Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
File: BGrKxxMSOFbUrmwWBUYCaE39B8s.mft (raw, json)
Hash identifier: 9cV1NCETdLKNLIjzKvYBOQT+yLAds5Edrfce9V9F9Fk=
Subject key identifier: 11:38:58:44:70:C1:1E:0A:82:DE:E4:44:73:56:23:8F:78:80:1E:CC
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Certificate issuer: /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial: 01976C6222FC78459F8005E64F429841493C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
Manifest number: 03D6
Signing time: Sat 14 Jun 2025 03:01:00 +0000
Manifest this update: Sat 14 Jun 2025 03:01:00 +0000
Manifest next update: Sun 15 Jun 2025 03:01:00 +0000
Files and hashes: 1: BGrKxxMSOFbUrmwWBUYCaE39B8s.crl (hash: xEAhLSa2uIi8GIEWdhlQ17EI16ipX5MMeN7EMEG61pg=)
2: b_K-XO5P7WSoaWNrsvXhJvIjTbM.roa (hash: bfmFzTeuKRR28Ci+54IJObwwwONZ0pFYWnhKp/hu7PE=)
3: eKW1kuPZCd7Q2-wUVFiZHmqNaHE.roa (hash: E2zSiIhX/F8uFFD091DwlATetZWIqRRANFto/vLbHCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:22:fc:78:45:9f:80:05:e6:4f:42:98:41:49:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
Validity
Not Before: Jun 14 03:01:00 2025 GMT
Not After : Jun 15 03:01:00 2025 GMT
Subject: CN=1138584470c11e0a82dee4447356238f78801ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:d3:b4:f7:00:69:1e:eb:3d:19:fc:00:e0:
7c:e0:47:b0:2b:2c:07:f7:ef:bc:a2:cf:88:73:5c:
07:15:75:0f:db:59:9c:14:d8:4a:c6:23:c6:00:33:
9d:64:d7:60:7b:f6:85:4d:d0:f0:7a:41:77:5a:dd:
7e:58:80:c5:56:41:6c:be:40:5d:2d:bb:93:74:de:
c4:23:7a:03:ac:6a:50:b9:bb:84:1a:0a:97:b6:4d:
8e:53:4e:73:d5:95:0e:36:35:cb:48:84:b9:36:d6:
eb:fa:a5:54:c2:c3:ea:a4:56:87:f7:59:82:51:4e:
48:39:0e:ef:4a:60:c3:a8:f1:73:a6:e0:84:da:f3:
43:13:c5:f3:67:2e:55:6e:61:ad:bd:f1:ac:a8:bc:
59:bc:e6:5e:93:a7:64:df:51:90:7d:b2:6f:27:55:
3d:b8:85:4c:90:59:6c:30:e4:d9:bb:1c:60:de:74:
b0:b4:ac:02:a9:84:94:29:2f:00:7b:c3:2f:fc:a9:
48:a1:56:d2:99:28:e7:8b:fa:4c:92:34:4e:c5:17:
63:47:0e:70:03:65:00:8a:2f:85:48:d6:44:91:f6:
e0:f6:92:39:66:0d:0c:1c:34:54:03:7c:46:f6:c5:
90:11:27:47:30:0f:c9:6e:89:73:2f:10:cf:ae:d7:
c3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:38:58:44:70:C1:1E:0A:82:DE:E4:44:73:56:23:8F:78:80:1E:CC
X509v3 Authority Key Identifier:
keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:68:3c:40:39:15:9a:98:dc:66:7f:a5:79:09:37:86:69:79:
9a:1b:89:8c:6f:b2:90:49:36:52:1e:a2:1b:cb:6d:33:6e:d6:
63:34:fe:80:0e:45:9a:c4:ad:7e:da:86:93:96:19:ea:28:94:
6d:79:ad:8c:fa:a0:6f:94:4c:be:11:04:10:74:d9:c4:6e:13:
39:07:39:28:04:a3:3a:21:39:88:1e:2b:56:15:80:95:d9:df:
1c:1b:12:f0:39:81:28:45:24:82:b9:8d:5f:ea:43:6f:91:d2:
1e:a4:65:9b:d2:ba:0c:43:4e:37:7a:93:89:99:18:c3:e0:12:
f8:74:cf:8f:f0:96:9e:c7:1f:43:0e:1e:92:6e:44:fd:0f:93:
d6:fb:5d:ec:1a:da:8b:d2:5e:cc:27:cf:c5:2d:f3:43:cf:3c:
87:a7:01:8d:4a:ff:7c:09:10:c5:29:a9:75:46:bf:1d:c6:07:
c3:50:88:b5:6e:e4:23:7b:e3:09:fa:77:b7:27:ed:86:4d:73:
4c:be:33:90:cb:0f:44:d2:1c:72:83:c4:b4:52:f7:3a:b8:fb:
4e:7e:71:f6:78:3d:67:52:ca:68:5b:c9:28:05:b1:68:dc:93:
c6:4c:86:8a:6f:0b:83:39:bd:6e:0c:1e:52:3b:00:15:83:b0:
85:6f:75:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:44 2025 by rpki-client