Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
File: BmNp4nBctDPbBlirZm0ItnsVUdw.mft (raw, json)
Hash identifier: vInTWJGDT0ueIk3afkF5dZ+9Nr3KgnEtjf3djzuVSJc=
Subject key identifier: F5:B6:20:80:34:44:75:32:49:12:F0:9C:70:3E:05:D8:44:82:2E:D5
Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
Certificate issuer: /CN=066369e2705cb433db0658ab666d08b67b1551dc
Certificate serial: 019930B60124FD9F499E87F874987E3FCAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
Manifest number: 159E
Signing time: Tue 09 Sep 2025 23:00:58 +0000
Manifest this update: Tue 09 Sep 2025 23:00:58 +0000
Manifest next update: Wed 10 Sep 2025 23:00:58 +0000
Files and hashes: 1: BmNp4nBctDPbBlirZm0ItnsVUdw.crl (hash: SAgc7FJmcaKEhGlgG0rRfQokRowVu0ei7hkGJY6Mg2A=)
2: jCf5g0MNk7dChvixSvofxX26UqQ.roa (hash: EtFQAu+QfH/I3yhnfzxyM188HrZPVxzTPSpuxFHhJDw=)
3: osJ9_DR-TYLXPhwmG2ma04NJTWc.roa (hash: J9O9DuXjiOjoHZT0sNnMyGnclsGi579GC3bqlBQWEYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:b6:01:24:fd:9f:49:9e:87:f8:74:98:7e:3f:ca:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc
Validity
Not Before: Sep 9 23:00:58 2025 GMT
Not After : Sep 10 23:00:58 2025 GMT
Subject: CN=f5b62080344475324912f09c703e05d844822ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:67:f6:06:dc:57:c6:90:8c:5d:53:b3:5b:
db:ad:5d:0a:f2:f8:0b:86:43:0e:06:db:f4:d4:d2:
16:c5:95:68:0a:44:a0:85:a9:62:dc:79:7e:d1:01:
62:34:30:82:80:ac:5a:4b:b8:32:b0:3e:24:b3:c1:
74:b7:89:a2:5e:03:ca:eb:9d:be:ff:1b:a9:dd:57:
9a:64:44:cf:62:6e:c0:80:be:fa:ff:19:2b:ad:aa:
11:f5:5f:68:67:56:4f:a6:00:a3:c3:66:18:59:be:
6c:c1:38:04:d6:f0:70:c1:6d:db:e3:7d:7b:d6:17:
dc:8c:26:5a:ee:4f:f4:38:a5:f7:34:42:9e:5e:b1:
53:19:01:ec:b4:06:71:2c:78:3b:4b:c9:05:96:02:
6f:59:fc:90:3d:4c:ef:02:be:ec:aa:86:4e:c2:88:
0c:03:c5:cf:df:84:5c:3b:73:46:2c:a5:c4:5b:04:
6f:b3:73:2e:b5:44:31:05:71:22:a4:6b:d1:89:86:
ce:07:cc:64:67:b3:6e:a9:d7:41:ea:a1:ec:e4:8f:
64:15:fd:38:78:db:f0:ad:a3:7c:05:7d:fc:93:c7:
70:b8:80:2b:b6:bf:1f:74:b4:82:c2:a7:9e:ef:c2:
16:15:51:66:57:a3:22:60:91:4c:93:7f:11:a3:a7:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B6:20:80:34:44:75:32:49:12:F0:9C:70:3E:05:D8:44:82:2E:D5
X509v3 Authority Key Identifier:
keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:96:d3:72:58:68:6a:09:bd:9f:ed:89:a6:03:d4:8b:de:1d:
69:fe:e8:66:3d:97:8a:54:0e:c0:bd:e3:d0:40:89:3b:3e:ae:
cc:d0:63:33:fc:f5:83:36:2d:aa:19:0a:5e:97:7f:b3:50:c9:
0b:c4:f3:f5:0d:77:6a:15:ae:eb:39:23:ad:ac:11:58:be:28:
54:ca:17:34:b5:c6:98:77:23:63:ae:b1:f7:18:76:1f:d3:9f:
ba:f5:83:fa:98:99:06:06:27:2b:83:43:21:f8:fb:cd:1c:14:
66:da:5e:61:f8:61:90:c5:54:93:c5:6c:81:19:78:d0:b2:0f:
3a:5b:c0:6e:b3:f9:1c:8d:7a:d2:1e:7f:98:5b:57:a8:92:a5:
8b:66:94:a1:78:b2:1d:62:f7:b6:89:21:7c:ef:6a:1f:9e:f3:
bd:04:4d:52:f7:4e:06:75:65:f1:76:7e:34:7e:e5:af:3e:41:
c5:e7:62:5d:9e:96:e6:21:d5:25:54:f5:f1:0b:a7:8e:51:83:
93:2b:cc:b2:ac:34:97:a5:d3:83:93:6c:15:a5:c8:73:a8:15:
bf:7e:eb:a8:a9:33:f4:f7:04:95:a2:7e:36:19:c6:a2:44:ff:
c9:69:20:56:e8:9f:95:6f:ec:d8:39:80:b8:3d:bb:48:56:a7:
45:04:28:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:11:28 2025 by rpki-client