Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
File: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft (raw, json)
Hash identifier: X8Nl3ALDyP+7lpVA3j9+wl7wQIPjirZOgNZcy25tyPs=
Subject key identifier: C1:D6:29:C1:BD:69:6A:8D:39:73:07:F2:09:38:DC:84:77:5F:0D:EC
Authority key identifier: 05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
Certificate issuer: /CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Certificate serial: 0198D65F6160D346B98677A3956A1ED6557A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:00:31 +0000
Manifest this update: Sat 23 Aug 2025 10:00:31 +0000
Manifest next update: Sun 24 Aug 2025 10:00:31 +0000
Files and hashes: 1: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl (hash: eaO1kq1AHVhis2eY0yArx7NTFAtlyx5YPVjm67U5kzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:61:60:d3:46:b9:86:77:a3:95:6a:1e:d6:55:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Validity
Not Before: Aug 23 10:00:31 2025 GMT
Not After : Aug 24 10:00:31 2025 GMT
Subject: CN=c1d629c1bd696a8d397307f20938dc84775f0dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:02:a2:a9:2d:eb:ff:ea:fb:b6:70:9c:44:8a:
50:1a:da:a6:99:90:1f:3e:cd:cc:f0:65:e0:50:ad:
cc:da:ad:7d:b6:a8:f0:24:17:6b:1d:52:15:94:52:
15:67:bd:12:a8:23:0e:f9:88:fa:eb:9c:71:ab:3d:
f2:85:98:3b:14:e6:a0:e0:f5:f8:7e:74:98:60:1c:
27:bf:ec:a7:5e:bf:97:0d:23:64:6f:ed:61:77:17:
2f:54:e7:0f:40:c3:99:ea:a6:91:c1:48:e6:e1:53:
29:38:d6:9d:be:a5:37:d9:c5:e8:03:c3:92:0b:22:
52:ab:1f:2f:5e:6e:da:27:07:a3:a2:c3:f6:6d:39:
57:72:f1:ea:98:cd:f7:7a:57:a4:32:fb:96:1b:5f:
0e:dc:b8:24:2f:05:09:c6:d7:a7:58:2d:f7:9d:d6:
40:de:e3:82:4f:5e:5d:c9:73:56:44:0d:a4:1e:b1:
14:b1:33:76:98:e9:7a:11:fd:1d:65:1d:f2:78:73:
75:59:5d:6b:af:59:1e:67:0a:3e:78:b3:51:42:d7:
77:8c:43:8b:cd:81:af:bd:0d:8e:e4:61:2f:9c:c2:
d4:4b:dd:68:34:f4:0e:ce:85:db:7b:3e:de:e1:f1:
f7:e8:5a:77:3c:9a:73:8d:ae:79:a4:7b:09:95:cb:
6a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D6:29:C1:BD:69:6A:8D:39:73:07:F2:09:38:DC:84:77:5F:0D:EC
X509v3 Authority Key Identifier:
keyid:05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:aa:11:0e:38:ab:20:88:56:e7:62:88:bf:ef:f7:3e:f3:6b:
4b:61:45:78:e9:23:76:25:a9:9d:ec:ab:6d:f1:e3:92:43:a0:
13:26:fd:7d:75:64:e4:de:bc:0a:74:2b:48:66:a8:3c:11:3d:
0a:2b:47:f3:66:2c:36:b5:f4:00:19:e6:1f:eb:ef:d4:15:04:
67:12:51:66:64:d7:b6:22:b3:a5:8a:3d:b2:99:d9:64:4b:c9:
96:ed:2d:5c:93:a7:8f:81:d4:07:92:b8:dd:47:4a:73:85:a7:
ba:78:c0:bf:7e:8e:71:b4:1d:6d:35:03:5d:9f:a3:f1:f6:57:
d7:44:74:be:95:0a:4f:a0:4f:9e:ac:6c:93:ce:59:c1:42:f8:
f2:99:a2:40:43:e4:e1:8d:05:9d:71:1d:28:1f:a2:31:38:46:
93:93:98:0c:9d:6f:a5:5d:81:a9:8e:12:5e:93:28:c7:fe:77:
92:b9:6d:fd:04:09:40:e8:25:fe:85:ef:bd:b8:3e:92:a0:6b:
f4:5f:2b:52:f5:a5:c6:36:74:5c:0b:72:f8:b8:36:68:b4:00:
6e:f7:7a:8e:1c:1c:04:e5:3c:e9:25:47:b6:6d:21:e3:e2:90:
d7:6c:c1:3b:31:3f:1e:1f:88:9e:31:5d:e1:59:2e:1f:74:71:
d0:29:f3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:37:17 2025 by rpki-client