Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier: dcgFsTDJwW1Qpb+H0QecoyI/y+Mt0jrcIuRLEBNB8R0=
Subject key identifier: 39:3C:B7:76:77:73:8F:09:02:88:47:EA:CA:E0:62:65:40:74:6A:50
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 0197BCA2959817113EB0F6F40E387A249BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number: 0875
Signing time: Sun 29 Jun 2025 17:01:00 +0000
Manifest this update: Sun 29 Jun 2025 17:01:00 +0000
Manifest next update: Mon 30 Jun 2025 17:01:00 +0000
Files and hashes: 1: 3kGa7kLBm042LbbqykHtZB7ufPc.roa (hash: w1pGOLasw4Pb62ELUrEIQqwR4u8hfryDi61TGvccVyw=)
2: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: WI6P7nnBg5/UgO/plK30eOT81VUPm/iXOq+9CseBKWM=)
3: F6fQGiNxub0Asxw2Ftlalm35-sI.roa (hash: wYkSnnpKM5pfTpyfgZw3XQ3Jd7ZS+gOnc16p21qV1JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bc:a2:95:98:17:11:3e:b0:f6:f4:0e:38:7a:24:9b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Jun 29 17:01:00 2025 GMT
Not After : Jun 30 17:01:00 2025 GMT
Subject: CN=393cb77677738f09028847eacae0626540746a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:41:9d:f0:1a:a8:d8:3b:fd:29:63:25:77:
40:ab:0a:5b:5d:76:cd:67:cf:a0:a8:de:cc:52:d5:
41:d5:83:e8:dc:07:ed:35:92:0d:26:63:68:db:c0:
70:ce:6d:56:62:83:98:cb:c1:b9:c8:8f:f8:b8:e8:
9b:70:5b:59:4f:f6:b4:3e:f6:d2:7d:ef:a3:ca:49:
ed:c1:e9:7c:be:de:43:44:bf:2d:d7:0e:ab:a9:65:
64:a0:1d:f2:06:a6:e8:7d:6a:3f:93:a9:cf:c8:fe:
a9:8b:3c:3e:6e:85:4e:32:8e:db:0c:3a:ed:a2:ed:
87:2e:8d:08:05:cf:f2:4b:7a:7a:ea:b9:ab:fc:d1:
28:02:3b:63:21:8b:b7:30:65:d9:d3:f8:6d:b1:b3:
e1:3a:9f:c9:dc:ac:da:80:51:33:7b:ba:3b:08:e4:
77:9a:ed:2b:6c:fe:67:ae:0e:1b:8b:17:33:61:af:
77:1e:80:cc:fb:57:a2:05:2c:6f:8c:27:5b:39:e6:
b3:34:eb:b3:4e:bc:a6:93:fa:ae:cf:f2:7b:91:14:
b1:63:40:58:38:c8:00:5c:57:60:34:6c:22:85:3f:
2e:66:51:e7:1a:c2:e6:b7:7e:42:68:a7:a1:f6:a5:
dd:e1:2c:99:82:17:6a:d2:cd:04:22:2b:1d:24:d0:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3C:B7:76:77:73:8F:09:02:88:47:EA:CA:E0:62:65:40:74:6A:50
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:59:d8:a9:d5:9b:37:6a:4c:40:c3:92:74:4e:b7:a8:be:8c:
68:94:63:6b:ea:b0:6a:b5:62:df:d2:4e:74:2b:96:80:04:27:
61:76:08:60:d5:75:96:9c:3a:3b:75:02:15:51:ad:60:5c:9e:
18:3c:67:96:97:87:9c:3d:c0:6f:36:16:62:c3:e8:81:51:2c:
40:a9:11:bd:2d:18:bc:f4:3f:af:12:30:88:2b:1b:42:5b:10:
e0:6b:4d:23:46:3b:4d:1d:e6:b3:31:8f:01:b2:bc:28:18:53:
51:fd:21:21:a4:be:b6:df:a1:f3:6f:73:fd:2f:bb:37:0f:01:
53:6b:11:2a:ae:66:62:0a:e2:c8:95:87:7a:a6:0a:95:d6:02:
3c:64:e9:ab:8a:4e:05:9b:4c:ff:d2:67:2a:bc:f5:7c:65:6f:
2a:1e:ef:32:1f:31:98:1b:7e:a1:4b:c8:26:a6:f9:66:f7:96:
04:9f:37:f5:ab:26:a8:d6:6b:ce:be:f3:f5:f8:a3:1a:5d:20:
35:d9:af:9d:dd:d9:fc:dd:5e:41:1a:90:49:27:4e:96:09:cd:
8e:e2:b7:88:e1:37:20:54:2b:44:bf:49:a9:5d:49:1c:21:8a:
a9:1c:52:a8:10:49:55:a8:c6:c3:91:9a:b0:65:f8:cd:89:40:
a9:68:47:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe8opWYFxE+sPb0Djh6JJvaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NjFmMjBmYjhhN2U2MzVkN2JjYzk0YzAwYmVkNzE3OWI3
NjA4ZjYwHhcNMjUwNjI5MTcwMTAwWhcNMjUwNjMwMTcwMTAwWjAzMTEwLwYDVQQD
EygzOTNjYjc3Njc3NzM4ZjA5MDI4ODQ3ZWFjYWUwNjI2NTQwNzQ2YTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH5BnfAaqNg7/SljJXdAqwpbXXbN
Z8+gqN7MUtVB1YPo3AftNZINJmNo28Bwzm1WYoOYy8G5yI/4uOibcFtZT/a0PvbS
fe+jykntwel8vt5DRL8t1w6rqWVkoB3yBqbofWo/k6nPyP6pizw+boVOMo7bDDrt
ou2HLo0IBc/yS3p66rmr/NEoAjtjIYu3MGXZ0/htsbPhOp/J3KzagFEze7o7COR3
mu0rbP5nrg4bixczYa93HoDM+1eiBSxvjCdbOeazNOuzTrymk/quz/J7kRSxY0BY
OMgAXFdgNGwihT8uZlHnGsLmt35CaKeh9qXd4SyZghdq0s0EIisdJNBMuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDk8t3Z3c48JAohH6srgYmVAdGpQMB8GA1UdIwQY
MBaAFAZh8g+4p+Y117zJTAC+1xebdgj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMt
YWQ4ZWRmZTVmMGY3LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMtYWQ4ZWRmZTVmMGY3
LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFnYqdWb
N2pMQMOSdE63qL6MaJRja+qwarVi39JOdCuWgAQnYXYIYNV1lpw6O3UCFVGtYFye
GDxnlpeHnD3AbzYWYsPogVEsQKkRvS0YvPQ/rxIwiCsbQlsQ4GtNI0Y7TR3mszGP
AbK8KBhTUf0hIaS+tt+h829z/S+7Nw8BU2sRKq5mYgriyJWHeqYKldYCPGTpq4pO
BZtM/9JnKrz1fGVvKh7vMh8xmBt+oUvIJqb5ZveWBJ839asmqNZrzr7z9fijGl0g
Ndmvnd3Z/N1eQRqQSSdOlgnNjuK3iOE3IFQrRL9JqV1JHCGKqRxSqBBJVajGw5Ga
sGX4zYlAqWhHTA==
-----END CERTIFICATE-----
Generated at Mon Jun 30 02:25:22 2025 by rpki-client