Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
File: bvqMD-YuxUrMveNcYL2K1LkBT_c.mft (raw, json)
Hash identifier: J7DYXuFUG2YQO53HH7pP5h0o1byJKIvpBGnLSfZzZ2s=
Subject key identifier: 6C:FF:E1:CF:49:79:A3:76:50:0A:AA:F1:4D:21:98:38:7E:E3:90:F0
Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Certificate issuer: /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Certificate serial: 0198511F465134D1F971FD7B56CA2A2E7636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
Manifest number: 14A1
Signing time: Mon 28 Jul 2025 13:01:00 +0000
Manifest this update: Mon 28 Jul 2025 13:01:00 +0000
Manifest next update: Tue 29 Jul 2025 13:01:00 +0000
Files and hashes: 1: DW8SHbVlL8Myb-p7QtpBtdE4Fug.roa (hash: yUyTh7meErNXbMRoAKGZB1yTrhp9xLOBqyMiqtl/XxA=)
2: bvqMD-YuxUrMveNcYL2K1LkBT_c.crl (hash: AxxB9Q8Jp5fMaGAp+GNXZJ63ZOTXmZDsGGkFC2dDSko=)
3: uBSOOeaOOAPA_AKPY15x-quda9A.roa (hash: Dt69/ItO+3jelx7+KElGDpHbyUEQGmbIcaxvgmv3LtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:1f:46:51:34:d1:f9:71:fd:7b:56:ca:2a:2e:76:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Validity
Not Before: Jul 28 13:01:00 2025 GMT
Not After : Jul 29 13:01:00 2025 GMT
Subject: CN=6cffe1cf4979a376500aaaf14d2198387ee390f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:80:6f:62:bc:d7:fa:9b:10:67:67:e9:05:
43:c2:bf:37:06:cd:d7:2a:21:7d:e0:43:a9:f1:6d:
7e:f1:5e:87:64:4b:92:32:64:46:52:c5:02:c4:d1:
24:4e:aa:a3:ce:71:ee:80:7e:4e:ff:f4:e9:94:81:
76:ef:6c:0b:82:87:1b:77:6a:f8:6e:2d:1c:c2:46:
01:bc:c9:db:41:30:c1:f8:d2:75:bb:47:e2:64:83:
1a:dd:3b:36:ec:43:85:fc:ac:b8:3f:c0:a1:95:1a:
e6:ad:71:49:fa:0d:01:fc:33:db:fb:f1:a9:5b:05:
fe:be:32:42:7e:f7:3c:fe:55:8c:f8:56:77:f8:92:
a2:2f:6a:0d:65:7b:0d:17:13:af:47:bd:e2:51:03:
51:35:3c:31:b0:e6:9b:24:12:00:cb:de:cb:c5:33:
06:fe:63:56:f0:c3:9b:0f:0e:52:89:95:34:75:f9:
23:bd:ce:eb:f1:b9:dd:ab:f7:d8:53:d5:bf:a6:2b:
d3:1d:f2:00:bc:81:3c:21:29:c8:05:ca:8c:a8:d0:
0c:3a:0c:00:e1:76:23:5a:73:44:57:28:a8:12:56:
1c:63:e7:5f:81:11:19:0e:95:54:ac:44:bc:1e:38:
5a:5d:5f:e6:74:43:58:c2:e6:14:cb:b1:0b:d6:bb:
60:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FF:E1:CF:49:79:A3:76:50:0A:AA:F1:4D:21:98:38:7E:E3:90:F0
X509v3 Authority Key Identifier:
keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5b:74:5e:4e:36:19:02:e0:f1:f7:9c:17:05:ef:a3:a1:26:
6b:09:1d:23:31:8c:6c:b6:3f:25:f3:2c:59:ed:6f:9f:50:1b:
48:0c:19:f7:85:69:ee:c1:68:bf:3c:ae:82:bb:f8:97:e8:f4:
a0:1d:b9:64:92:8c:ff:61:3a:c0:32:1b:d7:6b:7a:3f:8a:4f:
d5:59:0b:0f:64:b3:c4:b5:ce:32:e3:6c:e7:09:67:a1:bf:a2:
4c:1d:46:a0:f0:4b:b1:0f:c3:b0:6e:4d:7a:0a:71:d1:4e:d5:
fe:82:19:8a:6f:ee:41:d7:8b:f6:26:77:9c:7a:79:44:92:63:
ec:f7:80:71:ab:3f:a1:5e:68:8e:17:e6:09:76:4b:5a:28:43:
1d:34:08:78:fe:5b:1a:87:43:d9:8e:b3:69:2e:a5:b8:0e:29:
60:2e:5e:f8:be:10:ec:08:ff:bd:eb:1a:25:0c:3d:2a:89:af:
0b:0e:b1:26:09:d5:8f:fa:bb:db:0f:9c:81:43:e2:e9:83:92:
5b:77:5b:d0:3d:b8:23:f2:bf:df:7b:41:0c:0e:b5:8c:58:ef:
e9:a0:13:5f:96:a7:24:c8:13:ad:92:26:c6:97:d0:6d:5e:ed:
ae:fb:77:70:e4:a7:bd:fa:cc:99:8b:a9:08:88:c8:d1:e0:99:
0d:3b:4e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:43:14 2025 by rpki-client