Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: lCOqhtPkG6GLQTVxCPb6dlf31J7DJWwKNy/Y60gYgMQ=
Subject key identifier: F4:C4:D0:50:DB:D6:29:D3:F1:39:B7:92:97:7C:DB:8C:73:45:EF:3A
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 0199FC8F9E722348CCF70B6878E9D12FDAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 13:01:34 +0000
Manifest this update: Sun 19 Oct 2025 13:01:34 +0000
Manifest next update: Mon 20 Oct 2025 13:01:34 +0000
Files and hashes: 1: 2GrFuxyxyHkqumdayYRyftHOCCA.roa (hash: 58WfiupeF7jv1/JuV3+ZtSw5ZmglbAvhKCWRK1cfUPw=)
2: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: HwZxDDY9NXpn9uXCdl7ksnUD5moRfZ3cpbWq6zgDnDw=)
3: EFrmvdYAVAISDnJyY9LHHEwKIkE.roa (hash: VVoG4KmLy8MCQlXZBg6STGy/fzjISq/IYVzwvcg57xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9e:72:23:48:cc:f7:0b:68:78:e9:d1:2f:da:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Oct 19 13:01:34 2025 GMT
Not After : Oct 20 13:01:34 2025 GMT
Subject: CN=f4c4d050dbd629d3f139b792977cdb8c7345ef3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:81:dd:70:c7:05:19:b8:a9:5e:ee:01:1e:92:
8e:40:be:54:88:94:e2:5c:92:08:57:0c:8b:b1:3b:
56:81:7f:6d:5c:44:58:7c:5c:2a:57:85:3b:d2:4a:
61:eb:72:76:7d:1b:b7:85:95:e3:47:b0:e6:21:37:
8b:a7:f1:f2:50:e1:2a:79:2a:85:44:1b:4d:d8:76:
8b:d4:af:51:5c:7b:59:56:cd:43:2f:90:72:e2:a0:
27:4c:35:26:49:9e:fd:90:fa:cc:99:d3:93:08:84:
44:6e:fd:97:56:db:a2:77:f6:df:37:6f:2a:f8:5c:
6b:88:4c:13:9a:8f:3b:77:e2:1e:ce:34:50:c5:e2:
29:93:8b:11:c2:fe:82:89:a4:9f:96:05:a7:d5:d2:
aa:00:a7:75:92:be:29:15:08:73:5c:45:5f:12:ae:
fc:90:57:0e:18:16:e2:bc:d6:8e:cc:42:8f:ce:af:
5c:61:05:2e:91:9e:6d:fc:c0:62:19:ce:7a:1f:89:
63:19:61:86:5f:6e:dc:e0:de:88:7e:8a:b5:8d:b1:
2d:6f:ee:bd:15:0a:fd:00:af:0a:eb:e8:f6:bf:97:
1a:2d:14:fa:52:60:f5:45:b5:8a:91:54:69:72:01:
86:1d:cf:c3:4a:fa:25:74:1e:d8:4f:7e:5a:fd:65:
21:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C4:D0:50:DB:D6:29:D3:F1:39:B7:92:97:7C:DB:8C:73:45:EF:3A
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:25:90:d3:79:69:3f:5d:21:86:df:66:d6:90:c9:9b:57:f7:
25:08:85:e9:3c:c5:56:4b:5f:6d:dc:ad:89:70:b3:f5:b5:63:
58:15:f0:51:b7:3c:4b:a5:4d:c1:37:76:c2:45:de:12:c7:d9:
53:6b:78:94:b5:e0:45:16:09:d0:9c:7c:25:03:b3:df:19:16:
ff:d0:d3:93:68:8b:3f:9f:e4:6f:72:88:d3:b6:f9:2a:db:81:
2e:dd:4e:ad:9d:13:38:2a:4f:c4:85:04:44:87:21:30:43:85:
40:19:55:c9:3d:aa:bd:59:5f:08:d3:47:00:5f:49:1f:93:a1:
f3:4b:0e:33:76:40:02:ac:87:98:0b:9b:97:f2:08:55:14:27:
71:d4:bf:40:c2:32:4d:c8:19:e8:6f:b4:85:b1:41:77:42:5b:
cc:03:92:1f:40:47:0e:5c:8a:9c:24:76:3a:68:d1:97:b4:27:
71:04:ae:31:6d:29:09:3a:70:77:b4:19:61:06:65:73:d0:70:
3d:a5:e2:ed:ed:52:50:aa:11:b7:25:61:81:4e:41:f2:75:bc:
0d:2a:b2:1c:74:e4:cb:54:56:64:93:f2:c2:45:c3:7f:e1:ee:
7f:65:fb:68:c8:f2:47:df:96:5a:42:09:07:76:74:24:8e:8c:
a1:72:58:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:44 2025 by rpki-client