Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: GceUkutrhLHaYHVZIuxG0Z9fOzk9MAK61+OVGwzBKFM=
Subject key identifier: 63:2B:F3:AB:5D:03:01:90:D1:D2:46:16:29:51:C7:86:93:D7:9B:83
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 01976D06B23497BF88DC37D6EA152BF4BF60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 06:00:44 +0000
Manifest this update: Sat 14 Jun 2025 06:00:44 +0000
Manifest next update: Sun 15 Jun 2025 06:00:44 +0000
Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: TB3BkypT6rfV+i1p1cO8hBOtJ9RYik5BACFEZzjcICk=)
2: NQNN2zI--5W9phAw1FPsrLGEYwA.roa (hash: vTr80Rx2MWq5UoQZbNWzT5PuHgBwID0hr0ao7hRy9dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:b2:34:97:bf:88:dc:37:d6:ea:15:2b:f4:bf:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Jun 14 06:00:44 2025 GMT
Not After : Jun 15 06:00:44 2025 GMT
Subject: CN=632bf3ab5d030190d1d246162951c78693d79b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:4b:0d:58:65:6c:3e:f7:ac:df:53:52:ee:
cf:cb:87:4a:7b:6d:3c:0b:65:f6:ab:2f:a8:f1:2a:
dc:dc:68:92:db:88:0a:14:12:fc:7f:46:27:87:0b:
97:d7:7d:96:35:99:8c:4f:43:bb:7c:7e:c0:23:eb:
7e:53:2b:77:3a:97:cb:4e:fc:12:cf:b4:b0:0e:dc:
19:e1:ea:01:b1:c5:7a:21:f2:04:4f:d3:45:0b:d3:
4a:43:ab:cc:e9:f2:b2:e2:00:06:76:84:e9:76:4d:
34:98:16:a7:f8:a4:42:84:48:a4:f2:44:3c:6a:6d:
3d:f0:0d:df:c0:05:2f:85:13:8d:88:46:e6:d1:a0:
ff:c2:2b:94:73:45:19:df:c0:48:a6:f5:d8:03:e4:
fc:61:00:ac:8a:3a:92:e6:15:71:ac:59:a8:a8:d4:
5a:e1:a9:46:a8:f8:45:ff:2e:9c:cb:a8:a4:9c:f2:
f0:50:d1:79:ab:11:fe:d8:54:a6:e4:78:2b:37:1e:
f5:11:cc:f0:1e:c2:e5:6a:65:b5:5c:2c:d3:3a:70:
54:71:13:7f:b6:ee:ec:cc:0c:e4:5e:48:99:0a:3e:
1f:eb:f5:b1:9e:20:4f:99:37:d2:9a:6a:8c:e0:40:
62:d4:9b:46:77:d2:75:07:a1:1c:45:44:24:60:e9:
e9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2B:F3:AB:5D:03:01:90:D1:D2:46:16:29:51:C7:86:93:D7:9B:83
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:30:b3:77:38:4a:03:ab:e7:ee:04:f1:5e:2c:55:61:6b:9c:
19:d5:14:e5:29:03:b4:b7:6d:ef:aa:9d:3a:80:0d:0d:30:dc:
e5:89:b0:c2:01:ee:a3:69:d8:1b:e5:14:05:e4:99:8d:00:dc:
65:1d:0b:32:c4:b6:e8:f9:55:d2:cc:56:42:d4:03:3e:6e:99:
2f:ba:31:23:32:c4:c9:09:9c:e4:12:33:57:54:fa:81:3b:8f:
eb:5c:bd:12:15:fc:62:ac:d3:55:31:4c:0d:06:98:a1:ba:fe:
60:a5:0a:1c:27:1b:13:bd:48:46:c1:10:e7:94:8c:ff:e4:da:
b2:f4:4b:6f:e0:ce:ec:83:38:ef:fc:74:ff:9f:d1:14:27:ea:
31:ad:15:25:76:9e:c9:c0:a0:aa:0e:88:1c:be:3d:80:59:4a:
81:3f:63:21:c9:15:44:d6:91:df:52:87:57:5e:a1:db:50:0f:
2c:92:2b:07:89:2a:e3:f8:a8:94:3f:25:74:2a:4d:a1:d3:5c:
de:4c:13:31:e5:50:6a:1f:c3:c1:1a:a6:89:9f:db:e0:15:9e:
02:79:55:ca:d7:bc:3f:ba:67:b4:50:49:7c:3b:d6:b1:76:7b:
24:e7:f8:f9:9d:7c:79:69:1a:22:0e:05:54:57:fb:ae:e8:7d:
0d:36:82:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:58:38 2025 by rpki-client