Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: 4SPMTTLxH1L/kZyNDMrTtCj7WUGHqG2DFPZuuAuW208=
Subject key identifier: 3A:CE:73:D0:6C:25:73:08:D5:0B:1E:3B:86:42:6F:FA:9E:23:EC:B8
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 0198D706087226862889E6A5EE5F487B45D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 13:02:33 +0000
Manifest this update: Sat 23 Aug 2025 13:02:33 +0000
Manifest next update: Sun 24 Aug 2025 13:02:33 +0000
Files and hashes: 1: 2GrFuxyxyHkqumdayYRyftHOCCA.roa (hash: 58WfiupeF7jv1/JuV3+ZtSw5ZmglbAvhKCWRK1cfUPw=)
2: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: dkFbajLrzw20em4TNN0ZFcdpnCmmWkgi1eO0/o++R+w=)
3: EFrmvdYAVAISDnJyY9LHHEwKIkE.roa (hash: VVoG4KmLy8MCQlXZBg6STGy/fzjISq/IYVzwvcg57xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:08:72:26:86:28:89:e6:a5:ee:5f:48:7b:45:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Aug 23 13:02:33 2025 GMT
Not After : Aug 24 13:02:33 2025 GMT
Subject: CN=3ace73d06c257308d50b1e3b86426ffa9e23ecb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:65:83:f3:72:f2:c9:23:10:02:35:e7:f7:
67:dd:ad:51:26:fc:55:5c:07:1b:f2:27:40:d4:38:
cb:60:a4:66:90:d0:d4:15:fc:23:7e:bd:6a:26:6e:
5f:f2:7d:35:c1:aa:68:4e:a9:bd:cd:cc:ac:b9:a5:
6a:60:16:ba:7e:75:3c:ee:36:f2:96:8c:53:5b:25:
c9:b8:e6:10:29:c7:7e:82:d6:3d:26:d1:6b:d5:58:
a4:49:fb:dc:b1:2d:11:cc:f1:1e:40:2c:ac:7f:f1:
bb:93:64:cd:92:45:4a:95:00:bc:a0:0b:df:5e:d4:
6f:76:b9:f3:53:f0:0c:3d:f7:7f:33:00:49:5b:71:
44:6d:a2:a2:73:d5:bc:ac:44:ff:20:ab:f1:51:b1:
15:f9:18:49:74:55:d7:14:5c:c1:13:53:f1:e8:7f:
05:05:6a:f8:91:52:dd:06:d4:5c:c2:72:d5:1d:2f:
aa:e4:bc:91:6a:cc:7a:be:4e:b6:37:c7:02:ed:a2:
f7:90:3e:21:74:24:10:3b:9a:42:90:ff:ba:71:2c:
f5:73:64:01:7d:f1:c3:2e:d3:a4:59:32:8c:97:8f:
e5:cf:da:ce:73:07:18:85:c2:74:d0:86:33:60:77:
c5:97:30:3d:65:6c:a7:d1:dd:1e:1a:a4:29:42:bc:
b8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CE:73:D0:6C:25:73:08:D5:0B:1E:3B:86:42:6F:FA:9E:23:EC:B8
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:86:cc:8c:a4:f2:34:e4:c7:aa:8e:cb:40:d2:3c:4d:51:b7:
b2:0e:6c:ba:f9:ea:7e:38:bc:b2:30:e6:d6:11:e8:2b:92:3b:
e7:70:eb:f5:8a:df:cb:1f:e5:1d:bd:fd:d1:ad:5b:e0:9b:bf:
14:ee:fa:3d:32:5e:23:1e:85:66:9f:d0:69:49:c9:d0:e0:36:
04:86:9d:dd:20:8e:40:df:68:09:a3:44:18:e6:a3:66:4c:55:
98:db:5e:01:2f:67:e8:0a:41:94:ba:96:46:67:5e:72:75:f5:
4e:b6:30:39:94:ee:11:a1:c6:49:0a:fa:44:2c:9c:5b:f1:8b:
78:9f:a8:2b:70:c9:ea:3b:9e:35:fe:e3:21:90:c8:1e:5b:26:
e5:8a:82:37:64:c1:af:b1:99:4e:01:da:1b:c8:b9:c2:f6:0f:
86:b0:44:07:55:39:b6:64:27:23:a4:e6:eb:4d:6d:01:60:11:
b2:fe:f8:9e:21:bf:26:46:19:06:19:fa:83:5d:36:99:21:c2:
20:3f:d0:77:00:1c:51:f4:43:fe:4f:19:cf:82:4d:45:04:e4:
0d:1e:62:6f:1a:28:5c:9a:83:2d:5f:83:2a:79:d1:c3:fa:fd:
35:7d:24:d0:68:ce:67:55:b9:99:49:97:8f:d0:ed:e9:c6:b3:
34:e3:74:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:54 2025 by rpki-client