Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
File: bmvNHuBBUxK6utqWpbTHNRu8pr8.mft (raw, json)
Hash identifier: Jjg8WJaYoi/Hw6sGtzbOIYC/4sjFjErkXeJ7kHS839U=
Subject key identifier: 8C:CB:39:95:DE:8B:55:0B:8B:23:64:21:1F:F6:67:B9:D0:76:C7:70
Authority key identifier: 6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
Certificate issuer: /CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Certificate serial: 0198D515CF530C045763D6CD279AE09C77A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 04:00:33 +0000
Manifest this update: Sat 23 Aug 2025 04:00:33 +0000
Manifest next update: Sun 24 Aug 2025 04:00:33 +0000
Files and hashes: 1: GI-i99kB9ZZSVKD8l02CbLd6aSk.roa (hash: MonsukLiwzJG84LeZGYkMxgIaza5E2jt6G/wnGkzXY8=)
2: bmvNHuBBUxK6utqWpbTHNRu8pr8.crl (hash: NUSNWPhbCi657TMw6fXS9fpxoicMJuF4YOvqc8ZhrZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:cf:53:0c:04:57:63:d6:cd:27:9a:e0:9c:77:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Validity
Not Before: Aug 23 04:00:33 2025 GMT
Not After : Aug 24 04:00:33 2025 GMT
Subject: CN=8ccb3995de8b550b8b2364211ff667b9d076c770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:d6:6c:2e:3e:82:b5:c5:df:a4:2c:41:f5:
ca:4c:5e:c7:d4:fd:96:10:fd:ba:42:1f:50:0f:7a:
7e:dc:4a:1f:e1:45:66:ea:61:9f:a5:ee:b4:66:22:
65:64:77:cf:85:a7:d7:b2:cf:25:ee:62:33:18:3a:
aa:de:e6:71:d8:9a:90:a6:de:64:ef:c2:31:7a:4e:
26:61:94:10:97:75:4d:e7:3f:53:17:cf:bd:cd:4a:
bd:b5:45:db:2f:a2:fd:e9:5c:7a:c6:72:dc:b8:8e:
5c:fe:b0:cd:fd:b9:62:b1:ed:df:99:7a:9d:e9:93:
24:59:02:dc:fa:c7:38:2c:3d:69:fa:ec:e4:1f:8d:
a3:82:67:61:19:ef:95:bc:b8:20:6d:e9:39:b8:2f:
6d:4a:98:93:70:24:8d:72:32:bf:0a:0b:29:d2:22:
2b:72:da:b2:26:f3:da:63:b3:6f:3c:d4:f8:91:2c:
59:48:9a:35:c7:b6:7a:9e:a1:ec:de:a7:48:cd:a3:
06:9d:af:25:39:74:9d:d0:22:f9:99:1f:00:ec:f5:
55:e9:cc:ee:81:6b:f7:bc:a1:be:19:43:03:e5:2a:
09:99:7f:47:9b:b9:b8:87:83:c4:c5:07:d1:23:80:
aa:e5:f8:05:c7:d7:6b:72:b4:75:d1:33:b2:51:d2:
8c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CB:39:95:DE:8B:55:0B:8B:23:64:21:1F:F6:67:B9:D0:76:C7:70
X509v3 Authority Key Identifier:
keyid:6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:dc:95:e4:9a:c5:ee:b4:ac:43:ff:77:96:e5:6b:0a:c7:cd:
4c:9a:0d:db:f3:cf:d1:b7:c9:1a:ec:ba:78:85:d9:b1:3a:51:
8f:a7:ad:70:7d:88:98:62:9b:d8:7c:69:84:98:eb:8d:3c:5d:
11:46:af:bf:1c:54:59:78:1e:43:18:4f:ec:d4:1b:6c:19:e6:
e0:e7:de:a0:e5:a3:09:02:5b:db:b2:65:32:12:17:36:c0:d0:
76:98:e7:39:af:12:10:ab:92:49:04:87:f1:b9:90:b5:27:d3:
66:f7:09:5e:2e:26:06:68:5d:28:7c:ae:1c:e2:17:5d:ed:c1:
7b:5a:a0:83:6e:d4:52:be:3d:39:47:0e:62:5a:d3:00:bb:4d:
99:42:4c:e7:82:62:49:55:42:53:8d:52:ad:4d:b9:2b:0a:8b:
c6:60:8f:d3:35:78:7d:89:e3:d6:40:01:a6:a5:36:75:fe:87:
ff:a6:59:a2:29:5c:69:45:5f:0f:37:25:67:69:cf:43:03:e0:
bf:95:e6:55:96:4a:bd:72:f0:1b:75:cc:84:55:42:4f:c5:80:
3c:e8:a4:7e:81:32:3a:78:97:50:f7:9d:88:8f:1d:0b:fc:da:
d9:c3:c1:7e:51:a1:cd:10:fb:1d:d2:36:1d:e1:8a:00:8b:f1:
c0:59:7d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:39 2025 by rpki-client