Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
File: bmgcJW1nKYHLOc4lynjPIVz06qY.mft (raw, json)
Hash identifier: +QsDJ5k+cdw019yOI1CeJq3EYYaTJgLaAqq2q//BXa8=
Subject key identifier: B1:D2:69:FA:77:89:F3:0C:11:67:09:EE:9F:4C:05:1B:CF:31:F2:D2
Authority key identifier: 6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
Certificate issuer: /CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Certificate serial: 0198D4A7C895EA83B861DCCE2FB91F65CF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 02:00:22 +0000
Manifest this update: Sat 23 Aug 2025 02:00:22 +0000
Manifest next update: Sun 24 Aug 2025 02:00:22 +0000
Files and hashes: 1: bmgcJW1nKYHLOc4lynjPIVz06qY.crl (hash: c08Fo3MOe9BBWylR5cmwyqfd3XL2c76ix0xSmrWblIA=)
2: tvKD3UXqZVXDvVX7leTlMKw_qew.roa (hash: WK5XR30REtOfSSrTxnfQEhXv68zn6pJyCz3GjFrJURA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:c8:95:ea:83:b8:61:dc:ce:2f:b9:1f:65:cf:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Validity
Not Before: Aug 23 02:00:22 2025 GMT
Not After : Aug 24 02:00:22 2025 GMT
Subject: CN=b1d269fa7789f30c116709ee9f4c051bcf31f2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d3:79:8b:e5:0e:e8:26:48:c7:d8:a1:ae:f4:
cf:8e:09:57:2f:5a:a9:78:da:13:80:78:c6:70:45:
5a:12:0d:0a:3f:dc:b7:f0:4b:52:97:41:a3:75:1e:
30:55:86:15:81:cf:9f:14:41:af:39:63:ee:4a:ae:
bb:bf:fb:75:c1:51:b9:cc:14:d9:53:4d:7d:2c:01:
a4:3f:96:ca:7e:9f:8f:79:a3:4e:3e:b3:02:87:d0:
75:6c:f0:8a:09:d8:54:96:bd:b0:5a:8d:0f:ed:b4:
04:dd:ff:64:ef:10:e6:2e:bd:c0:45:e2:d3:a7:29:
7f:2a:c6:18:b5:55:cf:76:cc:75:27:d0:18:f1:b4:
cc:54:f4:1a:46:b1:2b:f5:e2:d1:72:3c:f9:74:38:
4a:7d:38:c1:62:96:a7:94:1b:46:87:80:d4:cd:c3:
18:85:47:db:36:51:40:23:0e:3a:c2:1e:00:06:c7:
59:97:bd:1b:b7:14:6f:82:d2:16:9b:a8:db:08:8e:
18:34:6a:c6:6a:24:1c:26:ed:a9:d0:02:61:39:5c:
85:b6:7c:fb:27:2b:a3:c3:86:43:e8:b1:cf:45:8f:
d4:73:e7:13:b3:c9:ef:f0:43:bb:43:51:cb:48:3c:
90:68:dd:49:7a:cf:18:e1:e5:a6:92:7d:e9:94:e6:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D2:69:FA:77:89:F3:0C:11:67:09:EE:9F:4C:05:1B:CF:31:F2:D2
X509v3 Authority Key Identifier:
keyid:6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6b:1a:bf:12:32:08:d3:95:1c:70:38:cd:32:87:55:f5:ee:
3c:95:4d:00:13:69:13:88:2b:9b:53:aa:ef:85:d5:76:a7:75:
c3:f2:3b:36:e5:ad:9e:9a:03:10:2a:fe:de:2d:a3:bf:92:f8:
