Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
File: BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft (raw, json)
Hash identifier: P1xcUHCHajsCG+v3YJ0zOpCcYzaYufE5IarpFlZE4GI=
Subject key identifier: 76:FC:96:8B:28:A6:40:77:5F:29:86:43:06:36:C8:B8:B7:23:B9:D9
Authority key identifier: 04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
Certificate issuer: /CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Certificate serial: 019685B5EF028D2E77EBF56892405B96A948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
Manifest number: 07E8
Signing time: Wed 30 Apr 2025 08:00:14 +0000
Manifest this update: Wed 30 Apr 2025 08:00:14 +0000
Manifest next update: Thu 01 May 2025 08:00:14 +0000
Files and hashes: 1: BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl (hash: W7Y8vnOszSt2CZ17XQU2d2X6C0mBCLdoPo/du+T03eo=)
2: jV-3tArc8dsjcZ6kDNPRZe17c7E.roa (hash: N7hoaH3KyqZMDXhGvm+f+pqXc8cqz/H0JZUoSjuldtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b5:ef:02:8d:2e:77:eb:f5:68:92:40:5b:96:a9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Validity
Not Before: Apr 30 08:00:14 2025 GMT
Not After : May 1 08:00:14 2025 GMT
Subject: CN=76fc968b28a640775f2986430636c8b8b723b9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:c7:42:7a:f3:c2:e0:d8:c1:15:b5:20:95:
a0:5c:9b:e8:b4:79:7d:21:de:bf:fc:9a:1b:b6:4e:
ad:b2:39:fd:71:f5:f4:26:c1:93:d6:f8:e7:3e:37:
7f:0b:52:f8:67:49:1c:f2:d0:df:58:e8:bc:e8:ee:
66:f5:c7:aa:12:0e:f6:a9:4e:a0:e7:64:c2:9e:b9:
91:86:dd:39:1e:be:1b:24:4e:00:76:3b:bb:71:01:
37:f4:f9:fa:e7:cd:aa:1e:16:05:84:50:b2:f4:2a:
12:d3:40:f8:18:8e:ff:7f:90:e2:e4:6c:7c:72:64:
85:ed:b0:73:63:ad:04:c2:3d:2e:c3:52:05:5e:f4:
f5:07:af:54:4d:d8:0f:5c:10:f9:8d:5e:a7:d6:8a:
7f:58:f7:70:74:40:47:af:81:fd:bc:d7:7c:40:e8:
fa:de:29:17:63:0f:ed:23:49:60:d2:b3:4a:04:98:
36:7c:d4:72:81:9d:bb:f0:93:07:8b:49:7c:13:58:
ba:cd:53:7f:94:6f:58:4b:ef:48:06:23:57:90:7c:
6f:1a:b9:f1:fa:db:f9:d1:bb:1c:8a:f1:2f:4a:b0:
5c:96:4a:d0:f6:f4:4a:59:13:da:34:8a:6d:9c:12:
3d:37:58:bf:9e:ea:ec:84:44:d8:a0:dd:87:46:f1:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FC:96:8B:28:A6:40:77:5F:29:86:43:06:36:C8:B8:B7:23:B9:D9
X509v3 Authority Key Identifier:
keyid:04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d6:f8:e7:2f:c8:82:80:a2:40:9c:d2:63:28:64:d3:be:8e:
ad:96:d3:82:80:3e:5f:17:f3:de:1b:4f:38:6b:8d:70:13:b5:
ec:20:4c:71:da:a3:f0:45:41:ad:a2:44:6a:0d:38:6d:33:d6:
6d:83:b6:39:68:40:71:17:8e:31:e2:50:14:6c:aa:0e:bf:65:
a5:d8:ea:44:93:05:3f:39:11:ed:75:ad:ab:69:50:30:e5:b2:
c5:38:01:80:6d:c8:4e:28:74:5a:48:d0:3c:5f:87:82:7b:53:
bc:a4:cc:33:9d:1f:fc:73:57:c2:60:9b:f6:89:9a:87:8d:39:
12:92:ed:54:89:fb:08:b2:29:97:35:79:08:07:d4:66:54:f1:
c3:08:12:78:68:8f:67:02:75:6b:f0:1a:76:f4:73:cd:70:7c:
72:7a:d2:a6:87:99:51:8e:ca:1b:22:a6:06:a0:86:e2:7c:a7:
3b:35:e5:93:d6:b2:76:8a:bf:54:74:cd:fc:4c:df:3d:2e:45:
05:d1:e6:b3:d2:ea:7c:d9:60:f9:97:5a:ec:c6:94:e9:2b:94:
46:b4:1b:60:d5:e7:a9:82:9f:73:9b:83:fd:a1:87:aa:da:42:
49:18:a0:96:ad:83:d6:68:cb:c5:67:da:7c:7f:f1:cc:a0:da:
d9:a2:0e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:37:58 2025 by rpki-client