Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
File: bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json)
Hash identifier: 5XMjhSJhfYjrwF5djFbCC46gt4M8yQqHcPGNjx+0wto=
Subject key identifier: 97:D4:3D:74:D0:C2:2C:9A:F3:30:66:5F:9D:DF:59:E2:73:E8:97:39
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial: 0198CB017975ADACD9DA990BC6154665D582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
Manifest number: 1659
Signing time: Thu 21 Aug 2025 05:02:08 +0000
Manifest this update: Thu 21 Aug 2025 05:02:08 +0000
Manifest next update: Fri 22 Aug 2025 05:02:08 +0000
Files and hashes: 1: GZloKAlNjoz3XqCPEm1hG7NatS4.roa (hash: 8eh4qVR8sPOLuprIgQpWCtpZheryazvSABEayh5f4b8=)
2: TtsJ_9irph6KMpr-0Unxq5mv0Pk.roa (hash: KdfI5XrAnT/kZVbthzfs9Tp5F0pVhQnXMy58T6F38qY=)
3: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: Vyl89c42bpENFbQ599CpHcQaXb6w8BQ+RgM/dBoMkXg=)
4: cVraBUUra2Aou2ZqOsBWw8nPl8I.roa (hash: 642iWL4+wWJYBDGiG624LzZO3fZuvIsSU+MyXY6PqjM=)
5: eSp8AI1UZ1ZHG1u2BcfDkkpePCM.roa (hash: wRG3Lif+KDOdrPbOSFcdJXTCfp36yCqfMsVM+rFpRi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 05:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:01:79:75:ad:ac:d9:da:99:0b:c6:15:46:65:d5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Validity
Not Before: Aug 21 05:02:08 2025 GMT
Not After : Aug 22 05:02:08 2025 GMT
Subject: CN=97d43d74d0c22c9af330665f9ddf59e273e89739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:45:0b:de:0b:56:91:a0:95:7b:58:ad:41:49:
31:b2:85:70:d9:76:1a:99:e9:71:81:1b:e7:9d:95:
96:83:24:33:cc:5d:ed:8e:31:82:a6:15:ff:75:a5:
45:cd:18:20:92:27:5f:57:c1:10:d8:c2:35:93:88:
1c:77:0a:31:18:d4:22:fc:d0:56:7d:d3:9c:b6:dc:
b0:9f:05:df:d1:8e:ec:07:2e:31:6f:13:02:b0:e1:
59:76:5a:d3:81:b9:4c:3d:9e:c0:b0:a4:ea:e5:da:
26:2f:af:fa:55:64:a9:b2:27:d7:49:dc:4f:6d:76:
56:54:9d:a2:f7:69:46:c8:f9:c7:9b:f8:a1:a6:dc:
5c:4f:12:aa:18:4a:f6:4d:bf:d4:02:61:8d:96:cc:
1c:a0:60:6d:48:e1:93:18:6d:5e:23:95:ec:17:87:
31:fd:96:49:39:f0:15:71:e5:79:f3:03:51:21:83:
e9:2b:59:2c:77:e9:a1:ce:ad:00:38:a0:2c:8a:9d:
f9:e6:e0:0b:c0:e9:0f:cd:f5:67:aa:e9:17:c7:94:
b6:36:08:27:23:38:1c:a7:6a:f3:69:db:8f:43:ea:
db:d3:48:63:59:c9:f5:b5:e2:cc:8b:ec:d4:cb:dd:
01:6b:34:53:81:a9:25:56:12:c0:2e:52:38:1d:91:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D4:3D:74:D0:C2:2C:9A:F3:30:66:5F:9D:DF:59:E2:73:E8:97:39
