Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
File: bmgcJW1nKYHLOc4lynjPIVz06qY.mft (raw, json)
Hash identifier: DXjQfxZUXUdYXzv9VrmCCrzkZdalnEtZdg6UsWFMsAY=
Subject key identifier: 5B:10:CC:9A:89:DA:07:9E:67:A8:39:D1:22:B0:EE:06:E2:DF:44:EA
Authority key identifier: 6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
Certificate issuer: /CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Certificate serial: 0198499C2D3A4D5096477AE65808C81F4C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 02:00:28 +0000
Manifest this update: Sun 27 Jul 2025 02:00:28 +0000
Manifest next update: Mon 28 Jul 2025 02:00:28 +0000
Files and hashes: 1: bmgcJW1nKYHLOc4lynjPIVz06qY.crl (hash: 0vYw5NLpGQr08wofAK5Tsq3JKoip/L8jxgwg1nbvTy0=)
2: tvKD3UXqZVXDvVX7leTlMKw_qew.roa (hash: WK5XR30REtOfSSrTxnfQEhXv68zn6pJyCz3GjFrJURA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:2d:3a:4d:50:96:47:7a:e6:58:08:c8:1f:4c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Validity
Not Before: Jul 27 02:00:28 2025 GMT
Not After : Jul 28 02:00:28 2025 GMT
Subject: CN=5b10cc9a89da079e67a839d122b0ee06e2df44ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:82:b1:f9:5c:fc:81:f7:f2:09:96:14:ca:
a0:49:45:1e:41:8f:ac:ca:cb:17:1e:d0:25:cc:33:
21:f0:78:32:40:b5:08:15:de:d9:d2:1e:f5:39:70:
c2:2e:20:69:e1:d1:2f:04:2c:33:8b:f8:db:2d:0c:
0b:64:ff:d2:1f:cb:1a:fa:89:8c:76:e8:7b:89:d1:
85:24:52:b2:9b:d7:9a:50:68:72:bc:66:3e:15:88:
29:48:c6:4a:51:0f:2d:b1:b8:f6:db:35:74:eb:88:
22:5b:5d:de:92:80:94:d2:9b:12:c3:54:0e:e5:1c:
76:b9:de:17:7b:e6:3e:a7:00:45:0c:2d:59:9a:3d:
47:e9:f5:82:ad:32:f4:29:d8:a0:04:7a:ae:82:b7:
85:b1:97:67:11:0d:32:14:ea:fd:44:e3:59:4e:90:
bf:e4:c4:86:77:47:29:e1:7f:63:d3:b0:1a:71:84:
4b:f6:ac:13:d2:08:04:ab:80:6b:d4:4b:52:c6:e9:
30:d5:75:04:74:0b:e5:e6:57:46:b3:b9:c2:5f:c9:
f8:45:40:db:17:a2:29:30:14:d3:30:0c:9f:98:4c:
70:dd:3a:ae:56:db:c6:17:0d:95:6b:c1:26:17:08:
2f:d0:0a:04:a9:45:f5:cc:66:4b:27:a0:1b:93:c3:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:10:CC:9A:89:DA:07:9E:67:A8:39:D1:22:B0:EE:06:E2:DF:44:EA
X509v3 Authority Key Identifier:
keyid:6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:40:78:88:ad:d1:8e:89:e1:09:34:de:0d:61:bc:d0:5a:e9:
e1:c9:45:6c:e8:92:7e:07:a0:dc:6d:2c:9c:65:cd:b2:56:19:
bd:a6:bf:f1:bb:52:54:21:1b:c4:06:9d:18:fa:49:cf:13:bd:
