Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
File: bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft (raw, json)
Hash identifier: SGMK8A6zCVf0rpj8GtnjqBWInonZ3mm2J7r+8rQASE4=
Subject key identifier: 77:7F:31:90:1C:80:9E:1A:AD:81:14:30:1F:9D:F0:8F:39:20:84:AF
Authority key identifier: 6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
Certificate issuer: /CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Certificate serial: 0199FC21BCBEE2C58D591B1EF8D8321E52E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
Manifest number: 062E
Signing time: Sun 19 Oct 2025 11:01:33 +0000
Manifest this update: Sun 19 Oct 2025 11:01:33 +0000
Manifest next update: Mon 20 Oct 2025 11:01:33 +0000
Files and hashes: 1: bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl (hash: zbe2D1wz9w4SJVp9ZqdyjmBFtvdEakqaGSlzjL9ghu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:bc:be:e2:c5:8d:59:1b:1e:f8:d8:32:1e:52:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Validity
Not Before: Oct 19 11:01:33 2025 GMT
Not After : Oct 20 11:01:33 2025 GMT
Subject: CN=777f31901c809e1aad8114301f9df08f392084af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:3d:0e:03:d5:c6:9e:62:4e:c1:74:1a:90:
4d:8f:e7:21:7c:58:8f:b9:d9:d0:a4:0e:73:7c:2a:
47:06:07:d2:b1:83:c4:da:83:8c:da:fd:5e:ca:0c:
65:d9:dd:be:74:a4:d8:a3:7d:e7:fd:82:ba:70:fd:
9d:ea:f2:a6:70:06:29:a1:7f:ad:fd:ad:2a:db:a6:
fb:78:e8:ed:cd:ed:f9:68:ae:7a:e2:c4:a5:ad:7b:
a1:a6:ef:47:2b:0c:d2:7c:51:51:a4:10:c9:6c:4b:
82:ee:e0:40:5e:c1:51:d5:d1:2a:44:57:80:95:e3:
9a:23:b5:7c:21:cf:b4:d9:27:cf:48:60:3c:05:89:
77:41:a1:96:e3:9a:bc:52:0e:99:44:93:b1:ab:39:
a1:0a:58:85:57:7e:b3:54:4a:4d:98:29:c4:aa:c4:
70:46:64:87:f6:1f:18:f8:17:05:ed:0e:ce:7e:4f:
a8:d0:f9:5a:38:57:f7:1a:da:e2:b7:f9:36:37:5e:
81:51:c4:2e:f6:3c:7c:1f:99:7c:62:85:04:1e:91:
63:f8:55:a7:4c:58:81:0b:72:f5:12:ff:76:bf:1a:
57:2d:ce:5c:17:72:74:8d:92:3c:45:db:02:fd:18:
d0:36:76:9f:10:f7:08:66:05:f7:08:ab:65:2f:36:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7F:31:90:1C:80:9E:1A:AD:81:14:30:1F:9D:F0:8F:39:20:84:AF
X509v3 Authority Key Identifier:
keyid:6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:92:62:5b:e5:69:7f:9b:a5:44:9b:57:65:e0:0d:b8:40:98:
8c:a5:6d:40:22:e2:2b:95:08:4a:42:13:2e:ff:e4:62:bd:9f:
83:a9:7d:c0:b5:bf:52:a3:0d:c9:45:25:d7:0c:43:bf:bc:c1:
58:2e:5d:f3:14:22:8f:b6:72:f5:ca:c3:87:89:5f:f7:e1:95:
cb:65:b3:6b:06:67:b1:9b:d3:f6:a0:9b:a5:d1:6a:8a:f1:b5:
5f:8c:7a:4b:49:f4:d4:dc:92:bd:09:68:d6:0f:99:85:84:85:
bf:62:d6:95:60:87:3a:20:5d:b2:d9:9a:83:b8:4a:dc:56:91:
bb:79:00:a9:66:0e:a4:94:29:60:e5:57:9f:61:38:e9:7e:2b:
1e:88:56:05:bc:7e:51:51:33:f2:72:e3:17:a0:21:72:9d:9a:
1a:23:49:5e:67:23:64:f8:21:ff:ff:f5:a7:0e:38:26:12:00:
42:ff:67:60:ba:46:92:53:01:13:3d:5b:b6:52:cf:a7:b2:10:
41:a0:99:d5:49:56:fd:96:4c:c0:c0:50:4a:6d:40:c4:67:b6:
67:ee:53:93:9e:77:1a:a9:6b:d4:44:7a:5e:a4:5d:63:29:a7:
18:71:5a:09:fa:3b:a4:61:6a:a8:08:bb:7d:db:d4:06:c9:4e:
36:bd:5c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:08 2025 by rpki-client