Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier: MZm8svT1P+7ncnBZQYkZxLGtTmsrQad5txiUBJKNk0g=
Subject key identifier: A9:B0:A5:C3:F1:A9:00:E3:4E:0B:1F:AB:1C:D7:CD:6F:8A:6C:75:8F
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 01976F99A48975576C9AFD97C1B0960A4AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number: 14D0
Signing time: Sat 14 Jun 2025 18:00:29 +0000
Manifest this update: Sat 14 Jun 2025 18:00:29 +0000
Manifest next update: Sun 15 Jun 2025 18:00:29 +0000
Files and hashes: 1: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: PZJrvG3HkKT+1LcLO60u+lo1gdyrdiIO4Y8PL8HbbpI=)
2: CLXmnDFSTo8gYOSfsi36Eul40PU.roa (hash: 8Z8KtVhkqNicLx/HNFdK6oyXYk9JSXXv8S9J27mq/xY=)
3: lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa (hash: 1gPUwLHqyRYBWV9FA/ZpZB+VDiIwSRS3XaQWbg+vKSc=)
4: pzYaLDX-85nYF2riSdG9v-AKZYM.roa (hash: EygpfdGwPkKz8M66wN+etr5plBuJkHzB1mglzx/9MuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:a4:89:75:57:6c:9a:fd:97:c1:b0:96:0a:4a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: Jun 14 18:00:29 2025 GMT
Not After : Jun 15 18:00:29 2025 GMT
Subject: CN=a9b0a5c3f1a900e34e0b1fab1cd7cd6f8a6c758f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:33:04:25:cc:f8:54:2a:58:0f:77:10:d0:
94:b0:a6:34:f0:b4:a8:2e:ce:0c:56:9c:2c:7a:bb:
ac:10:63:36:1a:4c:02:75:bf:90:0b:5e:c8:fb:0d:
bb:34:69:8a:fa:85:6e:24:04:9b:00:dc:f4:d1:cb:
c4:db:a2:98:2a:e3:e8:9a:a4:85:19:9f:7f:38:87:
71:85:cd:02:30:da:3e:79:b4:4c:2f:42:2b:6e:1b:
47:64:2c:e1:91:6a:9e:cd:16:4e:31:70:72:81:d5:
e3:84:29:dd:cd:12:74:2d:fe:d3:d0:31:2f:6b:5e:
58:fb:bc:bc:27:17:1b:18:68:0b:66:20:b8:11:7c:
3a:bc:d9:48:69:c8:b9:79:92:3c:17:63:49:5a:ff:
14:87:2f:ac:44:a6:37:6e:b5:27:39:ba:f6:ab:91:
1a:bd:11:93:c7:7c:73:db:b8:5f:b4:31:f8:a2:81:
c7:af:76:bf:56:08:7a:bd:f4:a1:84:3f:3d:8d:76:
7c:09:fb:f1:34:61:68:9a:40:61:13:57:99:fb:f2:
c3:77:62:fa:84:25:32:7d:76:d6:8a:82:df:0a:40:
85:ec:a3:71:64:9c:50:cb:9a:cc:cf:38:22:e8:75:
09:7e:60:eb:14:2c:36:0a:bf:5e:85:70:a8:e4:bf:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B0:A5:C3:F1:A9:00:E3:4E:0B:1F:AB:1C:D7:CD:6F:8A:6C:75:8F
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7a:07:4d:a2:81:de:b4:05:87:47:6d:27:24:87:70:9a:f3:
73:f7:52:bc:4d:1b:d1:c3:4a:8d:e7:fe:0e:cc:3b:28:c1:e9:
e7:8f:c4:54:7b:f1:89:f0:74:67:30:5a:13:87:fe:3e:d6:3f:
3f:b0:a2:65:2f:a7:bb:bd:89:3d:d8:7f:f2:ca:81:19:d1:69:
de:e5:4e:23:3e:95:a4:bb:9d:97:3d:7e:af:7e:21:fb:f2:bf:
ff:c9:57:f4:aa:f4:a6:b1:d4:11:78:d8:55:7d:03:5f:0c:77:
d3:fd:fe:db:8c:7b:5d:0f:03:2e:08:6d:61:1b:35:f0:7a:60:
22:2a:26:38:6a:6b:15:2e:ae:88:90:22:75:5d:ad:f3:19:ad:
86:3d:01:06:ac:34:14:0f:a0:a6:7d:01:8c:bd:58:60:c1:a8:
0c:fe:f3:f3:8c:5c:81:74:aa:ac:21:b2:41:2e:f0:ae:40:e8:
b6:b3:d4:ef:72:65:dc:a9:08:a8:83:a0:2c:69:9d:63:b5:ca:
00:a1:a7:51:62:62:90:1e:7b:98:5f:c4:32:01:d2:54:1a:53:
b1:cc:84:14:8b:e3:e7:ec:f2:5c:6d:4b:a2:8d:22:d6:2c:45:
07:ef:13:93:9f:d6:8e:ec:90:95:5e:5f:4c:b0:97:44:cc:a7:
05:5c:ee:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:35:48 2025 by rpki-client