7f:2c:a5:f4:f0:9c:ae:9d:42:31:33:46:1d:81:ee:70:89:cf:
c7:f4:6c:67:b7:90:5c:cc:69:4a:28:a1:6a:fa:25:3e:88:56:
f3:63:a5:9c:e6:dc:45:b4:96:f1:c5:f6:49:fa:24:3f:2b:2e:
ff:9d:80:57:39:b0:33:4b:16:9d:06:f9:a8:78:c4:d4:2a:b8:
8c:58:db:97:d2:96:10:31:f5:e7:e3:96:47:b1:aa:24:74:82:
ec:82:f7:b9:d6:76:2e:47:1e:ad:e6:9c:ac:b5:0d:24:ca:bc:
dc:cd:d0:69:fd:3a:86:72:7f:8d:0e:97:bb:39:e5:83:40:fe:
38:32:a3:eb:e1:64:6e:5a:0d:dd:7f:18:c5:bd:69:d9:1e:9c:
4e:e1:fe:78:3a:e4:f3:19:25:08:21:87:01:63:c6:aa:2e:d2:
76:5f:d4:be:00:6e:47:c3:78:9a:0e:71:29:36:69:69:45:f1:
35:c6:06:59:74:87:7a:00:a9:e1:57:67:26:83:8e:c5:8e:50:
81:91:8d:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnC06TVCWR3rmWAjIH0yWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNjgxYzI1NmQ2NzI5ODFjYjM5Y2UyNWNhNzhjZjIxNWNm
NGVhYTYwHhcNMjUwNzI3MDIwMDI4WhcNMjUwNzI4MDIwMDI4WjAzMTEwLwYDVQQD
Eyg1YjEwY2M5YTg5ZGEwNzllNjdhODM5ZDEyMmIwZWUwNmUyZGY0NGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJuCsflc/IH38gmWFMqgSUUeQY+s
yssXHtAlzDMh8HgyQLUIFd7Z0h71OXDCLiBp4dEvBCwzi/jbLQwLZP/SH8sa+omM
duh7idGFJFKym9eaUGhyvGY+FYgpSMZKUQ8tsbj22zV064giW13ekoCU0psSw1QO
5Rx2ud4Xe+Y+pwBFDC1Zmj1H6fWCrTL0KdigBHqugreFsZdnEQ0yFOr9RONZTpC/
5MSGd0cp4X9j07AacYRL9qwT0ggEq4Br1EtSxukw1XUEdAvl5ldGs7nCX8n4RUDb
F6IpMBTTMAyfmExw3TquVtvGFw2Va8EmFwgv0AoEqUX1zGZLJ6Abk8NLTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsQzJqJ2geeZ6g50SKw7gbi30TqMB8GA1UdIwQY
MBaAFG5oHCVtZymByznOJcp4zyFc9OqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm1nY0pXMW5LWUhMT2M0bHlualBJVnowNnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80OWU0OWEtOTg3ZS00NzQxLWFiYTkt
MzdhNTBjZGZhZTA3LzEvYm1nY0pXMW5LWUhMT2M0bHlualBJVnowNnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC80OWU0OWEtOTg3ZS00NzQxLWFiYTktMzdhNTBjZGZhZTA3
LzEvYm1nY0pXMW5LWUhMT2M0bHlualBJVnowNnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0B4iK3R
jonhCTTeDWG80Frp4clFbOiSfgeg3G0snGXNslYZvaa/8btSVCEbxAadGPpJzxO9
fyyl9PCcrp1CMTNGHYHucInPx/RsZ7eQXMxpSiihavolPohW82OlnObcRbSW8cX2
SfokPysu/52AVzmwM0sWnQb5qHjE1Cq4jFjbl9KWEDH15+OWR7GqJHSC7IL3udZ2
LkcereacrLUNJMq83M3Qaf06hnJ/jQ6Xuznlg0D+ODKj6+FkbloN3X8Yxb1p2R6c
TuH+eDrk8xklCCGHAWPGqi7Sdl/UvgBuR8N4mg5xKTZpaUXxNcYGWXSHegCp4Vdn
JoOOxY5QgZGNDw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:45:10 2025 by rpki-client