Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
File: bmgcJW1nKYHLOc4lynjPIVz06qY.mft (raw, json)
Hash identifier: NoG4BMcg7frI25JzNgQH+CP/O2sXrbJnRKJ3zn6B0ds=
Subject key identifier: 35:7C:88:30:23:C7:BD:85:19:18:76:CD:EA:3A:9A:3D:FE:22:3A:EB
Authority key identifier: 6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
Certificate issuer: /CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Certificate serial: 0197526B0FE198AA600ABCD785257405538E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
Manifest number: 157D
Signing time: Mon 09 Jun 2025 02:00:37 +0000
Manifest this update: Mon 09 Jun 2025 02:00:37 +0000
Manifest next update: Tue 10 Jun 2025 02:00:37 +0000
Files and hashes: 1: bmgcJW1nKYHLOc4lynjPIVz06qY.crl (hash: wdtwOFHkkdsSLkEO8r9rB3zKY2PsfpQc2i6sPDDQXCM=)
2: tvKD3UXqZVXDvVX7leTlMKw_qew.roa (hash: WK5XR30REtOfSSrTxnfQEhXv68zn6pJyCz3GjFrJURA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:0f:e1:98:aa:60:0a:bc:d7:85:25:74:05:53:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Validity
Not Before: Jun 9 02:00:37 2025 GMT
Not After : Jun 10 02:00:37 2025 GMT
Subject: CN=357c883023c7bd85191876cdea3a9a3dfe223aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:4c:55:c3:ad:8a:35:72:e9:45:71:41:fe:
41:a8:3b:83:f1:31:09:ab:09:ee:ab:eb:2c:60:21:
2c:ae:26:8e:90:c0:e7:44:af:22:ab:9e:68:1c:6a:
0a:23:ae:b3:6d:b9:6b:b7:d9:17:65:26:29:d2:12:
6a:90:c5:43:d1:4a:31:58:73:55:7c:5b:4d:4e:d6:
60:86:17:67:7b:d9:27:66:e2:54:c2:cd:1f:9f:61:
95:cd:6d:73:3e:ef:cc:93:35:9e:5d:a3:f5:11:60:
6e:cf:a8:f1:35:91:04:d3:e6:01:67:71:0b:21:69:
78:57:88:73:98:5f:dd:9a:14:39:ff:e7:9d:79:4f:
b6:c1:b6:c1:10:4f:f9:da:98:a5:36:ee:ae:8f:ea:
0e:b1:2c:ba:f7:70:17:6f:17:b7:3b:51:86:6e:e4:
ae:46:4d:b7:08:5b:ab:ed:0a:7a:54:b7:08:35:72:
8f:1d:26:4a:51:f8:66:f1:16:38:58:05:dd:a9:7a:
23:5a:d9:f4:4e:90:49:dd:64:d6:72:22:b1:09:47:
6c:d2:ab:00:55:c1:44:3a:45:b6:f0:de:b9:10:6e:
82:d5:4c:74:01:3e:60:91:d1:d2:ad:31:aa:4b:56:
8c:ff:0e:b3:0a:45:97:fe:4f:2e:4f:89:df:f7:0f:
0d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7C:88:30:23:C7:BD:85:19:18:76:CD:EA:3A:9A:3D:FE:22:3A:EB
X509v3 Authority Key Identifier:
keyid:6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a7:4a:4f:33:84:41:b5:6b:c2:63:71:4e:53:f5:9d:ed:8f:
82:0b:c6:19:57:47:a9:fa:e6:be:11:22:a4:32:80:2f:29:b5:
62:3f:dd:57:9b:0d:e4:3d:01:48:61:5c:41:2c:20:2a:18:59:
07:88:a1:b2:88:5c:10:8b:36:c9:a4:5b:76:8e:46:88:3b:7b:
b5:2d:95:c4:8e:94:33:17:89:2c:5e:c9:dc:02:ec:2d:a4:d7:
2b:7e:93:cf:60:f3:d8:d6:1a:3a:34:0d:35:7f:0d:7f:68:29:
1b:50:a5:7e:71:13:db:00:a2:7f:0a:c4:a7:c2:ac:ea:8d:c9:
ba:27:c3:a9:f9:d9:05:f8:2e:73:87:65:df:f1:64:ac:f6:45:
a8:f6:e9:78:35:54:53:56:f1:02:24:05:11:c4:75:4b:66:50:
62:50:e3:86:d9:61:7e:24:de:89:aa:3a:33:cd:c4:fa:28:68:
5d:eb:da:6e:2f:48:d4:ad:bd:5d:f8:4d:58:05:9f:94:dd:19:
13:f6:90:4a:af:37:1c:2b:e6:30:e5:98:36:09:5a:97:aa:7e:
93:8f:63:97:2f:cb:96:55:f3:8f:8d:63:62:3b:87:22:43:eb:
10:96:68:df:16:c5:ba:7e:40:4a:75:df:35:8c:f7:1d:df:6b:
15:0e:92:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:54:47 2025 by rpki-client