a:da:b0:3e:9e:23:6a:11:d5:19:3b:cd:f2:c2:df:b7:
7d:eb:d8:32:b9:ad:36:b9:43:00:9c:69:e8:0b:d0:75:96:b6:
ca:37:5b:d3:26:7c:ee:ab:0f:8b:f3:40:97:8a:fc:2a:d3:73:
ea:e8:4c:54:2b:35:e7:3e:cb:28:c5:36:1f:0e:e3:38:79:ec:
1f:a7:a3:8b:19:55:74:8a:06:85:0e:46:f9:60:23:5c:9e:d5:
0e:58:7c:b7:e0:a6:e8:cc:f4:4d:b3:76:57:b0:fa:51:cb:39:
5a:c2:e5:6d:4f:ba:44:a2:66:ba:9d:61:91:18:bc:06:c1:d2:
fa:29:7b:ed:7a:37:a7:74:00:1a:de:7f:47:6e:0a:1c:88:30:
4f:f0:b8:9d:4b:5f:48:75:b1:e5:e7:da:c5:b2:d3:e1:60:6a:
61:5c:b6:05:f1:a0:db:d4:b5:96:99:c2:65:4d:65:5d:40:3e:
eb:00:27:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:09:20 2025 by rpki-client