Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier: Zi65l+uyTOfUZ1T1z8xsKr1fBz6ggqh+ISsc5JQKgAU=
Subject key identifier: F4:F2:9A:6B:FF:0A:67:32:BC:54:48:C9:84:33:0D:A9:33:74:6A:90
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 01974AB1829861A044C021E656D6D72935E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number: 083A
Signing time: Sat 07 Jun 2025 14:00:36 +0000
Manifest this update: Sat 07 Jun 2025 14:00:36 +0000
Manifest next update: Sun 08 Jun 2025 14:00:36 +0000
Files and hashes: 1: 3kGa7kLBm042LbbqykHtZB7ufPc.roa (hash: w1pGOLasw4Pb62ELUrEIQqwR4u8hfryDi61TGvccVyw=)
2: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: r4QNR3dfrgrUQhbNN+Pd89Vihjlu5W5ZAWg5mcGoDDk=)
3: F6fQGiNxub0Asxw2Ftlalm35-sI.roa (hash: wYkSnnpKM5pfTpyfgZw3XQ3Jd7ZS+gOnc16p21qV1JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:82:98:61:a0:44:c0:21:e6:56:d6:d7:29:35:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Jun 7 14:00:36 2025 GMT
Not After : Jun 8 14:00:36 2025 GMT
Subject: CN=f4f29a6bff0a6732bc5448c984330da933746a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:96:4d:8a:2c:a4:cd:7d:f6:c1:67:88:87:
d1:0b:26:be:96:1b:1b:d8:eb:57:13:b0:b9:fd:a2:
a7:bb:ad:d6:6b:d8:88:3f:7b:71:cc:7e:01:a7:1a:
af:c7:8b:f8:cc:3e:07:37:95:42:d8:74:81:fc:68:
e0:7d:c1:ef:cf:29:b9:a0:61:83:c9:7d:c4:98:0e:
6c:75:07:27:54:04:c4:be:e6:7a:71:f3:b1:74:e9:
ee:20:66:36:5e:cc:fc:96:cc:88:20:78:f0:d9:7f:
a2:ff:f8:2d:31:86:32:e7:2f:ba:a9:a7:11:55:8e:
f8:e1:86:45:6a:ce:e6:6a:d7:cc:e0:86:aa:b0:82:
8a:a2:b2:d0:f3:20:a8:1a:18:c9:95:da:43:a3:3d:
21:2f:40:c6:18:67:37:c3:36:23:ae:f4:5f:02:f0:
dc:0d:f9:ec:ca:c1:4e:5e:6f:d1:c1:6c:1d:9a:ea:
36:79:d0:d8:ae:3e:9b:0a:78:3b:1a:03:d8:4e:26:
a1:a5:75:74:d3:20:98:bf:d3:3e:f0:60:a4:bd:79:
0b:1a:83:30:e9:50:83:62:3d:96:e6:fa:26:47:43:
8c:d3:90:76:08:42:63:b8:6a:50:9a:08:ea:3b:87:
8e:35:01:5a:29:5d:f6:28:fe:49:52:93:33:6c:93:
7e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F2:9A:6B:FF:0A:67:32:BC:54:48:C9:84:33:0D:A9:33:74:6A:90
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f3:14:59:ea:a8:4f:5c:cd:28:fb:16:82:58:53:03:62:cc:
24:c0:7f:d7:73:8b:a4:99:49:52:7c:6b:26:c2:15:48:13:36:
39:16:ad:1a:19:06:85:d0:d8:39:0f:b2:d7:d5:ba:4c:97:ac:
5e:0b:3a:1b:f4:da:29:c2:c8:cc:7f:0a:78:94:62:7c:f8:07:
a4:dd:53:17:8b:34:97:11:7e:38:4c:7a:ef:90:bc:24:9b:6a:
e7:d0:8c:1f:16:ac:2c:5b:d7:aa:51:d2:ae:76:89:b6:8c:cb:
41:cd:18:7c:ad:9e:ef:f9:53:2b:8b:e0:7e:1e:e6:37:31:ac:
75:77:ef:7d:cf:df:ec:f5:92:eb:2f:1d:2f:26:63:d0:e8:c5:
c6:07:61:d5:6f:c2:5c:64:e0:e2:04:7b:c6:eb:eb:52:c9:35:
14:3b:86:7a:c0:76:ed:a5:de:be:e3:3a:c3:3c:e9:a5:32:4c:
d4:a1:08:f9:ca:29:a0:56:c9:a1:35:7f:64:b2:71:43:8b:c6:
92:2c:75:78:33:59:0d:e2:38:99:41:82:c8:ce:c9:bb:ea:95:
06:04:c6:ff:8f:df:e2:6c:a2:0e:df:01:30:9c:ef:49:71:a6:
a1:7d:fb:55:70:f7:4c:1c:80:66:35:c5:4d:00:17:23:75:82:
de:21:df:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:13:07 2025 by rpki-client