X509v3 Authority Key Identifier:
keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:40:7b:4b:72:67:56:d7:a9:c1:d1:6a:a6:7a:e9:e7:2f:c9:
35:e1:e3:97:bd:25:6a:41:60:e2:2f:1c:0d:c2:6d:99:77:68:
4c:f2:02:ba:c1:6a:ed:c5:b7:4f:a9:d2:16:91:d0:75:45:95:
2f:be:ed:90:dc:47:d2:a3:b7:8c:69:4b:1e:a7:19:59:23:7c:
02:d8:24:fa:15:9e:0f:4b:36:b2:47:0c:ea:b0:ba:b5:c3:e9:
13:53:62:6a:67:0e:c6:63:e6:6c:70:8c:cd:f8:4a:4c:7c:04:
3f:83:1c:10:94:f6:85:ba:51:b4:e6:48:fc:63:b5:52:aa:2a:
e4:af:73:8a:9c:ec:27:16:e0:01:41:a5:27:b6:0d:a8:f6:a1:
b8:77:de:db:46:c6:85:80:11:ef:7e:7e:6c:1b:43:17:31:92:
0c:35:03:30:b8:37:f8:a8:0a:12:60:c8:ff:67:0c:1c:03:fc:
c8:10:67:0f:8b:69:71:52:24:d3:7a:89:15:6b:94:2e:61:63:
f2:32:04:47:ce:af:f5:96:0c:9b:17:ce:07:d8:7d:d4:f3:02:
b5:11:bf:14:4a:e1:21:26:56:5a:95:b3:33:b6:65:7a:bc:3c:
0d:8b:e8:21:bf:e6:70:62:33:8e:83:c6:b2:98:6f:34:ce:ca:
2b:d5:01:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjLAXl1razZ2pkLxhVGZdWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNmQ3YmNhYmZjYzMwOGQ0MjAwNTNjNDgyYTBkNTlmYjEy
ODJlMzAwHhcNMjUwODIxMDUwMjA4WhcNMjUwODIyMDUwMjA4WjAzMTEwLwYDVQQD
Eyg5N2Q0M2Q3NGQwYzIyYzlhZjMzMDY2NWY5ZGRmNTllMjczZTg5NzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUUL3gtWkaCVe1itQUkxsoVw2XYa
melxgRvnnZWWgyQzzF3tjjGCphX/daVFzRggkidfV8EQ2MI1k4gcdwoxGNQi/NBW
fdOcttywnwXf0Y7sBy4xbxMCsOFZdlrTgblMPZ7AsKTq5domL6/6VWSpsifXSdxP
bXZWVJ2i92lGyPnHm/ihptxcTxKqGEr2Tb/UAmGNlswcoGBtSOGTGG1eI5XsF4cx
/ZZJOfAVceV58wNRIYPpK1ksd+mhzq0AOKAsip355uALwOkPzfVnqukXx5S2Nggn
Izgcp2rzaduPQ+rb00hjWcn1teLMi+zUy90BazRTgaklVhLALlI4HZEAMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfUPXTQwiya8zBmX53fWeJz6Jc5MB8GA1UdIwQY
MBaAFG5te8q/zDCNQgBTxIKg1Z+xKC4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDIt
OTMxOTRlYjYxMDhkLzEvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDItOTMxOTRlYjYxMDhk
LzEvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUB7S3Jn
VtepwdFqpnrp5y/JNeHjl70lakFg4i8cDcJtmXdoTPICusFq7cW3T6nSFpHQdUWV
L77tkNxH0qO3jGlLHqcZWSN8Atgk+hWeD0s2skcM6rC6tcPpE1NiamcOxmPmbHCM
zfhKTHwEP4McEJT2hbpRtOZI/GO1Uqoq5K9zipzsJxbgAUGlJ7YNqPahuHfe20bG
hYAR735+bBtDFzGSDDUDMLg3+KgKEmDI/2cMHAP8yBBnD4tpcVIk03qJFWuULmFj
8jIER86v9ZYMmxfOB9h91PMCtRG/FErhISZWWpWzM7Zlerw8DYvoIb/mcGIzjoPG
sphvNM7KK9UBSA==
-----END CERTIFICATE-----
Generated at Thu Aug 21 15:39:15 2025 by rpki-client