Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
File: BmNp4nBctDPbBlirZm0ItnsVUdw.mft (raw, json)
Hash identifier: iK22mwiWpaf5XLFqYI9mrFtKYbn/W56SfuFKroJ2vTI=
Subject key identifier: 45:B2:A4:99:AE:99:FA:1A:2C:2B:B1:4F:1E:C6:21:43:40:D9:10:9F
Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
Certificate issuer: /CN=066369e2705cb433db0658ab666d08b67b1551dc
Certificate serial: 01974A0CC7512D90026FB2CBBA79EBF3E8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
Manifest number: 14A2
Signing time: Sat 07 Jun 2025 11:00:40 +0000
Manifest this update: Sat 07 Jun 2025 11:00:40 +0000
Manifest next update: Sun 08 Jun 2025 11:00:40 +0000
Files and hashes: 1: BmNp4nBctDPbBlirZm0ItnsVUdw.crl (hash: hQ0UdviFX9+Om6WmFQhATB380afnvvnGQVCUMLMZqDg=)
2: jCf5g0MNk7dChvixSvofxX26UqQ.roa (hash: EtFQAu+QfH/I3yhnfzxyM188HrZPVxzTPSpuxFHhJDw=)
3: osJ9_DR-TYLXPhwmG2ma04NJTWc.roa (hash: J9O9DuXjiOjoHZT0sNnMyGnclsGi579GC3bqlBQWEYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:c7:51:2d:90:02:6f:b2:cb:ba:79:eb:f3:e8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc
Validity
Not Before: Jun 7 11:00:40 2025 GMT
Not After : Jun 8 11:00:40 2025 GMT
Subject: CN=45b2a499ae99fa1a2c2bb14f1ec6214340d9109f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:5e:2c:01:a7:ce:e4:46:64:04:75:14:53:
db:36:11:25:a8:bc:22:9b:b8:40:4a:24:cf:a9:c9:
af:b1:7c:22:cc:26:3e:04:6e:82:b6:87:08:11:8d:
bc:d5:0c:c4:a6:b1:3e:6e:7d:f0:6b:3a:ec:11:35:
c8:68:3a:15:48:bd:74:7c:fa:f5:cc:fc:79:52:f6:
d3:ee:b8:bc:d4:d1:42:bd:50:f7:9c:a7:f6:1f:10:
14:94:c3:7a:ee:ba:a7:3d:d3:db:ea:12:3f:db:06:
98:2a:e3:d7:32:2a:8c:17:f0:66:f5:a1:c1:cf:1d:
9e:51:22:c6:f8:bf:a7:e7:c2:52:6f:7b:c4:37:1e:
da:27:1f:d7:73:1c:2b:10:e4:f9:10:09:88:5b:c6:
f5:bf:b0:2e:37:02:c8:fb:7c:0d:ad:ba:5e:1f:d5:
c0:17:eb:29:59:bf:5b:93:31:70:37:eb:9e:06:79:
63:a4:41:43:64:1a:39:9e:d4:cc:a4:c8:2b:fd:89:
55:b9:30:ea:67:21:a1:2c:d9:8f:30:41:07:77:9e:
5b:fb:80:ab:e1:94:09:a4:8e:95:f0:cc:ff:a1:9b:
6a:c6:eb:12:4b:a6:12:da:53:ce:e3:21:f4:2a:63:
b7:7a:27:0b:79:d9:d7:b7:c9:13:50:75:f8:9b:a9:
ea:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B2:A4:99:AE:99:FA:1A:2C:2B:B1:4F:1E:C6:21:43:40:D9:10:9F
X509v3 Authority Key Identifier:
keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0d:b2:18:29:76:c8:83:dd:e1:86:bf:cf:f1:1a:8e:30:09:
82:a9:7b:e3:8f:96:91:cd:21:44:09:91:db:df:04:3d:96:5f:
1b:8c:39:10:b1:61:e3:46:d1:b0:1c:0a:fd:b3:ec:ec:4a:6d:
6d:ea:71:33:45:87:99:63:8f:21:dc:5b:9a:14:46:4b:f1:b1:
ce:c3:b5:31:ea:d9:d5:e2:97:0e:dc:ef:22:c3:a2:28:72:7b:
78:72:70:ed:51:f9:12:eb:6f:be:8e:10:9a:11:76:5e:75:78:
41:cc:15:04:50:15:b1:81:89:5a:92:b1:c1:24:6d:82:36:82:
d9:db:e5:6e:24:2e:f5:b1:30:f2:d9:00:c6:1b:64:7c:f9:d4:
50:af:65:2c:07:60:c6:dd:c6:46:20:5f:c7:40:86:f5:95:8a:
17:2b:2a:41:83:27:c0:0e:39:c4:b9:19:f4:57:c8:5a:5a:7c:
e5:91:66:67:f5:11:ba:fc:36:40:63:85:d4:fc:9b:d0:5f:f5:
fa:75:11:9a:f1:c9:70:aa:f3:24:fe:cd:67:3d:a8:0b:71:e8:
32:2e:83:d6:23:96:4b:b2:a3:51:14:16:dd:18:88:e7:68:c4:
b4:3e:2d:19:d0:7c:6b:bc:c0:fe:55:08:d7:de:6f:5e:2c:26:
42:18:f0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:55:32 2025 by rpki-client