Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
File: BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json)
Hash identifier: 8OBDfcZ3b5fngMfOQ80qR5EL75wudO/ymB72csFVP+E=
Subject key identifier: 18:27:7B:DB:C1:B5:59:97:30:9D:97:5F:6C:05:BA:CD:AA:2C:47:20
Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
Certificate issuer: /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Certificate serial: 0196767A17EAE0228C6A00E5C70BE4246DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
Manifest number: 94
Signing time: Sun 27 Apr 2025 09:00:35 +0000
Manifest this update: Sun 27 Apr 2025 09:00:35 +0000
Manifest next update: Mon 28 Apr 2025 09:00:35 +0000
Files and hashes: 1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: 2V7lzC3ddGBLH6pV78IzYpt/vVoVXKpGFjg/o41PRp0=)
2: zin7g8rz3XZKgyY-2CCTccUUZMI.roa (hash: FyDDLGXT5pU6Mg/1Kd+gQOcE2BEnBTlrNQt3oLOsDkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:17:ea:e0:22:8c:6a:00:e5:c7:0b:e4:24:6d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Validity
Not Before: Apr 27 09:00:35 2025 GMT
Not After : Apr 28 09:00:35 2025 GMT
Subject: CN=18277bdbc1b55997309d975f6c05bacdaa2c4720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:72:fb:81:33:2b:a9:c0:61:5e:e5:28:04:
80:be:ba:c1:3a:b0:da:31:9c:c7:69:19:79:34:7f:
f5:55:c9:1f:b0:6a:c4:41:2b:3f:10:e5:87:b2:bb:
c2:8a:49:89:98:ef:e2:18:b3:09:65:13:a9:c9:0d:
c7:77:04:05:f5:c0:34:b8:95:de:9a:b0:7a:ab:2a:
6a:96:82:73:2a:90:b0:31:7e:f0:ad:d4:db:ed:6c:
17:b1:b1:2a:e4:5a:24:94:60:1a:87:59:28:c7:ff:
1f:18:95:0b:35:8c:21:7a:52:66:38:d0:da:2a:79:
13:7c:d5:90:d4:1d:9e:74:c0:d9:5b:32:77:e9:aa:
b9:36:71:93:a6:95:62:b4:be:c1:ec:af:e4:cf:3d:
dc:19:35:61:e0:04:de:0a:cc:da:33:46:f0:a4:bd:
b5:0d:9b:ca:5e:53:9b:d9:28:c4:c0:1a:dd:91:41:
61:e8:e6:78:30:24:ef:54:f2:7f:0b:29:bc:59:7a:
b1:ce:ef:a7:d4:e4:11:0c:3a:60:f5:f5:88:50:a9:
06:4f:33:de:03:c9:0b:ee:30:35:1f:b1:02:17:50:
9b:da:4d:40:9e:6b:df:bc:2a:19:42:8b:f9:93:68:
3d:a1:10:8a:79:d4:54:2a:f9:35:8e:4f:b8:6d:2b:
12:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:27:7B:DB:C1:B5:59:97:30:9D:97:5F:6C:05:BA:CD:AA:2C:47:20
X509v3 Authority Key Identifier:
keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ea:06:c2:fe:42:f1:61:e2:5d:2f:8f:98:40:3d:e0:18:4c:
0c:fa:2e:cf:78:30:cb:be:c6:16:ed:49:a0:97:f3:10:8e:55:
31:b7:3a:87:e7:3e:dd:50:d8:90:26:3f:5c:10:fe:6b:ea:9b:
69:d1:65:6e:ff:7a:2b:07:51:aa:0a:be:f9:e6:6d:40:e9:37:
87:0f:19:99:44:90:35:2b:e7:9e:d3:0b:6b:68:33:4d:2d:80:
c9:a1:eb:3b:9b:05:cc:f1:ec:0a:47:d5:f5:a4:77:a8:6f:11:
e7:58:8e:2e:82:45:f0:4b:7d:30:a4:3a:4c:69:49:c6:f0:cb:
46:62:53:54:61:6b:8b:19:8a:4f:d9:cb:66:d3:39:09:11:c0:
e4:ee:14:91:96:f9:5a:90:28:f9:8a:40:c7:bd:e1:f1:c7:14:
2b:b5:f3:41:05:85:25:7d:68:9f:72:30:14:31:1a:65:9a:8c:
7c:13:7c:87:4a:a7:bb:e3:f5:1c:e3:34:33:47:62:7f:be:2f:
85:ff:0e:fa:d6:44:20:88:2e:3a:f4:aa:29:62:aa:3f:47:df:
b6:8d:b5:9d:4e:3e:bc:5a:ce:87:18:73:df:c5:98:7f:3e:e6:
e4:93:70:e1:06:d7:71:4c:fd:f5:80:a6:24:71:49:57:41:0f:
9d:f4:82:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:33:24 2025 by rpki-client