ca:15:13:48:02:69:10:31:69:2f:20:48:0b:3b:eb:4c:8d:30:
74:8c:fc:69:85:be:2f:a2:b2:8b:8c:92:25:1c:cc:fd:a1:03:
49:d1:ac:52:03:65:0b:e2:c7:8d:48:5e:f3:67:2b:dc:c8:86:
64:23:e9:49:b9:84:53:64:7c:1a:23:ba:b2:b6:59:82:b1:2d:
e2:99:6d:c4:9d:b8:d8:f2:45:ca:17:69:f2:15:f9:fa:93:27:
6a:02:a2:1e:6f:58:a4:7f:91:8c:90:56:38:ab:cc:54:cf:50:
dd:cb:28:67:ac:93:ee:b4:99:86:53:cd:1f:07:59:76:ed:fc:
ad:89:13:55:87:d0:b4:d3:c4:b9:91:51:b5:da:91:a4:f5:21:
8c:96:33:1a:7c:aa:ce:07:b3:38:15:ab:e1:57:c0:0c:11:30:
57:f9:d6:25:67:61:05:85:63:1f:b5:da:f1:79:84:43:e8:74:
c4:e5:81:0e:ca:fa:ce:6d:8f:06:33:57:27:16:72:2b:f5:66:
e6:47:4f:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp8iV6oO4YdzOL7kfZc90MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNjgxYzI1NmQ2NzI5ODFjYjM5Y2UyNWNhNzhjZjIxNWNm
NGVhYTYwHhcNMjUwODIzMDIwMDIyWhcNMjUwODI0MDIwMDIyWjAzMTEwLwYDVQQD
EyhiMWQyNjlmYTc3ODlmMzBjMTE2NzA5ZWU5ZjRjMDUxYmNmMzFmMmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NN5i+UO6CZIx9ihrvTPjglXL1qp
eNoTgHjGcEVaEg0KP9y38EtSl0GjdR4wVYYVgc+fFEGvOWPuSq67v/t1wVG5zBTZ
U019LAGkP5bKfp+PeaNOPrMCh9B1bPCKCdhUlr2wWo0P7bQE3f9k7xDmLr3AReLT
pyl/KsYYtVXPdsx1J9AY8bTMVPQaRrEr9eLRcjz5dDhKfTjBYpanlBtGh4DUzcMY
hUfbNlFAIw46wh4ABsdZl70btxRvgtIWm6jbCI4YNGrGaiQcJu2p0AJhOVyFtnz7
Jyujw4ZD6LHPRY/Uc+cTs8nv8EO7Q1HLSDyQaN1Jes8Y4eWmkn3plOatpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHSafp3ifMMEWcJ7p9MBRvPMfLSMB8GA1UdIwQY
MBaAFG5oHCVtZymByznOJcp4zyFc9OqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm1nY0pXMW5LWUhMT2M0bHlualBJVnowNnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80OWU0OWEtOTg3ZS00NzQxLWFiYTkt
MzdhNTBjZGZhZTA3LzEvYm1nY0pXMW5LWUhMT2M0bHlualBJVnowNnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC80OWU0OWEtOTg3ZS00NzQxLWFiYTktMzdhNTBjZGZhZTA3
LzEvYm1nY0pXMW5LWUhMT2M0bHlualBJVnowNnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmsavxIy
CNOVHHA4zTKHVfXuPJVNABNpE4grm1Oq74XVdqd1w/I7NuWtnpoDECr+3i2jv5L4
yhUTSAJpEDFpLyBICzvrTI0wdIz8aYW+L6Kyi4ySJRzM/aEDSdGsUgNlC+LHjUhe
82cr3MiGZCPpSbmEU2R8GiO6srZZgrEt4pltxJ242PJFyhdp8hX5+pMnagKiHm9Y
pH+RjJBWOKvMVM9Q3csoZ6yT7rSZhlPNHwdZdu38rYkTVYfQtNPEuZFRtdqRpPUh
jJYzGnyqzgezOBWr4VfADBEwV/nWJWdhBYVjH7Xa8XmEQ+h0xOWBDsr6zm2PBjNX
JxZyK/Vm5kdPpw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:40 2025 by rpki-client