Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: vrvdGzeLiCRnRZeTcAO/YETTZ7ptuN1dq0NSu3HIwT4=
Subject key identifier: C8:2C:59:67:F4:F8:59:D1:B9:93:0F:B2:7A:C9:CA:1D:93:56:EC:F0
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 0197B6327789D79556B8E0363B2E6F098201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0A79
Signing time: Sat 28 Jun 2025 11:00:50 +0000
Manifest this update: Sat 28 Jun 2025 11:00:50 +0000
Manifest next update: Sun 29 Jun 2025 11:00:50 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: 3twIlAqzfp5uLPqX0IFvMRURr8/Zv8oFEFyjnDCZkmc=)
2: UiH643w1GrSMb8MdWOXuMKoflu8.roa (hash: Ox1u3sls+4F8aVo0Ns4HTUNM65vIvg8OdP6tILBOlsE=)
3: rLCMQEvNZKScfiZ6xzabxSP9S3Q.roa (hash: pzK0hpbuvro5D5X8t6Q8snrn8GpjD/ysREOxL+vWCA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:77:89:d7:95:56:b8:e0:36:3b:2e:6f:09:82:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Jun 28 11:00:50 2025 GMT
Not After : Jun 29 11:00:50 2025 GMT
Subject: CN=c82c5967f4f859d1b9930fb27ac9ca1d9356ecf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:f8:de:af:c7:11:f4:75:10:a5:47:58:9c:
3d:af:80:1d:f6:52:16:d4:96:43:75:a9:bf:c4:5f:
88:81:9e:f7:65:ba:f5:db:e4:3d:52:d6:b8:19:6d:
5e:fa:d0:c7:40:6b:11:55:20:0f:be:8f:ca:a0:1e:
67:9e:37:f7:5c:e8:d5:d9:ee:c4:df:46:d1:e3:15:
5e:5b:20:c3:b9:3e:b1:93:0f:f2:f2:28:07:5b:94:
3c:e8:29:cf:98:4f:b0:0d:b8:ef:51:ee:d2:98:f1:
c5:21:42:ec:39:e2:7f:af:e6:92:42:33:8b:c6:0e:
65:15:63:46:cf:2e:b5:60:58:96:79:f9:c8:37:f1:
9e:27:40:85:c0:46:ba:3b:14:75:d2:85:de:d9:f0:
0b:a9:b2:19:fa:08:fa:c1:2d:f8:e4:d5:ce:a4:b2:
cf:d2:d4:37:92:b1:32:e4:4d:ae:01:51:fc:82:9e:
f7:58:88:13:87:ba:8c:7b:42:24:d8:8b:72:fa:dc:
73:83:a4:82:2e:6d:66:77:ae:7d:70:e2:b2:3d:d1:
e8:f7:fa:0b:84:2e:6f:2f:f8:4f:0f:07:95:e3:8d:
4c:1f:aa:97:89:a6:0b:6a:71:34:31:ae:c6:5c:76:
68:e7:5e:d7:0d:02:db:3c:af:4a:03:63:ec:5e:8d:
ec:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2C:59:67:F4:F8:59:D1:B9:93:0F:B2:7A:C9:CA:1D:93:56:EC:F0
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d3:a3:09:1e:64:f1:de:ab:88:2a:15:05:39:c9:6e:54:2c:
4a:0d:3f:7c:6c:6a:bc:a0:41:9f:ef:18:46:a7:c1:a5:57:11:
cf:64:6e:d1:a4:63:b5:17:5a:f8:80:49:9f:0a:b9:7b:a1:d5:
0c:4d:a1:f8:b3:02:bc:62:c9:d0:f9:b3:eb:53:df:28:65:c4:
bb:1b:4f:09:3d:56:c2:49:21:8d:4c:cc:85:6f:db:93:d8:67:
0d:22:1d:14:ca:f6:9d:93:73:63:c1:14:1a:83:c6:6e:69:01:
b6:15:ff:7a:dd:98:f2:36:2d:0a:b6:c4:89:49:dc:90:a1:f3:
ac:87:f0:35:81:ce:5c:cc:00:2a:9a:02:1e:d7:f4:9a:f2:4d:
76:67:dc:33:85:a6:ff:2c:12:b7:bd:22:8c:4b:31:1a:21:c6:
a5:12:5f:47:ca:65:a2:00:a0:4a:89:5b:57:a2:e3:d1:6e:85:
17:21:2c:07:65:f1:64:cd:91:4a:93:e7:70:ac:c3:46:f8:96:
00:34:cd:71:bb:6e:13:d7:c7:cc:c4:98:e8:8b:82:99:26:af:
de:bc:44:5c:ad:cf:ed:99:f9:10:f4:3d:b4:cb:60:a3:0e:68:
80:90:83:70:2d:83:4a:60:a2:41:95:23:ff:d9:75:c5:54:6b:
d0:6c:d9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:18 2025 by rpki-client