Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
File: BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json)
Hash identifier: 9NrxQGj+GiyzN8ArHsQ1kraXRF4Px/g4lwwZ71bkCkQ=
Subject key identifier: 7F:71:90:4D:A3:5C:37:D0:97:35:23:9D:AA:70:23:E0:D2:59:A8:70
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Certificate issuer: /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial: 0198D54E0539A87EAC8CF57B7E54700A808A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
Manifest number: 05CD
Signing time: Sat 23 Aug 2025 05:01:56 +0000
Manifest this update: Sat 23 Aug 2025 05:01:56 +0000
Manifest next update: Sun 24 Aug 2025 05:01:56 +0000
Files and hashes: 1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: qO+G6J3E+w1vWfbg9GQ66LhRtHkPfMszT15jS8r4IGU=)
2: whgLIqQCCtaIFPGvrV-g35mBN8g.roa (hash: /96dk6CmGs9V0nPouKCLYMlqNQg4LfFeUQg3VaKiMzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:05:39:a8:7e:ac:8c:f5:7b:7e:54:70:0a:80:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Validity
Not Before: Aug 23 05:01:56 2025 GMT
Not After : Aug 24 05:01:56 2025 GMT
Subject: CN=7f71904da35c37d09735239daa7023e0d259a870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:0e:99:ee:cd:81:5e:fb:b7:f7:29:d7:df:
c9:0f:8b:66:28:3e:8b:3c:d0:8f:5f:ab:b8:f9:7a:
bb:a2:ea:dd:a9:8c:92:ca:97:a2:3d:3f:0a:dc:4b:
07:d0:40:ed:42:0f:6e:1d:eb:d7:2e:38:97:1c:33:
ac:43:16:7c:9a:52:3c:33:44:7f:21:dd:37:2b:70:
37:cd:5c:c1:e6:d1:07:f8:46:66:6c:b9:56:37:d6:
6e:39:eb:5b:d7:3c:01:0f:8a:22:f0:5b:2e:e4:e6:
05:c2:9f:13:10:0a:21:65:3e:a7:01:52:cf:78:f0:
fc:11:a4:00:b7:f9:55:21:aa:06:ce:3c:ec:e9:5c:
9f:3d:f6:bf:0c:8a:14:24:e7:e7:b1:20:7e:df:ca:
d7:d8:ba:83:95:ec:ca:3d:d5:4b:02:e7:84:1a:46:
80:d7:ea:f5:5d:24:5e:84:e2:66:ee:74:52:a1:69:
73:67:dc:d5:a6:1a:ba:0d:74:ec:5f:af:2a:25:ef:
6d:7a:d2:2d:89:e6:5a:12:87:2c:12:65:f4:4c:92:
24:82:95:4f:e8:4a:53:ae:a1:54:fe:78:fc:12:35:
52:4a:a1:3a:ed:fa:89:bf:d8:04:a3:0f:1f:d9:11:
68:39:34:50:b3:b4:f8:52:f3:3c:7c:49:12:c2:23:
86:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:71:90:4D:A3:5C:37:D0:97:35:23:9D:AA:70:23:E0:D2:59:A8:70
X509v3 Authority Key Identifier:
keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:35:a0:82:cc:46:e9:7b:11:ee:3b:ce:67:7c:d0:85:bf:98:
eb:3f:58:d4:91:40:13:bf:57:ac:39:36:ce:b9:f1:b8:51:f0:
9f:01:11:f9:4a:87:f1:f4:b1:30:8b:5e:d8:99:0a:43:c3:1b:
ab:2e:ca:15:b2:96:17:a0:3b:67:60:04:2d:c6:d3:ae:bd:c0:
fe:ae:d8:03:b9:c2:90:27:28:30:75:f0:b0:23:f0:07:32:01:
fd:d5:17:09:0c:51:98:37:c5:9f:3e:b8:17:0b:0a:82:76:0d:
81:08:2d:c2:91:93:87:e8:c5:84:df:4f:39:c2:d9:e5:37:3d:
ad:f4:d3:f4:73:06:22:8c:06:63:37:4b:a9:0c:bb:f4:8b:a7:
d8:f1:33:26:fa:e7:39:a6:02:fa:35:07:c5:09:db:fd:52:64:
b7:39:46:56:fa:88:f1:fb:b1:89:e3:e9:de:f4:28:e8:ff:c9:
40:0c:93:65:92:f8:e4:70:27:75:45:a9:5a:5c:6d:a8:3e:cc:
8b:ad:e5:35:13:c1:38:f5:e8:3b:29:60:23:51:87:07:19:bc:
1c:70:99:f6:85:94:fb:0b:ba:02:13:24:7c:fd:aa:18:37:fa:
ca:7b:21:51:28:de:65:d2:5e:27:a4:85:ff:68:9a:53:c5:6a:
cf:bc:ec:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:53 2025 by rpki-client