Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: f0EH/xQCmTUMW1/TSGT9v/UCOW2Bx+yqujCjIqr7GR4=
Subject key identifier: B2:37:43:E8:75:E5:EA:B0:E0:04:05:D2:D2:12:A4:93:0D:27:15:4A
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 01976A73572ED9D8A23E0D8583705C523DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 1592
Signing time: Fri 13 Jun 2025 18:00:33 +0000
Manifest this update: Fri 13 Jun 2025 18:00:33 +0000
Manifest next update: Sat 14 Jun 2025 18:00:33 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: mmG9iVpRPm7cwBtl8JDXGYxOowJreEz/VC3TjShei3c=)
2: Lh8yvuYECQW6dDow2L76nBGsr6E.roa (hash: 0hiYjVR3RerVN9RXXudfA5pr9cnXHHQqw5O/Jaf9Snc=)
3: vtX7rusa6fZMmF3lc_ZvTTSyZII.roa (hash: /Q3goqDnJ6EwR3K+qh2LYwfBLshEeT0YC75y12sQLG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:73:57:2e:d9:d8:a2:3e:0d:85:83:70:5c:52:3d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Jun 13 18:00:33 2025 GMT
Not After : Jun 14 18:00:33 2025 GMT
Subject: CN=b23743e875e5eab0e00405d2d212a4930d27154a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:28:29:f3:5f:7f:b7:46:6b:2b:1d:1e:cb:60:
b9:9e:14:29:38:ae:7c:a7:98:2d:cc:05:cf:58:94:
27:b2:03:5e:57:5a:d6:0c:14:9a:7f:6f:5c:7d:e0:
a5:38:38:ac:54:ea:d6:94:d7:3c:13:88:c0:36:54:
fe:81:99:c2:34:76:eb:59:d3:34:6f:2e:45:f5:f3:
a5:0a:af:ef:6b:7a:64:cb:62:46:c4:e9:55:58:dd:
33:95:f0:41:f6:c1:a3:04:2b:f1:56:e4:56:26:6e:
1b:3d:3c:90:cb:6f:e1:43:02:50:12:e0:0e:9a:ee:
fa:18:a2:78:d1:49:28:ae:a6:72:0a:7f:81:f2:b7:
48:7a:56:16:d9:4b:54:ef:76:40:9b:05:e4:6f:17:
7b:5c:86:30:86:5e:17:a7:09:de:dd:33:87:65:50:
a0:1a:2f:7e:2f:30:41:f5:d1:12:00:97:a3:25:18:
ca:98:f3:48:0a:44:15:95:c5:6d:12:6c:c0:37:3f:
16:e2:2a:ad:61:4d:3f:33:32:0b:3c:96:06:ca:df:
89:c2:33:a7:99:03:87:c4:ac:cd:d3:89:8d:a5:61:
18:9a:62:90:db:fa:2d:1f:3b:61:81:6a:2f:d0:0c:
df:ba:ae:a1:bc:be:e1:b9:e3:ca:10:68:b5:34:f9:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:37:43:E8:75:E5:EA:B0:E0:04:05:D2:D2:12:A4:93:0D:27:15:4A
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:cd:20:f0:14:88:f2:39:a9:a0:cf:4d:94:8b:2b:bd:59:fc:
cc:00:ac:71:ab:b0:6c:40:a5:a8:27:fa:d7:b0:91:ff:f3:4e:
5d:c0:24:13:c1:1e:24:4b:08:f4:0d:f2:35:5c:a8:30:f5:8b:
40:a6:84:0d:0d:44:72:69:bb:df:5c:7e:50:8b:3b:51:e4:37:
a7:55:8a:ad:09:9e:c2:0f:47:45:1b:12:21:8f:29:a5:4d:31:
a1:f5:b6:d1:90:d4:f3:9f:67:17:d8:22:3c:59:3c:01:ba:47:
fa:7e:d0:26:17:cf:1b:74:b0:c0:f5:b1:4e:2d:5c:cd:9e:d1:
4d:2f:ae:01:fe:73:aa:bf:62:c4:25:1a:84:45:72:fa:83:d0:
c2:f8:e1:6c:71:31:ad:87:7c:c3:04:df:04:89:dc:ba:6d:e1:
7d:db:57:b7:47:67:53:e5:5d:b9:6f:94:ca:7b:7b:ef:e4:20:
a2:22:dc:5f:a8:46:e2:a8:cd:ec:c0:22:a7:f2:1c:e7:37:48:
a9:32:1d:2e:d7:fd:1c:25:c8:21:91:bd:7b:eb:d2:c6:d3:f0:
b4:92:26:52:87:cd:b8:34:b6:72:8e:11:7c:29:1b:62:5b:c1:
09:d4:e2:25:cf:c7:67:ee:dc:87:52:fc:ef:58:14:a2:c4:f9:
11:d7:d1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:59:26 2025 by rpki-client