Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
File: BmNp4nBctDPbBlirZm0ItnsVUdw.mft (raw, json)
Hash identifier: g1Ri7stp9kiWmMU9sp3i3vk6FAAO24nsBvZCA6A8x9s=
Subject key identifier: D5:D0:23:29:B8:51:EF:CB:09:E8:D8:2F:47:82:4E:04:49:B9:15:0E
Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
Certificate issuer: /CN=066369e2705cb433db0658ab666d08b67b1551dc
Certificate serial: 01984708BBE2F2F297229000FD5547795D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
Manifest number: 1525
Signing time: Sat 26 Jul 2025 14:00:11 +0000
Manifest this update: Sat 26 Jul 2025 14:00:11 +0000
Manifest next update: Sun 27 Jul 2025 14:00:11 +0000
Files and hashes: 1: BmNp4nBctDPbBlirZm0ItnsVUdw.crl (hash: OknwS5RHDuX5ICubm4Nq80yA0vDtNDD0AHrVE5CSKkc=)
2: jCf5g0MNk7dChvixSvofxX26UqQ.roa (hash: EtFQAu+QfH/I3yhnfzxyM188HrZPVxzTPSpuxFHhJDw=)
3: osJ9_DR-TYLXPhwmG2ma04NJTWc.roa (hash: J9O9DuXjiOjoHZT0sNnMyGnclsGi579GC3bqlBQWEYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:bb:e2:f2:f2:97:22:90:00:fd:55:47:79:5d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc
Validity
Not Before: Jul 26 14:00:11 2025 GMT
Not After : Jul 27 14:00:11 2025 GMT
Subject: CN=d5d02329b851efcb09e8d82f47824e0449b9150e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:94:15:66:0a:0d:8d:a9:f7:86:61:d5:34:
44:75:9a:82:a3:6a:5a:1d:a4:40:12:61:c8:7b:0d:
52:94:aa:aa:e1:0e:c9:34:e8:f3:37:f3:1f:82:89:
f7:5f:29:1a:3d:f7:37:f0:33:3b:e2:00:c7:ff:f0:
4b:d7:26:fe:4f:45:b4:bd:a4:fd:d8:ea:a1:06:a6:
9c:f1:7d:e4:8f:70:58:2b:f8:65:b7:20:72:20:4a:
4d:7b:6a:3f:be:26:46:94:e0:4b:8d:65:dc:ab:c8:
35:4f:67:b4:6c:d0:04:45:e7:08:00:78:bc:63:45:
23:3e:ba:bd:05:da:be:f7:82:47:60:6a:59:7a:64:
82:37:0c:cb:40:33:cd:ca:f3:b0:34:48:7d:40:44:
22:71:26:fb:42:f6:7a:c2:96:07:56:6f:b7:a3:05:
6a:3c:bb:34:a0:d4:66:46:81:be:ef:f4:9e:5c:d7:
d4:bc:77:38:53:52:00:31:79:ac:cd:34:4e:ed:b0:
77:bc:50:93:5f:e5:3d:32:e0:1c:02:40:fa:ab:77:
35:78:d0:18:31:b2:7c:7c:89:25:bd:98:e1:9c:97:
1d:7e:68:ec:13:bd:6f:f2:03:ea:53:a2:2b:aa:47:
27:9c:c8:f1:ee:a8:87:7f:ec:4f:8d:03:61:b5:9e:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D0:23:29:B8:51:EF:CB:09:E8:D8:2F:47:82:4E:04:49:B9:15:0E
X509v3 Authority Key Identifier:
keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:50:e8:f6:7b:fb:3c:27:9f:9e:10:91:dd:e1:1e:93:e6:82:
b9:09:c4:d9:a6:d1:4a:cb:a6:9b:fc:6a:6d:20:cd:8e:2a:2d:
8c:c8:af:90:a4:84:47:93:f1:2a:b2:90:88:59:1b:f7:15:82:
dc:8d:74:9f:27:a0:63:10:b9:8d:fa:5b:ba:5e:fd:7b:7f:15:
e2:a4:9a:38:23:a6:8f:9a:b0:4c:cd:2e:ce:d1:65:1f:fa:74:
32:1f:4e:84:80:b4:b6:4a:62:b1:ae:6b:cc:28:ce:4f:af:cb:
f7:0b:7e:ef:33:46:8d:98:cf:0b:3f:fd:40:6d:06:f8:ab:fa:
96:dd:0f:0b:25:20:60:b3:6d:4d:22:53:d2:55:27:b4:ca:dd:
8b:48:8b:98:4e:8a:7b:bd:4d:38:2d:d2:28:78:36:ce:2c:5f:
18:1d:a1:42:48:bf:75:97:89:7b:1c:44:24:b9:8b:63:4f:61:
1e:f2:aa:60:15:5e:2e:50:d3:5a:06:fd:25:90:0f:16:a9:c5:
2a:89:0d:57:fe:99:c5:bf:08:e7:67:ba:90:78:24:37:f7:40:
16:3c:82:01:35:03:5e:e6:88:96:df:27:40:30:0d:fa:0d:c5:
96:ab:ec:cc:0d:04:6b:1d:fb:cc:2b:72:7b:22:a2:86:61:f0:
52:1e:47:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:37:13 2025 by rpki-client