Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
File: bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft (raw, json)
Hash identifier: iI5AufPHOhX5X1x4gnIm8WMrZwMUYpGM52Zmo+JsoVo=
Subject key identifier: 56:C3:D4:0B:7E:37:91:8C:68:D5:10:D4:4C:B9:72:4F:F3:3E:6A:77
Authority key identifier: 6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
Certificate issuer: /CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Certificate serial: 019921E7903AB424C4980166CBB46CE7176E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
Manifest number: 05BD
Signing time: Sun 07 Sep 2025 02:00:47 +0000
Manifest this update: Sun 07 Sep 2025 02:00:47 +0000
Manifest next update: Mon 08 Sep 2025 02:00:47 +0000
Files and hashes: 1: bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl (hash: ORMegJASnOEZlvicV5l8HKPeCJ4qMCaWkNlGTDR41Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:90:3a:b4:24:c4:98:01:66:cb:b4:6c:e7:17:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Validity
Not Before: Sep 7 02:00:47 2025 GMT
Not After : Sep 8 02:00:47 2025 GMT
Subject: CN=56c3d40b7e37918c68d510d44cb9724ff33e6a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:69:40:ac:2f:bf:ef:a0:dd:35:69:89:bd:2b:
b1:f7:2f:6d:97:a2:80:0d:5d:c1:f4:8b:a1:ef:17:
51:fd:97:4a:da:21:ca:8c:26:88:83:c3:49:95:02:
1d:d0:c4:ff:01:14:62:f0:bd:d6:21:c8:eb:5c:60:
11:51:3d:38:2c:e8:54:dd:ff:36:ce:33:16:e9:76:
dc:57:2f:06:e4:fa:92:48:75:1e:ed:a9:48:c3:95:
bf:6d:6b:63:83:16:0d:36:05:bf:41:cb:ef:ed:3e:
e1:14:a9:9e:76:28:90:7a:47:ea:8b:9c:57:18:46:
81:18:46:d2:b8:0f:65:80:8d:20:83:10:96:6e:ee:
c2:f4:6d:d9:d4:49:a6:97:98:8d:31:3f:0b:c2:86:
29:a1:0a:44:30:e5:1b:13:78:59:75:d5:fb:66:46:
2f:59:a8:d6:ed:79:43:65:78:b7:9f:95:64:40:2e:
0d:f0:78:92:fe:4b:a7:dd:17:a3:8f:f4:8c:39:65:
87:87:3d:49:d5:c6:95:f5:85:e2:c0:1b:ee:b1:4d:
b7:64:4c:cd:1f:a9:5d:bc:44:3a:21:78:a0:9a:69:
e2:88:71:60:20:2f:63:54:a4:6f:2c:6e:5e:e7:ef:
7b:42:75:8f:d9:06:5d:a7:5c:01:ce:eb:45:a0:fb:
24:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C3:D4:0B:7E:37:91:8C:68:D5:10:D4:4C:B9:72:4F:F3:3E:6A:77
X509v3 Authority Key Identifier:
keyid:6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:74:e0:c6:aa:ff:9e:25:c9:62:4a:5e:49:4b:8f:c6:6e:75:
28:98:fb:ce:ef:33:7f:17:c4:20:04:3f:c5:c8:28:b8:33:7a:
07:e9:9a:cb:cd:91:68:10:25:20:e3:f1:15:01:3e:d7:fa:03:
e8:ce:0d:4e:c8:e2:d6:a0:d2:43:db:63:4a:67:b5:c7:0a:8b:
0f:fc:08:1c:88:b0:d5:12:2b:ca:da:e6:51:56:de:d8:14:f0:
63:0f:88:3b:58:a0:64:f6:8a:b9:05:08:91:8d:f5:40:ae:d8:
79:ce:73:73:8d:3e:50:e9:7d:1a:c1:95:eb:82:68:c1:66:24:
90:09:53:b4:c8:16:ab:39:86:dd:06:b8:b5:38:d6:73:ba:30:
64:15:04:4e:53:ce:8e:8b:32:81:b6:2a:6b:3d:11:56:b9:bd:
b2:53:5e:54:27:fb:20:22:8d:24:be:06:00:f6:e6:eb:e0:bc:
35:8a:01:fe:e9:3b:1d:bc:55:7b:6c:c7:b3:fb:d8:84:8f:35:
06:1b:62:6d:e0:bb:96:7f:98:d6:a8:00:88:4d:66:a6:74:27:
ec:99:34:64:d8:b4:6b:43:2d:43:cb:43:92:6e:6d:0e:3e:4e:
68:53:15:3d:0b:51:0a:e2:96:59:f1:4e:4b:72:91:37:39:89:
e4:49:b8:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh55A6tCTEmAFmy7Rs5xduMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNjhjMWI5MGU0NWY5MWJhYjhkNjA3ODhlZWQyNWNiNGEw
MTBmZTgwHhcNMjUwOTA3MDIwMDQ3WhcNMjUwOTA4MDIwMDQ3WjAzMTEwLwYDVQQD
Eyg1NmMzZDQwYjdlMzc5MThjNjhkNTEwZDQ0Y2I5NzI0ZmYzM2U2YTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGlArC+/76DdNWmJvSux9y9tl6KA
DV3B9Iuh7xdR/ZdK2iHKjCaIg8NJlQId0MT/ARRi8L3WIcjrXGARUT04LOhU3f82
zjMW6XbcVy8G5PqSSHUe7alIw5W/bWtjgxYNNgW/Qcvv7T7hFKmediiQekfqi5xX
GEaBGEbSuA9lgI0ggxCWbu7C9G3Z1Emml5iNMT8LwoYpoQpEMOUbE3hZddX7ZkYv
WajW7XlDZXi3n5VkQC4N8HiS/kun3Rejj/SMOWWHhz1J1caV9YXiwBvusU23ZEzN
H6ldvEQ6IXigmmniiHFgIC9jVKRvLG5e5+97QnWP2QZdp1wBzutFoPsk1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbD1At+N5GMaNUQ1Ey5ck/zPmp3MB8GA1UdIwQY
MBaAFG5owbkORfkbq41geI7tJctKAQ/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm1qQnVRNUYtUnVyaldCNGp1MGx5MG9CRC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmFjYTEtZjU1Ny00MTA0LWI1ZmEt
MTc0MDYzMGZjYzQ1LzEvYm1qQnVRNUYtUnVyaldCNGp1MGx5MG9CRC1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmFjYTEtZjU1Ny00MTA0LWI1ZmEtMTc0MDYzMGZjYzQ1
LzEvYm1qQnVRNUYtUnVyaldCNGp1MGx5MG9CRC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3Tgxqr/
niXJYkpeSUuPxm51KJj7zu8zfxfEIAQ/xcgouDN6B+may82RaBAlIOPxFQE+1/oD
6M4NTsji1qDSQ9tjSme1xwqLD/wIHIiw1RIrytrmUVbe2BTwYw+IO1igZPaKuQUI
kY31QK7Yec5zc40+UOl9GsGV64JowWYkkAlTtMgWqzmG3Qa4tTjWc7owZBUETlPO
josygbYqaz0RVrm9slNeVCf7ICKNJL4GAPbm6+C8NYoB/uk7HbxVe2zHs/vYhI81
BhtibeC7ln+Y1qgAiE1mpnQn7Jk0ZNi0a0MtQ8tDkm5tDj5OaFMVPQtRCuKWWfFO
S3KRNzmJ5Em4Wg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:01 2025 by rpki-client