Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: 89QvY7cdDLhquRPnuCR6MmLBzmu0UqB58QwEwJVwdd4=
Subject key identifier: 6B:1F:A2:94:D0:63:54:4D:0C:01:09:38:D2:77:91:22:3E:69:65:23
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 0198469B2A1A7C27102277EF78BFE4019848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 12:00:30 +0000
Manifest this update: Sat 26 Jul 2025 12:00:30 +0000
Manifest next update: Sun 27 Jul 2025 12:00:30 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: sQtdR4UkieqL8TPie9tSt5qA4qBfKomE4By2tu0HnAI=)
2: Lh8yvuYECQW6dDow2L76nBGsr6E.roa (hash: 0hiYjVR3RerVN9RXXudfA5pr9cnXHHQqw5O/Jaf9Snc=)
3: vtX7rusa6fZMmF3lc_ZvTTSyZII.roa (hash: /Q3goqDnJ6EwR3K+qh2LYwfBLshEeT0YC75y12sQLG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:2a:1a:7c:27:10:22:77:ef:78:bf:e4:01:98:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Jul 26 12:00:30 2025 GMT
Not After : Jul 27 12:00:30 2025 GMT
Subject: CN=6b1fa294d063544d0c010938d27791223e696523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:46:a9:9b:90:a1:0b:af:4d:ea:2b:ff:b7:
4d:ac:d7:24:7e:a5:2c:c2:63:5d:4f:d4:b3:6f:50:
e5:f3:a9:2b:52:29:4b:09:eb:b3:25:28:57:ab:ac:
73:08:68:2f:4f:6a:53:c5:7d:27:61:a3:66:b5:49:
46:71:21:3b:9e:2b:22:cc:b2:7b:91:67:5c:18:10:
ff:da:18:7f:36:40:04:8b:b2:90:db:29:09:ad:17:
07:cf:78:fa:4d:59:de:24:c3:a6:68:8c:2a:7e:d4:
d9:92:2e:01:7e:94:20:18:f0:f4:1c:e7:05:69:5b:
14:3d:41:2e:4b:75:c7:82:ca:66:5b:5b:b8:84:ee:
fe:2d:f9:c0:48:7e:cf:75:50:48:f8:2a:5c:8d:60:
ec:3c:a2:59:3e:20:b8:67:68:0b:22:78:b8:6e:9c:
d4:85:96:bd:71:fd:2d:7f:07:90:0b:7d:47:9f:be:
c9:f7:b1:95:03:fa:d0:1b:be:36:3b:c7:bb:7e:88:
26:a5:0f:40:7d:ac:98:5e:06:8b:9d:c3:57:42:d1:
84:2a:c2:1e:77:b4:2b:ba:50:2e:a5:08:fe:bd:3a:
5a:56:b4:b8:70:5f:c9:1e:1f:f5:84:c5:73:11:fa:
3b:fd:88:26:5a:05:2f:39:28:39:d4:c6:a6:53:1d:
2b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1F:A2:94:D0:63:54:4D:0C:01:09:38:D2:77:91:22:3E:69:65:23
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a0:3a:44:bf:3d:7e:7f:c4:3f:28:d5:2b:bd:48:94:7b:24:
1d:04:92:34:45:85:34:cc:28:0b:07:5e:2d:29:c6:a2:8b:b3:
7b:51:80:63:b0:9f:6e:50:b7:c9:5a:17:c1:08:8c:08:ff:51:
78:cf:17:01:50:ae:65:e1:07:f2:6a:62:c5:1f:d9:77:c7:98:
de:d5:1e:94:71:9d:bd:7e:9f:9b:e5:0c:89:44:90:f8:43:35:
c3:75:21:ea:4e:f3:27:e4:2a:7e:e6:ce:95:ef:6e:32:3f:0f:
e8:26:46:39:fc:64:90:96:b8:63:45:d4:ca:b8:bb:7e:4e:b9:
d0:88:a1:c8:15:c9:0e:3c:37:94:11:f3:0f:d2:73:28:aa:fb:
f6:f8:d2:e8:a4:cf:c1:af:86:99:8b:72:7c:65:12:b4:2c:9f:
2c:de:bc:64:42:f6:e0:df:76:9c:5f:4c:85:14:f2:68:cb:db:
1d:e1:fc:62:80:f4:b6:c9:70:82:93:f3:cf:16:b4:50:83:7d:
c7:d3:84:ed:58:82:5f:26:3f:46:5c:45:65:db:cf:41:33:48:
00:e0:c2:9a:d4:f8:60:10:43:e4:7f:df:44:cc:3e:b9:eb:02:
dd:b7:65:f0:04:f8:19:77:f4:e7:6a:36:01:7c:a2:f3:91:61:
8e:5f:f2:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGmyoafCcQInfveL/kAZhIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MmFjMzgyNjg5Njg3YjYwZmNlNWNlOWRiODg3YjIxZDY4
YTZhYmMwHhcNMjUwNzI2MTIwMDMwWhcNMjUwNzI3MTIwMDMwWjAzMTEwLwYDVQQD
Eyg2YjFmYTI5NGQwNjM1NDRkMGMwMTA5MzhkMjc3OTEyMjNlNjk2NTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1pGqZuQoQuvTeor/7dNrNckfqUs
wmNdT9Szb1Dl86krUilLCeuzJShXq6xzCGgvT2pTxX0nYaNmtUlGcSE7nisizLJ7
kWdcGBD/2hh/NkAEi7KQ2ykJrRcHz3j6TVneJMOmaIwqftTZki4BfpQgGPD0HOcF
aVsUPUEuS3XHgspmW1u4hO7+LfnASH7PdVBI+CpcjWDsPKJZPiC4Z2gLIni4bpzU
hZa9cf0tfweQC31Hn77J97GVA/rQG742O8e7fogmpQ9AfayYXgaLncNXQtGEKsIe
d7QrulAupQj+vTpaVrS4cF/JHh/1hMVzEfo7/YgmWgUvOSg51MamUx0r/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsfopTQY1RNDAEJONJ3kSI+aWUjMB8GA1UdIwQY
MBaAFAQqw4Joloe2D85c6duIeyHWimq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUt
NzBiYzY2ODkzZTVjLzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUtNzBiYzY2ODkzZTVj
LzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKA6RL89
fn/EPyjVK71IlHskHQSSNEWFNMwoCwdeLSnGoouze1GAY7CfblC3yVoXwQiMCP9R
eM8XAVCuZeEH8mpixR/Zd8eY3tUelHGdvX6fm+UMiUSQ+EM1w3Uh6k7zJ+QqfubO
le9uMj8P6CZGOfxkkJa4Y0XUyri7fk650IihyBXJDjw3lBHzD9JzKKr79vjS6KTP
wa+GmYtyfGUStCyfLN68ZEL24N92nF9MhRTyaMvbHeH8YoD0tslwgpPzzxa0UIN9
x9OE7ViCXyY/RlxFZdvPQTNIAODCmtT4YBBD5H/fRMw+uesC3bdl8AT4GXf052o2
AXyi85Fhjl/yZQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:04:31 2025 by rpki-client