Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
File: Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft (raw, json)
Hash identifier: xsikFOvJZGjSUtFZrg2LUuK3wer5cz9OoTMadja+7Ns=
Subject key identifier: 31:2B:A6:52:92:9D:1A:E2:44:EE:49:1D:FA:3C:DB:BE:85:5D:AD:EA
Authority key identifier: 06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
Certificate issuer: /CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Certificate serial: 01976C623F0F893380FB32EEBD3FE0DEC5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
Manifest number: 01B1
Signing time: Sat 14 Jun 2025 03:01:07 +0000
Manifest this update: Sat 14 Jun 2025 03:01:07 +0000
Manifest next update: Sun 15 Jun 2025 03:01:07 +0000
Files and hashes: 1: Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl (hash: ZPYEsRLAT0najtvLCAIwVyskA5r5SEvZXum36appblw=)
2: aTqNBiMtHyqY4sjo2vUby0yJMKk.roa (hash: 8tR80jRMgENDFDI+mB0B/a9/v+rAAXYdo53Fd7KchX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:3f:0f:89:33:80:fb:32:ee:bd:3f:e0:de:c5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Validity
Not Before: Jun 14 03:01:07 2025 GMT
Not After : Jun 15 03:01:07 2025 GMT
Subject: CN=312ba652929d1ae244ee491dfa3cdbbe855dadea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a9:63:48:b2:6f:10:68:81:c5:1d:bd:10:d5:
ed:85:8c:87:42:7c:26:fa:5b:60:fe:c7:a6:75:98:
ec:f1:b6:73:fc:00:ca:ea:66:82:d7:e9:8f:0e:1a:
b3:36:45:a4:f5:39:74:c0:5f:c2:56:6a:12:36:76:
57:43:4f:c9:7f:0c:60:af:e6:c8:6b:b6:0c:c2:89:
8b:e3:8b:28:ea:61:1f:11:62:5f:ca:82:74:d8:a6:
9f:8b:84:09:18:9c:e2:1a:bb:89:1e:82:f5:2f:4a:
a3:ef:71:e1:68:47:fe:98:f8:5f:c5:e0:35:60:50:
23:fe:77:89:8b:a0:66:0b:c4:14:49:29:0e:6c:3a:
f9:7e:3c:0e:41:b4:23:ae:e4:90:43:6d:09:ed:02:
db:59:41:81:5b:51:f7:0e:9e:0c:1f:4f:34:f0:95:
a8:44:79:2e:53:8e:a0:4a:69:21:73:22:73:48:63:
c0:24:9e:55:62:6d:c3:32:9b:b3:25:62:4f:61:16:
04:29:ef:95:7b:d0:ca:10:75:43:2e:99:71:a5:c6:
0a:88:b8:e2:7b:f0:8d:68:1c:00:65:0e:ef:2b:4e:
8c:f5:3b:14:49:53:35:31:ce:f1:51:ea:01:71:a7:
ae:67:03:d7:b2:00:ed:90:aa:6c:01:06:66:03:39:
47:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2B:A6:52:92:9D:1A:E2:44:EE:49:1D:FA:3C:DB:BE:85:5D:AD:EA
X509v3 Authority Key Identifier:
keyid:06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f1:48:69:8a:16:10:08:0d:6f:ca:ff:1a:54:26:16:9c:28:50:
c1:96:25:d0:66:22:81:9d:c0:ae:22:d7:b6:bb:4d:5e:09:5b:
d5:2b:ca:ac:ac:e6:52:fa:bc:04:a1:62:8b:4c:aa:f6:24:db:
4d:52:17:c5:54:96:b7:1e:13:b1:3d:15:0d:46:6e:38:c7:c0:
23:0b:89:79:cf:6b:ee:27:80:b2:ca:0f:99:11:53:c4:bb:c8:
bb:2a:8c:b9:ac:39:be:dd:bc:d1:6e:00:48:3f:fc:cc:52:f6:
2b:49:3d:bd:d5:6b:86:be:b5:37:36:e3:4d:12:55:9b:ed:0c:
f1:78:eb:68:e0:12:89:35:3a:1a:4e:ef:fc:c3:d1:40:12:05:
f3:7d:a1:f8:39:6e:f9:73:a8:1e:f0:b1:06:a3:65:e3:66:6e:
c8:d6:62:8c:d4:7f:2a:88:ad:34:e2:d9:59:96:86:5c:80:98:
31:8e:33:7c:99:55:cc:5d:56:0e:7a:bc:6a:96:64:8b:e6:c2:
03:c4:65:2e:1f:2d:ec:8d:7c:2a:47:5e:f6:0c:e6:54:b4:08:
36:a4:1c:25:e7:91:33:bd:f9:03:3c:35:e8:fc:1c:65:8e:d2:
0e:19:eb:c1:e8:14:16:f1:52:23:60:fd:fe:d5:d8:28:a4:ef:
b5:6d:9e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:21:05 2025 by rpki-client