Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
File: bmvNHuBBUxK6utqWpbTHNRu8pr8.mft (raw, json)
Hash identifier: RC36TxTk+gt7BuYfBTUCWCkhMBtdHtAD9xS6dyCKP4k=
Subject key identifier: 59:E6:D3:FA:0F:BD:7F:5F:97:96:BC:50:96:99:B9:95:78:A4:C9:40
Authority key identifier: 6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
Certificate issuer: /CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Certificate serial: 019750EAC07665B3950E422505912CEC57F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 19:00:51 +0000
Manifest this update: Sun 08 Jun 2025 19:00:51 +0000
Manifest next update: Mon 09 Jun 2025 19:00:51 +0000
Files and hashes: 1: GI-i99kB9ZZSVKD8l02CbLd6aSk.roa (hash: MonsukLiwzJG84LeZGYkMxgIaza5E2jt6G/wnGkzXY8=)
2: bmvNHuBBUxK6utqWpbTHNRu8pr8.crl (hash: eUjqjVSnoZVuaiIX83o8QnNSo9emQ/LL3N/MVjxeZSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:c0:76:65:b3:95:0e:42:25:05:91:2c:ec:57:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Validity
Not Before: Jun 8 19:00:51 2025 GMT
Not After : Jun 9 19:00:51 2025 GMT
Subject: CN=59e6d3fa0fbd7f5f9796bc509699b99578a4c940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:b7:5a:d6:32:bb:7d:26:d1:93:b0:9a:59:
45:68:ec:60:03:b7:42:54:0d:71:c5:5e:72:f6:b5:
5b:ae:b6:58:fe:54:c3:69:63:9c:9a:fc:ca:54:2a:
8f:71:92:22:b5:e1:03:6b:db:31:a7:9c:b1:6d:d0:
4a:06:07:a5:68:47:48:cf:8a:73:6c:b3:6c:bb:00:
41:16:2b:84:73:dc:3f:eb:01:06:09:6e:c0:8f:a7:
9b:bc:b7:69:36:75:f2:42:f0:bc:2a:1d:8c:f8:af:
31:44:5a:0b:03:d0:e7:7d:19:01:b0:99:4e:a8:05:
6d:76:e8:b3:3e:d6:f1:f1:0b:fd:56:e9:74:a9:3d:
ac:02:19:7f:e4:05:34:1b:41:81:f6:5a:a9:b9:0e:
99:35:bf:32:65:3d:20:c7:12:87:c2:7b:f4:01:b3:
19:83:e8:22:fe:45:01:59:1b:7e:2b:88:35:64:f3:
2a:99:82:be:2d:6e:ef:28:aa:4b:d7:60:b0:3c:f7:
a4:e9:47:8b:0e:cb:a1:f3:16:2a:e4:f9:c3:9e:a1:
47:cd:94:13:fa:bd:fe:e5:31:47:a1:e3:39:08:32:
09:d7:85:c9:5c:a3:26:0b:e8:87:c0:9e:e4:fb:b5:
ad:7a:0c:cb:05:77:8b:5d:7c:a2:55:ae:01:4b:2d:
b0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E6:D3:FA:0F:BD:7F:5F:97:96:BC:50:96:99:B9:95:78:A4:C9:40
X509v3 Authority Key Identifier:
keyid:6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:97:19:b0:db:2e:be:f2:d8:43:15:e7:d7:91:cc:0a:2d:39:
6b:11:f7:22:ab:3c:be:0b:79:73:84:f8:eb:1d:f6:2d:bd:de:
34:be:8e:1a:5c:9e:62:06:fe:c3:31:11:8e:e9:95:15:cd:fe:
f5:9d:aa:31:73:a2:a7:70:ea:93:9e:78:04:6c:57:83:a9:f5:
e0:9e:01:db:2a:af:0e:4c:92:cb:84:fd:96:0f:56:2d:c6:b7:
98:e9:78:0d:f3:91:34:0b:5f:81:38:d5:65:fb:46:06:ca:a9:
6d:4c:87:91:ef:8b:cb:b9:a5:01:43:2c:49:b7:76:00:ef:db:
77:d0:96:02:eb:2e:d1:01:24:0a:80:85:cc:ce:2d:d1:98:7c:
f3:6e:96:71:6d:12:6b:74:69:12:7f:99:b9:12:a0:c8:73:46:
26:f9:47:4d:f9:95:82:4a:96:7d:42:6d:2e:ad:f5:2a:a3:05:
16:95:cf:20:b7:56:3e:1e:12:3b:d1:67:d0:8e:99:62:9f:c3:
25:86:bc:3f:b6:8f:16:ec:95:27:19:0a:0d:33:7a:3f:07:81:
ae:18:fd:de:5e:5a:af:30:eb:e3:78:a7:fa:ab:ae:b0:5c:81:
13:00:96:61:0d:d6:2d:09:81:ae:d9:f9:d4:a2:fd:7a:70:58:
e0:18:af:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:25:25 2025 by rpki-client