Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
File: bmvNHuBBUxK6utqWpbTHNRu8pr8.mft (raw, json)
Hash identifier: KJVea8ljeXkvmpD6hAAJ8GozlzSQ9QMn7sDj0ur/xIo=
Subject key identifier: 01:75:E3:BC:83:D7:BA:FC:4C:05:6B:EC:6D:25:39:DD:D6:24:FB:DD
Authority key identifier: 6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
Certificate issuer: /CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Certificate serial: 01992255307EB966F1B448BE0B0293D3D083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 04:00:32 +0000
Manifest this update: Sun 07 Sep 2025 04:00:32 +0000
Manifest next update: Mon 08 Sep 2025 04:00:32 +0000
Files and hashes: 1: GI-i99kB9ZZSVKD8l02CbLd6aSk.roa (hash: MonsukLiwzJG84LeZGYkMxgIaza5E2jt6G/wnGkzXY8=)
2: bmvNHuBBUxK6utqWpbTHNRu8pr8.crl (hash: MNpQ1xiKep7oFgzL12bqmjnzm4orf5A2eouhhfmOXbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:30:7e:b9:66:f1:b4:48:be:0b:02:93:d3:d0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Validity
Not Before: Sep 7 04:00:32 2025 GMT
Not After : Sep 8 04:00:32 2025 GMT
Subject: CN=0175e3bc83d7bafc4c056bec6d2539ddd624fbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:f4:5b:f1:7a:e5:6c:3c:88:3b:7b:9d:4b:
57:92:8f:d6:15:c7:c8:57:f9:ed:d5:25:fb:72:1d:
bd:25:0c:b8:64:ef:0c:e9:a4:69:50:54:5f:fe:9f:
8b:ca:f3:ec:fe:a7:48:af:5e:70:dc:77:e9:37:ba:
68:bd:07:3d:5e:c7:aa:b4:5a:fd:c5:04:6d:e6:e1:
e6:8e:9a:cb:55:2d:af:78:5f:48:65:2e:36:68:10:
e4:56:e6:86:c5:20:ff:b3:ad:ef:fa:6a:c9:92:39:
24:f4:aa:af:e3:11:11:2c:71:d9:2e:88:1c:8c:7c:
ae:35:79:f9:8e:8c:4c:74:10:1c:47:56:bc:d0:05:
f1:96:5e:ce:f6:20:ef:f4:dd:5a:a5:e2:ca:ff:d3:
13:07:ee:c7:b5:d8:7c:40:cf:4b:00:c5:f9:6e:5f:
75:a4:5c:35:34:2e:b7:bc:31:7f:ee:cc:e9:f0:0d:
98:b7:d4:9d:c5:6e:d9:89:dc:7b:24:69:4a:4c:4b:
de:0a:2b:50:7d:c7:bb:c3:54:34:89:49:f2:9c:96:
8c:50:e2:16:f7:4d:e2:1e:90:29:a3:37:3c:50:c8:
e6:5a:04:e9:07:da:1f:8b:e0:68:57:7e:0f:60:28:
4c:cd:f1:66:93:cc:5d:84:46:ef:c8:61:cc:b3:8b:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:75:E3:BC:83:D7:BA:FC:4C:05:6B:EC:6D:25:39:DD:D6:24:FB:DD
X509v3 Authority Key Identifier:
keyid:6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:78:e6:3c:8a:ac:6c:a6:7d:d0:d3:16:61:d6:4d:01:95:d6:
55:b0:ae:fd:b4:e2:05:52:45:6c:1b:90:0d:e8:2c:7c:14:50:
52:96:77:10:00:c5:ce:dd:01:11:5a:0a:e7:30:c1:0e:95:2d:
5d:63:a5:7e:ec:5a:45:00:3f:2d:1d:cd:04:6a:48:db:57:74:
5e:e1:a0:b1:fe:24:7c:72:b4:2b:d5:54:ed:9c:71:09:b5:e9:
e2:01:88:c0:60:de:58:01:55:74:64:d9:62:47:f1:b1:7d:42:
a9:20:03:fd:e9:03:8d:5d:f9:b5:24:3c:ca:1a:a8:f9:ef:f6:
c0:b9:a3:53:24:99:8a:98:4e:04:ff:0c:f6:6a:4c:7c:4c:88:
4f:b7:34:15:b6:0e:d0:a2:92:4e:e8:83:0d:d1:27:64:d4:2a:
3f:0a:9c:fd:d4:d2:b8:bf:bb:4f:45:f9:c9:3a:33:bb:7c:85:
f2:12:93:aa:27:5b:34:6d:4e:95:f2:cb:31:a8:08:35:75:26:
47:ab:9d:44:8e:c9:fb:10:5e:0c:0b:b3:e3:70:d0:b7:55:26:
8e:e6:85:94:e9:35:9d:5d:54:49:1e:f9:99:30:25:d1:59:06:
e4:64:f8:9e:4b:76:04:4f:50:28:29:10:7a:53:96:4f:b2:05:
d1:4f:90:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:27 2025 by rpki-client