Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier: 1nyMaqU9TC9r7DzhVFiF0PP2cH47bePcZN2swPI0tlQ=
Subject key identifier: 39:89:66:E0:AF:5E:3B:30:82:DD:EF:C9:26:D6:19:34:EE:01:AF:2E
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 0198499C79AB2EBA5C86E8DF99AA503B4BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number: 08BE
Signing time: Sun 27 Jul 2025 02:00:48 +0000
Manifest this update: Sun 27 Jul 2025 02:00:48 +0000
Manifest next update: Mon 28 Jul 2025 02:00:48 +0000
Files and hashes: 1: 3kGa7kLBm042LbbqykHtZB7ufPc.roa (hash: w1pGOLasw4Pb62ELUrEIQqwR4u8hfryDi61TGvccVyw=)
2: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: Go8icMHDa3M96D0dLyTmnN1EgEneRF4CrQrCcAsFZGo=)
3: F6fQGiNxub0Asxw2Ftlalm35-sI.roa (hash: wYkSnnpKM5pfTpyfgZw3XQ3Jd7ZS+gOnc16p21qV1JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:79:ab:2e:ba:5c:86:e8:df:99:aa:50:3b:4b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Jul 27 02:00:48 2025 GMT
Not After : Jul 28 02:00:48 2025 GMT
Subject: CN=398966e0af5e3b3082ddefc926d61934ee01af2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:81:ab:52:05:d4:31:15:c9:dc:ef:01:b6:08:
cc:31:eb:de:61:16:e7:bb:e5:dc:6f:ab:cc:88:f8:
b9:06:fe:96:a2:cd:3c:95:74:26:02:48:84:88:72:
f4:dd:35:0a:de:e1:88:04:b9:31:78:22:3b:6a:8b:
c5:1c:ab:0b:76:fc:a4:83:5c:d9:01:69:0c:92:69:
5b:56:8d:7d:11:87:a3:b9:00:a4:94:13:bd:09:cf:
b6:c0:e2:f6:e5:ea:9f:60:90:b9:16:c7:7e:7f:e4:
d3:37:00:a2:22:ff:f6:52:ab:a5:c6:79:d6:03:16:
b7:3c:eb:24:6f:c7:5e:0c:8f:b3:07:ed:03:15:d6:
33:ec:6a:0d:06:a0:e7:93:c7:1e:a4:12:85:d4:c5:
06:af:e5:8a:38:2d:1d:75:67:cf:60:04:f8:15:de:
ce:66:36:9b:37:1b:58:bf:15:be:37:b7:a9:59:24:
36:5d:d4:ae:8d:3a:95:64:7f:5f:c7:2c:d3:f8:e6:
59:55:97:0d:6d:d3:89:d3:3d:a8:bd:65:65:4c:7a:
b2:30:2a:6a:d9:18:d0:32:7a:20:47:ee:93:c3:a7:
45:71:d9:ad:7e:d9:b4:14:de:d1:ce:77:f6:67:07:
43:8f:7c:4f:ab:29:57:c9:a0:5a:63:37:6f:ca:bd:
56:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:89:66:E0:AF:5E:3B:30:82:DD:EF:C9:26:D6:19:34:EE:01:AF:2E
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3a:57:51:81:05:25:9b:05:5f:31:8f:af:e7:ac:6c:78:9f:
b6:f3:10:25:91:9e:8d:60:96:ee:61:9a:bf:08:41:ae:8e:49:
b8:2b:6c:5a:55:5b:d9:d1:68:69:cb:30:69:12:4a:d6:df:79:
05:c8:3d:4b:13:ee:c6:fd:79:a7:41:72:bf:5a:5c:90:19:68:
96:b5:5f:64:b8:2e:81:9c:87:94:4a:2f:44:dc:63:13:e4:3f:
0c:20:ca:b6:4d:64:77:bd:1c:de:87:32:43:79:8e:c0:82:33:
13:7b:68:69:7c:28:24:2f:08:f6:d3:c4:52:92:5b:cb:c7:42:
9c:bb:f2:02:ec:73:69:cc:93:69:1a:3b:58:5c:c2:d8:fb:85:
89:e5:09:db:0f:fc:40:00:81:f9:57:03:82:c8:31:db:ae:c4:
b2:89:20:31:20:0c:25:66:51:93:82:ba:04:45:d3:45:dd:2d:
5e:9a:2c:29:51:04:29:20:e8:ad:43:94:7e:9e:52:65:b1:f6:
03:87:ac:d8:68:1a:bd:ab:00:ba:af:96:14:fc:a5:6f:80:af:
9c:81:3c:63:94:db:f0:aa:9b:25:3c:38:07:c7:ee:09:7a:af:
7c:65:2d:dc:bd:88:43:d1:69:07:d3:cf:7f:e7:24:54:8c:72:
38:36:a8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:22:41 2025 by rpki-client