Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
File: BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json)
Hash identifier: j/3Ak2hW+am6zCekM6CDkHAcdBj8bY30lJ7efioYMjM=
Subject key identifier: 97:EF:11:DF:1C:3B:06:09:D0:FC:2B:74:3D:57:FA:B1:4D:2D:75:AB
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial: 0196907158D32A65E314B203C8214DB3284E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
Manifest number: 0F12
Signing time: Fri 02 May 2025 10:01:09 +0000
Manifest this update: Fri 02 May 2025 10:01:09 +0000
Manifest next update: Sat 03 May 2025 10:01:09 +0000
Files and hashes: 1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: LVT4+jZhbACcjnI/XUrrcTOqUAJoUg7andMVuNHFtdM=)
2: elV1APoKiSk_9XkOBJQhYkqxHiw.roa (hash: 8zT6bhkdxlFlI+FWNJggqU5g/ZNnR60ACpbk2nou4yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:71:58:d3:2a:65:e3:14:b2:03:c8:21:4d:b3:28:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
Validity
Not Before: May 2 10:01:09 2025 GMT
Not After : May 3 10:01:09 2025 GMT
Subject: CN=97ef11df1c3b0609d0fc2b743d57fab14d2d75ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:49:7a:c6:91:2d:60:69:4c:28:84:df:ac:5c:
d0:0f:5f:ce:06:5f:fb:b8:b3:6a:05:19:c1:39:33:
01:c2:c8:0d:b4:e0:74:ad:1d:1b:16:80:aa:80:5a:
ad:7a:b5:44:e1:44:16:d4:bc:59:e0:32:d8:2c:b8:
c3:59:5f:97:6d:cc:e9:af:67:fb:54:46:3e:32:9f:
10:6d:6c:12:a9:d3:46:8d:7b:74:14:6c:82:46:fa:
61:84:f5:b1:ca:86:f0:52:ce:7d:f9:e8:85:fd:ae:
c5:f1:ec:5a:c3:2b:7c:77:85:4b:b0:bd:c1:c8:86:
c5:d8:da:3c:94:de:8a:87:4d:4f:66:94:4e:85:38:
b0:6a:fe:db:ae:e8:f8:9c:8c:df:42:45:a2:10:87:
da:47:be:4f:a5:fb:3c:45:c9:92:35:c4:72:5d:04:
25:a2:60:2e:5c:2a:eb:ec:72:88:9c:b0:fa:6e:a5:
e4:64:df:ca:b5:84:7b:06:8f:9c:bf:18:e9:24:32:
9f:89:86:c6:3d:e1:97:e6:03:36:e3:90:eb:18:f6:
a2:84:49:52:78:d3:59:8c:7d:e2:07:a5:64:ba:42:
45:62:ae:d0:ee:3c:8d:25:2a:18:bd:7e:18:ae:6b:
64:48:21:4a:50:99:4c:30:25:f2:0a:58:0c:2b:a0:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EF:11:DF:1C:3B:06:09:D0:FC:2B:74:3D:57:FA:B1:4D:2D:75:AB
X509v3 Authority Key Identifier:
keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a7:f0:3c:d8:27:86:d0:a1:a9:83:91:fb:6f:0a:7e:94:cf:
80:04:90:2e:cc:51:63:bc:9f:e2:a5:f2:2c:e9:31:25:61:19:
5e:1d:f6:8b:94:29:fe:08:e2:6e:3a:73:a2:62:e0:d7:ec:71:
eb:52:e1:3c:4f:03:34:b5:c9:9e:4c:57:f5:ae:8c:fe:b8:4d:
57:bf:35:f1:4b:0a:b1:32:4a:a6:fa:48:57:6f:e6:42:65:b4:
bf:b6:07:76:f3:6f:c6:12:4d:84:c6:b8:f9:12:2a:56:bf:8f:
bf:5d:e6:a8:74:ca:2e:78:f1:ff:0a:77:04:fa:35:b7:43:af:
80:28:82:00:1b:77:7e:fd:3c:1e:83:96:3b:b3:57:fc:07:05:
d4:a0:39:39:1b:0f:82:fe:5d:66:7a:e4:7c:0a:95:bf:12:a5:
41:55:c0:e8:f0:77:52:d7:6a:95:77:bd:0a:d3:76:cd:a5:f9:
ce:fe:5a:f3:52:1c:de:8a:2d:00:a9:95:67:ff:c6:69:57:1c:
bf:f8:00:ee:19:a5:6f:ad:1f:35:a2:b2:54:c7:57:c0:d1:2c:
6a:55:79:c2:7b:20:bb:38:29:9c:b3:ee:1b:5b:4c:d7:c8:96:
87:17:2d:d0:f5:9f:ba:96:3d:40:7b:b2:85:86:4b:6c:63:29:
97:e8:c4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:28:22 2025 by rpki-client