Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: OSmV0O5okEGP8IopbH/JsFFRiyW2SiNvzxCxGgimxXs=
Subject key identifier: 68:E6:99:09:C4:41:0E:B1:E5:78:44:BE:B6:19:81:03:39:28:5C:3F
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 019769608FD52FBF505B5098870F7989F11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 07CB
Signing time: Fri 13 Jun 2025 13:00:25 +0000
Manifest this update: Fri 13 Jun 2025 13:00:25 +0000
Manifest next update: Sat 14 Jun 2025 13:00:25 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: jRn/izWm0iAFXOcY2TzKGPQzq3YQqCBKlYcdbqQlcNo=)
2: G7hpWPyXuPCdcjaRbCuAbyP7XNA.roa (hash: CuG2DStYKEKyAlh0IJta5/FjSh93nl0CeskY3cbZDZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:8f:d5:2f:bf:50:5b:50:98:87:0f:79:89:f1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Jun 13 13:00:25 2025 GMT
Not After : Jun 14 13:00:25 2025 GMT
Subject: CN=68e69909c4410eb1e57844beb619810339285c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ec:9d:4a:04:42:6d:4b:ac:df:78:7a:f5:88:
13:8f:05:48:bb:33:e1:b8:ab:90:f3:72:bf:a9:c0:
51:c9:48:ae:8a:92:fc:60:ec:01:57:89:cd:2c:a9:
94:70:d9:5e:49:1f:9f:eb:5e:59:c1:36:9a:2e:a3:
d1:ee:42:9f:9f:c2:86:94:5c:2a:f9:f0:0a:bc:08:
f9:db:5f:c9:e0:d2:ee:1b:62:38:f7:77:28:33:da:
48:c2:01:e1:96:56:ba:3c:e1:e2:c4:46:97:3b:a9:
25:65:e7:68:c8:31:01:8c:63:df:ec:61:bc:13:e8:
76:55:a0:3b:93:d9:c5:68:12:0c:51:d7:3f:31:bb:
0a:a9:fd:0d:7f:e4:14:02:35:d4:76:e0:e1:26:54:
d5:d6:d1:cf:e1:cb:14:d1:cb:4d:8b:7e:b2:a6:ae:
44:a4:86:9a:cd:c2:d9:58:75:dc:a2:7a:c1:c8:0b:
bd:b9:16:56:3d:0e:be:06:5c:d8:f2:dd:c6:0a:da:
e9:14:23:20:f9:82:46:7d:b5:a1:19:20:cc:19:48:
55:db:ae:d8:38:94:77:33:fb:f4:8b:24:6e:8a:3b:
d5:b4:24:48:3e:12:a8:86:7e:8b:09:09:4b:87:57:
77:7b:cb:bf:e6:df:e5:d0:b8:23:2f:21:06:ee:94:
17:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E6:99:09:C4:41:0E:B1:E5:78:44:BE:B6:19:81:03:39:28:5C:3F
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7c:0b:31:9f:66:a4:1e:5c:df:54:34:6f:c3:c7:0b:e9:75:
f7:da:71:27:39:49:67:1d:16:83:3e:dc:74:9c:fe:59:8c:4b:
9c:1e:f3:06:c1:81:77:88:66:17:94:8c:07:dd:06:39:87:2b:
31:d5:73:cc:80:75:bd:dc:4f:d9:85:2c:48:12:ef:80:9a:38:
25:57:76:07:61:d4:0d:bf:2a:65:92:c1:45:a0:20:0f:82:7f:
2d:42:9b:b3:7f:c0:08:6b:5c:83:9b:55:10:67:46:e0:38:38:
67:b0:8e:11:54:e3:02:51:d9:cd:e7:63:18:35:31:e0:41:8c:
33:cf:20:95:0d:09:fc:d3:55:9f:6f:07:38:be:b3:d2:6b:eb:
4a:67:fe:00:19:38:14:84:f1:55:08:54:ff:f9:d5:81:2e:eb:
fa:da:3b:44:ed:b3:cc:22:33:08:f0:9c:45:c2:e0:60:9a:fd:
1b:86:e0:de:b7:34:84:a3:9c:ea:6c:d8:c0:46:78:87:e7:57:
82:07:79:b1:fb:e8:ce:6b:85:1f:0c:88:94:8f:ab:f6:ff:eb:
d7:62:32:b6:32:9b:85:3b:e2:0f:8f:34:3d:d8:97:79:0e:7f:
b7:20:71:7c:c8:e8:90:8f:ee:01:86:99:c5:f0:f3:3a:53:df:
71:cb:ea:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:56 2025 by rpki-client