Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File: BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier: 858/S2PIfbr896w8VGmKYn3ETikN6jWWwvKLSugPuhs=
Subject key identifier: 13:55:6F:B2:5F:98:3D:5B:20:DA:4A:DF:87:16:A5:8C:8A:66:7B:95
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer: /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial: 019872CF22572EDB9D9558D1935C8F805003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number: 0ACD
Signing time: Mon 04 Aug 2025 02:00:33 +0000
Manifest this update: Mon 04 Aug 2025 02:00:33 +0000
Manifest next update: Tue 05 Aug 2025 02:00:33 +0000
Files and hashes: 1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: IzTP8ulHfx+svBMnpojZL5Hnmf1RE8+f3CWgPFt7aa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:22:57:2e:db:9d:95:58:d1:93:5c:8f:80:50:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Validity
Not Before: Aug 4 02:00:33 2025 GMT
Not After : Aug 5 02:00:33 2025 GMT
Subject: CN=13556fb25f983d5b20da4adf8716a58c8a667b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:3f:18:c7:5b:5d:e2:6c:78:86:72:82:03:
ec:d3:32:b0:eb:b4:61:56:d0:28:08:17:b1:2b:d6:
c7:7b:f8:7f:e1:e4:fc:ae:47:bb:61:15:26:22:34:
cc:ba:b4:67:a2:7f:58:04:02:48:f2:ef:11:68:b9:
60:f4:b1:a9:8f:d4:97:43:67:97:6e:09:6a:af:c8:
3c:66:ec:5e:33:73:f8:bc:bd:b7:41:eb:b0:ae:0f:
c0:36:ff:8b:d0:16:3d:c2:68:04:fa:1b:4e:de:13:
55:4a:1b:e3:41:6e:ca:7d:a5:cf:c4:14:bb:01:88:
aa:a1:03:43:62:54:34:29:a5:41:7c:df:37:20:50:
6a:fc:99:c0:3a:c0:6b:54:2d:2a:16:ff:0e:89:e5:
46:c8:f0:d3:af:a9:ae:d6:46:3b:38:03:17:5b:86:
3b:05:da:c5:b5:f8:1d:55:82:6d:09:a0:17:64:b8:
38:42:70:68:63:de:14:a0:af:43:86:7f:fc:42:ba:
f0:ab:dc:5f:66:ad:98:bd:0c:7a:64:4c:5d:12:a2:
49:aa:8f:01:14:60:bf:86:b1:71:33:7f:e4:b9:a3:
c6:2c:66:c7:da:31:76:79:6d:c1:da:49:c3:16:b6:
4c:df:57:f3:7e:f2:b7:68:9d:c5:47:ad:46:41:3f:
44:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:55:6F:B2:5F:98:3D:5B:20:DA:4A:DF:87:16:A5:8C:8A:66:7B:95
X509v3 Authority Key Identifier:
keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:90:51:05:c9:29:8c:2a:dc:02:4a:b6:64:7f:dd:80:40:39:
86:0e:00:1a:d4:79:e5:41:d0:7a:b3:7d:ec:d2:12:2b:50:5c:
b9:18:c8:3b:8c:c3:29:4b:ad:ee:44:2e:c9:0f:c2:cc:19:29:
a5:95:79:de:a0:7a:02:7b:2f:07:6a:35:d4:a9:de:a3:3d:4c:
9e:1c:b2:bc:99:fd:3b:7c:62:27:20:42:57:ee:1c:6c:d9:ea:
82:04:54:84:44:8d:8a:af:9b:e8:3e:b0:cf:da:94:ea:ca:02:
69:9e:4d:7a:1f:e9:5a:8d:af:73:5b:c2:60:f8:b3:73:6d:14:
fe:4c:1c:78:92:11:37:3e:96:36:f1:2c:27:f5:85:80:da:7c:
c4:66:29:38:fb:13:f7:b8:a1:85:01:9c:76:a4:78:06:ca:8a:
8f:e4:2d:f9:bb:22:6a:30:e1:92:5d:d2:bf:2b:0e:fc:2d:3b:
37:84:b1:56:74:a5:ed:be:16:77:27:4b:e7:17:6e:c7:68:f9:
eb:74:12:31:56:21:27:f2:4e:65:5b:80:d7:45:39:9c:da:f2:
ce:a0:13:4e:09:e7:0d:70:84:c0:c8:9d:fb:89:c4:97:47:bc:
e5:29:52:de:8a:d7:2a:92:7d:44:3a:3b:b5:8b:1f:df:c0:c2:
38:a7:47:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:59 2025 by rpki-client