Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: AT7zFpO+ns6dERw7faKhXezX2620qFh8noOwpf6g6AA=
Subject key identifier: EB:DE:10:21:9A:43:F8:29:48:F6:75:B9:A8:2D:ED:64:74:A6:CA:3A
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 01974B1FC9B67E00EB7706F5DF964104DF99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 16:01:03 +0000
Manifest this update: Sat 07 Jun 2025 16:01:03 +0000
Manifest next update: Sun 08 Jun 2025 16:01:03 +0000
Files and hashes: 1: 2GrFuxyxyHkqumdayYRyftHOCCA.roa (hash: 58WfiupeF7jv1/JuV3+ZtSw5ZmglbAvhKCWRK1cfUPw=)
2: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: 6czjM1DAISA7B1zosAFpTPw0DFF2QwHLa+uL8zNlf8Q=)
3: EFrmvdYAVAISDnJyY9LHHEwKIkE.roa (hash: VVoG4KmLy8MCQlXZBg6STGy/fzjISq/IYVzwvcg57xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:c9:b6:7e:00:eb:77:06:f5:df:96:41:04:df:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Jun 7 16:01:03 2025 GMT
Not After : Jun 8 16:01:03 2025 GMT
Subject: CN=ebde10219a43f82948f675b9a82ded6474a6ca3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:5a:c9:47:02:89:04:cc:c2:aa:71:1a:10:
93:0d:06:43:9a:d4:aa:f4:fc:d2:08:91:61:78:a8:
a3:99:b6:d9:26:0a:1b:2d:1b:04:38:52:1d:4f:85:
5c:47:94:05:ab:96:70:7a:84:06:21:6f:13:c8:60:
3e:ee:63:37:11:60:ed:02:df:cd:ed:0f:5d:f0:53:
67:5f:97:49:98:53:9d:85:85:d4:99:79:e8:36:a2:
eb:f5:fe:85:4f:a6:30:e1:94:d6:0e:12:71:0a:d0:
d2:dd:30:e9:a8:be:1d:47:91:48:a1:86:85:50:82:
62:ed:ce:b3:18:cf:48:dd:c3:aa:7f:69:9c:dc:e8:
92:5c:24:c6:50:e6:ac:e9:b7:02:41:b0:43:00:8e:
4c:13:6f:cc:31:14:b8:dc:3d:fb:22:5e:af:03:87:
aa:59:4c:e8:60:c1:f9:ba:cf:23:06:be:38:06:84:
67:a3:7f:1f:b6:1e:58:e6:ea:c7:9b:32:c1:ef:80:
1d:8e:4c:b1:01:1f:13:cc:8b:6e:1f:b8:a1:cb:ef:
ff:f2:35:44:7c:0b:d8:e8:80:4b:f6:c7:36:7b:04:
9d:2c:8b:32:c0:cb:f8:e3:61:c0:11:a5:11:e2:65:
8e:b7:dc:eb:56:2d:2d:78:14:0c:f5:9e:2b:68:9c:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DE:10:21:9A:43:F8:29:48:F6:75:B9:A8:2D:ED:64:74:A6:CA:3A
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:98:2e:c5:34:f6:d9:b8:fc:65:0f:6c:75:cc:b6:eb:13:0a:
18:9a:9d:82:e3:76:43:02:9b:10:a2:6a:a1:f5:e8:b2:64:10:
07:48:50:af:3c:ae:cc:32:56:dd:66:22:6f:09:2a:ec:8b:05:
0e:09:65:18:dd:2f:9b:8f:40:34:a5:e4:bd:bf:dd:91:92:fb:
8a:98:42:f5:a0:c7:68:63:a1:88:82:b5:1f:cf:2e:6e:cd:f7:
fc:ab:b8:ce:21:d8:6d:9e:75:d4:ba:9b:12:a2:86:6e:f6:2a:
2e:d2:d6:d9:ee:82:1f:04:ff:0f:0a:93:9d:0f:8f:8e:cf:ec:
c7:d0:40:11:41:76:2a:da:15:46:22:4f:1b:8e:77:da:61:4e:
1e:7a:08:75:59:ab:83:a5:7f:64:e5:39:14:a2:21:a5:bc:50:
6f:51:f9:76:13:f0:c0:a4:93:ab:fe:a0:58:52:6d:b4:93:f5:
f2:ff:69:c2:0b:fa:57:b3:0c:3a:52:fc:23:14:71:3f:71:9e:
88:8e:a1:50:48:d4:2f:ee:41:4e:90:0c:35:ce:33:3d:12:9e:
dc:6f:a7:43:e8:cf:36:f7:3e:8f:e2:48:69:46:89:b1:60:c5:
58:8c:7c:c9:65:6e:15:48:94:11:81:1d:a0:18:e2:bc:32:9d:
a7:50:6c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:10:23 2025 by rpki-client