Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
File: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft (raw, json)
Hash identifier: BRtu8Cdf1wOAKAAArx6WZe/5CgGVozV7kdXUacSgAKA=
Subject key identifier: D4:E1:C2:0B:12:9B:E2:F7:2F:15:02:F2:65:F0:5C:B6:97:1E:42:D0
Authority key identifier: 05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
Certificate issuer: /CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Certificate serial: 0197B88FE598269E1FF7919462A73E07103D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 22:02:07 +0000
Manifest this update: Sat 28 Jun 2025 22:02:07 +0000
Manifest next update: Sun 29 Jun 2025 22:02:07 +0000
Files and hashes: 1: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl (hash: E7xKvdzT3ZKZZwdPwP4gPjOB0EXhzJTDiByQFqgZmdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:e5:98:26:9e:1f:f7:91:94:62:a7:3e:07:10:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Validity
Not Before: Jun 28 22:02:07 2025 GMT
Not After : Jun 29 22:02:07 2025 GMT
Subject: CN=d4e1c20b129be2f72f1502f265f05cb6971e42d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:e9:b8:26:96:4c:63:b5:b5:7a:b1:59:d5:
2e:f5:4e:53:f4:e9:cb:e1:ee:04:9e:46:2b:5d:af:
30:81:8b:94:d3:1b:f9:97:b9:d8:ea:41:d6:38:65:
93:28:32:0a:dd:76:5c:b7:b6:e0:10:70:34:c6:13:
62:e4:7e:97:6f:67:3e:c6:5e:0b:35:4b:df:18:1f:
bd:14:8c:73:b4:89:8d:29:d0:67:e2:db:e1:c7:e1:
fe:6b:b4:f5:48:b2:58:34:44:1a:64:24:86:ce:2a:
ad:39:5e:f2:8d:65:66:12:8c:0c:ad:1e:17:64:01:
f7:85:3e:f1:99:44:5a:64:b0:84:8c:b8:be:2f:7e:
13:40:2a:78:fd:b1:38:8e:fb:a8:38:a6:79:ca:30:
cf:30:49:90:6d:a1:be:2b:27:16:3c:37:15:bf:92:
71:27:3c:4f:af:a7:39:b3:4b:44:7f:44:68:63:a1:
8e:3d:36:c8:ef:d5:ff:d2:e3:00:ea:68:37:e9:a0:
44:4f:bf:39:55:69:05:10:f4:2c:74:a0:39:4a:01:
2f:0a:f7:ad:f4:56:9f:2a:cf:d5:e4:6a:9c:1f:9c:
ec:4e:55:86:00:82:ff:d9:c5:13:ba:a7:13:1a:b1:
0a:c3:12:6e:73:5d:58:b9:76:21:92:7f:da:5f:63:
f4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E1:C2:0B:12:9B:E2:F7:2F:15:02:F2:65:F0:5C:B6:97:1E:42:D0
X509v3 Authority Key Identifier:
keyid:05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c9:1f:14:26:2c:08:50:2b:c6:48:44:10:23:c4:07:23:46:
9c:03:d1:b3:4f:cc:10:9c:d8:e6:d8:47:1d:8c:5a:6f:37:15:
57:12:d3:94:91:75:63:a4:86:4f:a4:93:9d:d0:76:b2:22:c2:
b6:72:6f:89:ce:65:a4:6c:6e:d3:b8:ba:ed:ad:d9:2c:44:8e:
9a:eb:2d:a7:f7:82:32:03:88:be:87:6f:fb:07:b6:8c:1b:55:
11:c6:58:8e:83:18:55:07:bb:76:fd:9e:a9:10:53:e8:c3:ab:
37:08:77:bc:19:3e:66:6a:c7:2d:7b:72:5f:48:78:77:29:d8:
a3:46:8c:40:21:2f:52:8d:a3:aa:12:7f:a0:fc:b6:c6:6b:d2:
8a:80:fa:81:5e:9d:2a:c9:77:5d:bc:e5:f6:fe:71:72:ac:8d:
97:64:6b:4b:29:fb:bd:02:ec:4e:55:a2:a9:3c:82:cf:ea:fc:
00:79:79:3a:de:1b:b8:ef:dd:26:77:c4:81:49:bd:ee:c9:cf:
4d:1f:16:05:c8:92:7d:a5:6c:f3:3b:19:ca:08:eb:65:90:02:
89:c8:d0:8e:bd:c3:a7:83:6b:dd:5c:da:9f:eb:d3:a9:54:20:
1a:37:2b:be:43:b8:dd:f5:db:75:a0:30:33:06:c7:af:61:9d:
99:37:78:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j+WYJp4f95GUYqc+BxA9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTNjNDMzZjZjMjI1MDE5ZDljYjVhNDMzMDAxMmY0Yzc3
YTFmM2UwHhcNMjUwNjI4MjIwMjA3WhcNMjUwNjI5MjIwMjA3WjAzMTEwLwYDVQQD
EyhkNGUxYzIwYjEyOWJlMmY3MmYxNTAyZjI2NWYwNWNiNjk3MWU0MmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdfpuCaWTGO1tXqxWdUu9U5T9OnL
4e4EnkYrXa8wgYuU0xv5l7nY6kHWOGWTKDIK3XZct7bgEHA0xhNi5H6Xb2c+xl4L
NUvfGB+9FIxztImNKdBn4tvhx+H+a7T1SLJYNEQaZCSGziqtOV7yjWVmEowMrR4X
ZAH3hT7xmURaZLCEjLi+L34TQCp4/bE4jvuoOKZ5yjDPMEmQbaG+KycWPDcVv5Jx
JzxPr6c5s0tEf0RoY6GOPTbI79X/0uMA6mg36aBET785VWkFEPQsdKA5SgEvCvet
9FafKs/V5GqcH5zsTlWGAIL/2cUTuqcTGrEKwxJuc11YuXYhkn/aX2P0EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNThwgsSm+L3LxUC8mXwXLaXHkLQMB8GA1UdIwQY
MBaAFAVTxDP2wiUBnZy1pDMAEvTHeh8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZQRU1fYkNKUUdkbkxXa013QVM5TWQ2SHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zMjRhOWQtY2YwNy00ZTcxLTgzYTEt
MTgyNTEyZjhiY2RlLzEvQlZQRU1fYkNKUUdkbkxXa013QVM5TWQ2SHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zMjRhOWQtY2YwNy00ZTcxLTgzYTEtMTgyNTEyZjhiY2Rl
LzEvQlZQRU1fYkNKUUdkbkxXa013QVM5TWQ2SHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8kfFCYs
CFArxkhEECPEByNGnAPRs0/MEJzY5thHHYxabzcVVxLTlJF1Y6SGT6STndB2siLC
tnJvic5lpGxu07i67a3ZLESOmustp/eCMgOIvodv+we2jBtVEcZYjoMYVQe7dv2e
qRBT6MOrNwh3vBk+ZmrHLXtyX0h4dynYo0aMQCEvUo2jqhJ/oPy2xmvSioD6gV6d
Ksl3Xbzl9v5xcqyNl2RrSyn7vQLsTlWiqTyCz+r8AHl5Ot4buO/dJnfEgUm97snP
TR8WBciSfaVs8zsZygjrZZACicjQjr3Dp4Nr3Vzan+vTqVQgGjcrvkO43fXbdaAw
MwbHr2GdmTd4pQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:14:39 2025 by rpki-client