
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
File: BGrKxxMSOFbUrmwWBUYCaE39B8s.mft (raw, json)
Hash identifier: NJWUz9+3LZBoB62o5qZ2K0hey2t+8KUgvTsXOmVgVsQ=
Subject key identifier: 81:3F:FA:42:B0:A6:BD:87:70:76:3E:50:06:58:D2:2A:38:58:88:38
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Certificate issuer: /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial: 0198733D55B3C268EF3A5ADB5CA9C51FD1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
Manifest number: 045F
Signing time: Mon 04 Aug 2025 04:00:56 +0000
Manifest this update: Mon 04 Aug 2025 04:00:56 +0000
Manifest next update: Tue 05 Aug 2025 04:00:56 +0000
Files and hashes: 1: BGrKxxMSOFbUrmwWBUYCaE39B8s.crl (hash: jEUhs2AhpjHZg04jCxPEt194okcptUtgjB2BPcw6szM=)
2: eKW1kuPZCd7Q2-wUVFiZHmqNaHE.roa (hash: E2zSiIhX/F8uFFD091DwlATetZWIqRRANFto/vLbHCQ=)
3: pudWPRPK-Wa6m4Pmer93cIZQrII.roa (hash: o79B3cprgcfu6XLm8f0k9H9gQI2spOpkuG4dS9wCxDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:55:b3:c2:68:ef:3a:5a:db:5c:a9:c5:1f:d1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
Validity
Not Before: Aug 4 04:00:56 2025 GMT
Not After : Aug 5 04:00:56 2025 GMT
Subject: CN=813ffa42b0a6bd8770763e500658d22a38588838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:dd:10:00:d7:20:4f:a7:22:2f:93:a5:02:
ff:ee:b5:48:98:ae:17:a3:fc:9a:91:6c:08:6e:71:
63:11:a0:1d:b1:3e:dd:51:92:71:d1:bd:f3:4c:fd:
a3:71:49:20:2f:55:5e:22:45:27:29:56:e9:12:2b:
28:0d:86:62:91:f6:26:9a:a9:38:50:cc:a7:c6:79:
a6:29:d7:ad:f7:dc:46:6e:0c:2f:b7:c3:b0:95:26:
be:eb:9a:7d:44:0d:56:e3:54:8b:d6:2c:4e:f4:e3:
a0:1a:d2:d3:19:25:a9:c6:11:ee:df:40:28:f2:be:
99:bf:76:cc:aa:9d:1f:77:bf:38:0e:61:95:b3:43:
eb:84:64:ea:ee:6d:49:0c:15:dd:df:d3:ca:2b:c3:
f7:89:a7:df:89:c2:85:e9:4a:af:e8:f8:10:ea:8a:
ce:2a:4b:44:e1:47:4d:94:cc:45:f0:df:b2:56:5a:
ec:20:c7:95:fa:92:1b:c8:43:2e:36:67:5e:51:b6:
d6:f4:f6:5f:81:0e:83:3a:d3:08:2f:66:6a:75:ed:
85:f0:bf:19:93:06:74:28:e5:71:ab:5c:80:d8:5c:
37:93:90:25:72:0c:83:3a:33:f3:8e:38:fd:35:d3:
3e:f0:3c:5a:e9:d0:58:78:08:b6:62:d0:30:da:e6:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3F:FA:42:B0:A6:BD:87:70:76:3E:50:06:58:D2:2A:38:58:88:38
X509v3 Authority Key Identifier:
keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ac:33:b4:2f:f5:7e:b7:44:46:c0:01:0c:b0:5e:04:61:f0:
b2:72:9e:db:b1:0e:77:da:97:25:64:ca:9c:6e:9a:13:38:29:
0e:27:89:6b:5c:d1:d1:e9:69:a9:b8:76:2a:dc:62:1b:0b:9f:
10:ab:5f:16:ca:ab:df:6b:3c:e4:b9:35:33:a3:78:b2:73:d4:
51:b9:89:6d:29:cf:2e:f2:cc:6c:26:c7:c0:73:16:93:08:8b:
ea:7f:a3:22:3d:5e:e6:5c:48:e2:96:dd:07:fb:9a:a5:b5:f3:
ef:b7:6e:52:c0:07:8e:57:e1:79:7c:a0:71:26:6c:18:70:3f:
6d:1b:ff:8e:4b:62:da:0d:28:39:2e:a8:e8:23:a2:de:b2:4f:
cb:b9:30:3c:e2:b4:a1:eb:17:02:d2:46:2f:1c:90:49:9c:98:
fe:9a:45:5b:40:cf:4c:e0:94:cd:bc:9c:a6:b1:9c:44:af:55:
be:9f:c1:44:7f:33:46:de:f7:e3:3b:ad:7b:2d:f7:80:c2:98:
71:64:07:c2:29:35:db:e4:6b:21:eb:8d:ca:df:5d:16:36:af:
4d:d4:cb:a6:f9:54:a7:72:5b:56:19:3a:a4:54:84:15:34:52:
95:a7:9c:2a:fa:f8:4f:76:b7:bd:35:0b:09:0f:56:08:da:b1:
fa:e9:29:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:28 2025 by rpki-client