Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
File: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft (raw, json)
Hash identifier: Oi0bktG3Odh9xFxor0R9AZG43qkxRkz5+pPF96enJrs=
Subject key identifier: B5:FE:07:15:A4:B8:0C:20:47:43:B3:46:CE:70:B1:3A:E3:3A:D4:98
Authority key identifier: 06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
Certificate issuer: /CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Certificate serial: 0198D4727BFA6F4D301F4CE9E966CDDADD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
Manifest number: 131A
Signing time: Sat 23 Aug 2025 01:02:09 +0000
Manifest this update: Sat 23 Aug 2025 01:02:09 +0000
Manifest next update: Sun 24 Aug 2025 01:02:09 +0000
Files and hashes: 1: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl (hash: ehUbyT9DNd9Nt4vDzIqjLYbCfNBAf0n5zOE8Tcnwnn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:7b:fa:6f:4d:30:1f:4c:e9:e9:66:cd:da:dd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Validity
Not Before: Aug 23 01:02:09 2025 GMT
Not After : Aug 24 01:02:09 2025 GMT
Subject: CN=b5fe0715a4b80c204743b346ce70b13ae33ad498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:b5:05:5e:ce:07:b2:69:f2:c0:00:d1:fe:
72:90:cb:2d:6b:07:53:fc:37:bb:1b:6e:88:88:9c:
a1:59:14:fb:42:68:38:7c:a8:04:65:5a:92:de:68:
79:19:3b:ef:6b:bd:ae:25:89:8c:1a:52:0d:16:f9:
3a:8e:e2:a2:34:da:44:56:d9:17:61:51:34:25:6b:
ab:60:60:f6:34:62:71:50:92:50:57:83:61:2e:aa:
5f:c1:5b:12:3e:af:1d:1c:66:e4:1f:ea:de:a8:c2:
59:20:3b:6c:61:40:d4:07:d8:e0:8a:98:bc:1b:68:
ea:cc:83:69:00:cc:be:5f:a2:10:14:76:52:09:d0:
b0:86:2d:4b:70:db:72:5c:8d:ff:a3:85:53:77:d4:
9c:07:cc:ad:80:dc:33:3d:0e:fd:48:54:38:66:1d:
2c:80:f2:8b:10:03:55:8b:62:04:bc:5d:b3:22:a9:
5d:7a:e4:da:d5:fe:70:ba:f9:61:4d:fc:d1:ae:f5:
b3:91:3c:33:60:88:ae:07:7f:22:00:9c:5b:28:47:
93:18:a2:b8:7d:ee:23:8f:d9:ca:13:1b:b0:23:66:
b6:d5:1b:c6:95:c9:ea:97:77:03:9b:e2:20:61:62:
a8:90:46:af:ab:ab:91:fc:d3:b8:a4:fd:0e:c2:8f:
a8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FE:07:15:A4:B8:0C:20:47:43:B3:46:CE:70:B1:3A:E3:3A:D4:98
X509v3 Authority Key Identifier:
keyid:06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:8c:f0:50:37:60:98:33:94:23:fc:48:e6:70:c9:94:43:37:
e1:61:09:b5:40:b1:ec:dc:b6:f1:e8:89:2c:42:ee:50:01:b4:
ca:74:78:8b:4a:6b:43:8d:d3:2f:88:12:b1:08:8c:02:66:26:
33:a7:c9:ee:00:ab:06:59:b5:a1:af:23:db:39:fd:65:4a:7d:
5a:86:c6:4f:b1:2e:10:5d:22:f0:88:15:e8:69:4e:e7:3b:58:
c2:5f:f7:41:1d:c2:ad:cf:58:95:7b:97:cf:5f:ab:06:83:f6:
e9:2b:35:c9:8f:b0:97:ae:78:1b:43:e8:17:c4:72:ab:e8:d2:
b2:ed:cd:95:b6:89:29:e4:9e:8e:ad:c1:0f:03:ef:20:17:34:
ae:c1:48:f6:c0:ed:18:d7:8c:86:a2:1d:fe:f9:a0:a1:36:0c:
47:de:c9:50:f7:11:bb:99:23:1c:ca:40:8a:ed:e0:fa:31:5e:
ea:0e:0b:44:57:c2:0b:51:4f:d0:a0:13:e1:f9:83:62:4d:35:
f8:f9:67:c7:f9:e7:cb:0a:e9:ca:64:fb:ac:f8:85:2e:6b:85:
57:07:19:1a:ea:0b:1a:26:26:2a:be:00:29:18:a6:63:01:b7:
dc:85:76:45:6c:ec:7f:53:96:ee:3b:66:cb:ee:bb:6b:6e:1c:
9b:5b:a5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:46 2025 by rpki-client