Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
File: BmNp4nBctDPbBlirZm0ItnsVUdw.mft (raw, json)
Hash identifier: HqO9NZnxjAHnUCSkh6wsW6Fogte8t/zYBi432VXH64g=
Subject key identifier: 04:D5:BA:04:41:3A:7D:C0:66:1C:03:3E:C6:CE:0C:84:9E:25:8D:23
Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
Certificate issuer: /CN=066369e2705cb433db0658ab666d08b67b1551dc
Certificate serial: 01987562A9748689656E73CE48B279A87F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
Manifest number: 153D
Signing time: Mon 04 Aug 2025 14:00:56 +0000
Manifest this update: Mon 04 Aug 2025 14:00:56 +0000
Manifest next update: Tue 05 Aug 2025 14:00:56 +0000
Files and hashes: 1: BmNp4nBctDPbBlirZm0ItnsVUdw.crl (hash: N4JHYYLlyaePB3hIXlJ568LXlZr0f/9OVOiOTjmsv/k=)
2: jCf5g0MNk7dChvixSvofxX26UqQ.roa (hash: EtFQAu+QfH/I3yhnfzxyM188HrZPVxzTPSpuxFHhJDw=)
3: osJ9_DR-TYLXPhwmG2ma04NJTWc.roa (hash: J9O9DuXjiOjoHZT0sNnMyGnclsGi579GC3bqlBQWEYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:a9:74:86:89:65:6e:73:ce:48:b2:79:a8:7f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc
Validity
Not Before: Aug 4 14:00:56 2025 GMT
Not After : Aug 5 14:00:56 2025 GMT
Subject: CN=04d5ba04413a7dc0661c033ec6ce0c849e258d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:4a:c1:5b:b8:f5:fd:a9:3d:f8:00:03:96:
34:a1:64:5a:ae:e2:eb:90:ac:30:73:63:9f:3b:e3:
75:64:19:7d:90:29:ab:72:16:68:76:f9:a1:b9:5a:
f7:4b:72:2d:54:57:1b:87:57:94:77:90:1b:5a:0e:
a9:1e:b9:32:df:27:21:5c:92:14:63:46:6c:95:73:
20:bb:f1:70:09:11:31:a7:9e:8d:1b:a5:a8:91:f6:
75:4c:fb:76:31:99:5f:6f:0e:ae:4d:39:8b:dc:f4:
3b:4b:1c:a4:2e:39:ad:c6:cf:81:0a:7e:5f:70:56:
f7:9f:38:8a:69:d1:a0:8c:b0:66:10:a2:dc:04:aa:
ce:be:9c:87:da:a8:4c:d4:43:ec:02:93:82:55:14:
e1:da:cc:3f:2d:33:18:0d:0a:40:8b:70:db:fc:5a:
78:32:ca:e0:6f:cc:19:e0:1c:6c:e2:1d:62:87:c8:
6c:87:5f:20:76:78:3a:a8:48:be:28:c4:19:9a:33:
14:0f:74:6c:68:a9:83:03:3d:57:cc:1c:ee:23:fe:
41:74:f2:62:67:fe:65:e4:dc:f9:0f:6a:3c:56:74:
1d:7d:be:7d:68:52:15:b4:90:f7:8c:eb:fa:85:df:
47:85:49:99:ee:72:d6:b4:eb:90:8b:d8:3a:22:70:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D5:BA:04:41:3A:7D:C0:66:1C:03:3E:C6:CE:0C:84:9E:25:8D:23
X509v3 Authority Key Identifier:
keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:95:a5:fc:23:0c:04:a1:72:1e:8c:1b:56:28:c8:14:e4:ad:
92:f9:93:09:6f:d3:22:60:db:c7:4d:07:06:b2:7a:55:c7:ae:
ce:61:3e:b1:71:da:45:39:c5:e2:74:94:7c:77:f5:fa:b2:db:
f6:56:d7:46:a7:e5:5e:15:58:dc:13:7d:da:14:6d:93:1f:6f:
0b:3a:d1:99:b4:89:1c:d6:e2:51:93:e0:fb:d1:00:58:36:15:
dc:fe:47:9a:61:f4:f2:1a:67:1b:34:89:5b:ba:8d:d4:0b:fa:
cb:72:56:b8:e9:b4:9a:c2:7a:46:58:f0:fd:87:28:79:83:f4:
70:1b:69:a0:a6:7d:0c:5d:0e:0b:e8:ca:a4:e5:1b:ae:dc:d2:
2d:72:ae:99:8d:02:f9:ea:b3:75:26:84:d7:2e:26:24:6d:d7:
26:62:db:82:1a:57:e2:ad:60:74:cb:92:66:79:e7:69:b3:b8:
65:fc:00:84:d6:e2:cc:e7:e0:60:50:c1:03:ce:ca:2d:41:3f:
e5:d0:92:05:83:b4:24:5f:cd:a1:ff:94:9d:bc:e1:27:fd:b2:
4f:b2:e7:c5:d7:7c:a9:4d:31:ba:29:a4:92:8b:fd:e3:a1:2f:
bf:14:85:ca:3b:29:d2:2e:dc:4c:d8:30:10:8f:7a:d7:4e:c5:
35:7e:50:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:13:34 2025 by rpki-client