Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
File: BpCRPbvu2t3pXc5HBFJihOeufMo.mft (raw, json)
Hash identifier: /J0VKCz24Hr8anAwtlWxQ/60NCw3RIrWqkaItl6ezqA=
Subject key identifier: 67:8A:DB:EA:92:14:E6:1F:E3:C6:F8:46:B4:1F:35:D4:47:26:88:C6
Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
Certificate issuer: /CN=0690913dbbeedadde95dce4704526284e7ae7cca
Certificate serial: 0198590F48082712121E59564A94D715F392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
Manifest number: 1599
Signing time: Wed 30 Jul 2025 02:00:30 +0000
Manifest this update: Wed 30 Jul 2025 02:00:30 +0000
Manifest next update: Thu 31 Jul 2025 02:00:30 +0000
Files and hashes: 1: BpCRPbvu2t3pXc5HBFJihOeufMo.crl (hash: A7OvdhLzxNkAjrRZVIOv8Q5OxKj/edBSR2Cd0d1RmRM=)
2: Iy7lkqpbyaSDL2grrU_SdETf7DQ.roa (hash: DorRUxYefmWL1rp1az3xVIzdxI7JSTisHh4gg2RZ6eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:0f:48:08:27:12:12:1e:59:56:4a:94:d7:15:f3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca
Validity
Not Before: Jul 30 02:00:30 2025 GMT
Not After : Jul 31 02:00:30 2025 GMT
Subject: CN=678adbea9214e61fe3c6f846b41f35d4472688c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:cb:26:b4:f5:2f:1e:91:73:94:55:23:90:
c2:a0:14:26:55:fb:91:3d:6e:92:d9:f7:01:32:8a:
18:a2:09:26:50:e9:45:eb:a1:d2:4c:c7:d3:09:7c:
a5:06:59:2b:bf:e2:8f:dd:d8:9b:2a:1c:7c:8b:fe:
2e:41:80:0b:3c:8e:f5:28:40:8b:5b:9d:0a:2b:89:
3f:a1:66:f9:7f:ec:d0:d3:90:3d:ae:57:50:86:e5:
15:e9:8e:2a:e6:e2:7a:e1:d0:13:ac:9f:b0:8c:c3:
15:d6:e2:d0:13:f4:c6:32:3a:e8:1e:43:7e:7c:f5:
b5:58:86:4b:ad:b2:cb:d0:ca:ed:ce:65:a8:95:6a:
25:1d:9f:e4:c3:68:8e:4b:7f:33:0b:e1:5d:fd:41:
df:47:16:ea:48:56:37:dc:43:8f:91:90:4e:97:29:
7f:b5:32:c3:5a:c8:83:42:cb:0b:2a:71:45:d3:c1:
6f:c2:64:d0:4b:2b:99:68:15:5a:02:fe:07:7e:d5:
34:c8:10:56:a5:20:72:4e:f6:e9:b8:4b:34:7f:9d:
8b:51:83:68:b1:9d:f7:df:5c:ec:ee:a8:e9:f2:06:
97:a9:6c:f1:40:46:89:58:b0:7c:9b:8d:12:2e:79:
89:d0:ff:eb:3f:1a:32:f3:e5:9e:14:ab:9b:fa:ed:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8A:DB:EA:92:14:E6:1F:E3:C6:F8:46:B4:1F:35:D4:47:26:88:C6
X509v3 Authority Key Identifier:
keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0e:29:a4:57:52:d5:cf:f5:6a:a4:44:52:23:33:da:00:5f:
29:68:2c:bc:43:b5:52:7d:41:a7:e1:13:62:af:3f:d7:55:11:
af:84:89:2e:7d:22:db:69:e3:68:41:48:30:8a:1d:98:f5:9c:
5b:61:ac:92:a5:4c:28:39:b9:f9:fd:46:93:ca:08:53:a1:3e:
45:7a:94:28:a4:4a:9b:f7:7f:6e:d4:ab:cd:9a:44:3d:90:ae:
be:91:8c:e5:f8:50:f0:ab:44:63:64:7e:85:41:6b:52:50:fe:
7b:a2:f1:d9:91:f3:7b:14:51:b1:aa:cf:c4:8a:20:eb:17:4f:
bd:bc:bc:ab:0b:da:f9:ce:d8:06:90:d4:28:fd:82:cd:db:c5:
1a:d2:99:f0:d2:e6:76:40:a7:ba:ec:93:9d:e0:3a:1c:1e:2f:
73:d9:2d:4a:f9:08:20:49:73:5c:29:12:81:6b:31:5d:09:87:
51:6f:36:9c:4f:be:ca:64:0a:ce:18:8b:b4:9b:4e:b2:3e:63:
5b:96:ad:9e:6a:b2:5c:59:80:99:1b:d6:aa:4b:4e:a5:a8:6e:
d5:b2:cd:02:dc:c5:1e:b7:5c:d1:ef:4d:a8:15:8c:fd:2f:e4:
e2:c7:8f:b9:f8:71:f1:cc:f1:8f:34:57:e6:37:36:da:5a:02:
d1:bd:96:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 05:30:21 2025 by rpki-client