Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
File: bmgcJW1nKYHLOc4lynjPIVz06qY.mft (raw, json)
Hash identifier: Z4xrr0Onytm4YRexTAw0UQoFACc34KtaJwKpvM9ZBqI=
Subject key identifier: 8A:56:A1:16:D6:8E:D4:C6:F5:68:BD:4A:39:68:2A:26:39:E6:82:EF
Authority key identifier: 6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
Certificate issuer: /CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Certificate serial: 019685B605722337FBD6441853327B38782F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
Manifest number: 1513
Signing time: Wed 30 Apr 2025 08:00:20 +0000
Manifest this update: Wed 30 Apr 2025 08:00:20 +0000
Manifest next update: Thu 01 May 2025 08:00:20 +0000
Files and hashes: 1: bmgcJW1nKYHLOc4lynjPIVz06qY.crl (hash: dzzihlh9jjw1/mj6qDTq5M4Ll7OQNUqOVF+c2va+Mt8=)
2: tvKD3UXqZVXDvVX7leTlMKw_qew.roa (hash: WK5XR30REtOfSSrTxnfQEhXv68zn6pJyCz3GjFrJURA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b6:05:72:23:37:fb:d6:44:18:53:32:7b:38:78:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Validity
Not Before: Apr 30 08:00:20 2025 GMT
Not After : May 1 08:00:20 2025 GMT
Subject: CN=8a56a116d68ed4c6f568bd4a39682a2639e682ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:a2:ba:39:7e:ce:3c:46:44:39:0f:1a:b8:
14:17:32:5d:3d:ac:30:f8:87:ff:32:15:ac:13:64:
81:e8:5d:09:f9:f5:78:6e:b3:27:73:3f:74:e9:b2:
bd:9c:21:af:50:61:eb:2a:82:e6:ee:fb:3a:a7:32:
cf:84:b9:86:c2:fe:7e:15:dc:9c:1a:4f:4a:01:2c:
46:f8:b4:ef:c5:d1:4d:cb:ea:27:4e:17:29:f6:09:
c6:41:3d:1c:73:a3:49:46:c7:4b:15:ff:56:70:07:
7c:eb:72:3b:f1:12:7f:49:bd:33:f6:8a:67:66:9f:
e0:5f:9a:42:89:60:a9:9b:e4:22:7a:3b:c8:c0:0f:
89:e3:86:e0:d7:72:aa:a8:50:e9:b6:7b:e0:7e:de:
a4:54:54:13:c5:a5:ee:b0:3d:74:50:8b:ea:d5:7f:
c1:15:e3:40:c0:02:0f:5e:ed:4e:c6:89:2d:f4:0d:
6b:c5:37:9b:3b:a1:71:68:13:54:19:29:73:ed:89:
e5:63:40:69:fc:f3:bb:9b:ae:97:cc:0d:79:d5:c7:
5b:05:9c:b3:0a:1b:78:10:df:a4:64:06:40:1d:8c:
68:bd:a7:31:ac:cd:f7:80:a3:ea:09:f8:b0:0a:21:
82:f8:ea:81:f6:2d:4a:52:bf:55:bc:f8:37:9e:fe:
b2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:56:A1:16:D6:8E:D4:C6:F5:68:BD:4A:39:68:2A:26:39:E6:82:EF
X509v3 Authority Key Identifier:
keyid:6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:bd:78:a0:88:68:c3:d1:91:b0:83:f4:45:ff:58:5b:6f:71:
3a:85:b2:95:2d:11:9e:b3:ba:f6:e3:09:90:57:5f:46:84:53:
dd:e2:68:f6:db:ec:b9:c4:a6:9c:f8:5f:73:db:8d:3b:73:90:
67:08:c0:f5:10:11:bd:ee:cd:63:cf:eb:37:b1:9b:b6:ac:cc:
2c:42:91:a5:7a:04:7d:b9:86:b3:38:4a:29:52:ea:ff:9c:2d:
e4:5e:7f:88:8c:98:f9:6d:9f:4d:4a:fe:00:23:93:3c:e4:00:
35:e6:b2:e2:e9:52:99:4c:37:78:c8:67:d5:88:62:98:60:e2:
5e:c6:fa:f9:39:72:42:f8:43:b3:40:a0:1c:01:69:f5:31:1e:
7b:4f:b7:a3:4a:0a:6b:04:4d:bd:3d:0b:92:cd:f4:16:db:27:
b1:1a:f5:1a:49:b7:39:7f:5b:91:06:73:11:e7:ab:b5:fc:22:
07:de:e3:93:d7:9e:bc:fa:0f:72:46:b1:5e:98:99:11:63:e9:
f3:a0:c8:30:1d:a9:4a:41:30:68:bc:0a:91:41:3c:ff:b6:f3:
78:e7:df:49:44:7f:0c:bc:7e:e9:1b:45:79:71:4b:a2:74:8a:
29:7c:3a:9d:96:12:e5:ff:93:68:d6:0c:da:e5:c3:41:56:24:
06:c0:bf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:18:13 2025 by rpki-client