Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
File: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft (raw, json)
Hash identifier: PQvaKdJQxj7p4zqqJs7pEpJYTIncz4Wf601zxQUorLE=
Subject key identifier: AE:BE:9E:0B:20:42:0D:0A:AC:8B:96:2D:ED:81:2D:B4:F4:1B:97:4C
Authority key identifier: 06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
Certificate issuer: /CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Certificate serial: 01988CFD3AEBCEB48A48E2678DAE1B587476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
Manifest number: 12F5
Signing time: Sat 09 Aug 2025 04:01:02 +0000
Manifest this update: Sat 09 Aug 2025 04:01:02 +0000
Manifest next update: Sun 10 Aug 2025 04:01:02 +0000
Files and hashes: 1: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl (hash: O8R7PWlwSaTG/AWpIQ5m9zXkPVPZLTxusGcdQFuFJ+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:3a:eb:ce:b4:8a:48:e2:67:8d:ae:1b:58:74:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Validity
Not Before: Aug 9 04:01:02 2025 GMT
Not After : Aug 10 04:01:02 2025 GMT
Subject: CN=aebe9e0b20420d0aac8b962ded812db4f41b974c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2c:6f:16:05:1f:55:7f:a2:05:6b:73:5a:88:
59:f9:96:ff:1d:ad:ac:2a:03:15:12:d1:f7:d2:76:
8b:e1:09:7d:04:7d:0f:9e:66:f0:d1:75:af:f6:12:
d1:81:a2:44:b5:2d:d0:9b:b6:be:24:b1:0d:75:74:
b1:3a:81:c4:ae:a6:71:35:02:53:b3:0b:c4:65:cc:
c5:ef:2c:f8:52:83:2b:71:f4:e3:d0:ab:de:d0:c4:
fa:e9:35:69:a6:09:42:41:fd:03:4f:8a:38:89:86:
58:a7:ed:ef:42:4f:5a:45:63:2b:6a:dc:f0:d4:df:
33:bb:ca:18:29:24:2c:92:9d:f9:5b:3a:e2:67:49:
79:c4:a2:13:e2:a8:28:c7:44:30:c5:80:b7:54:c4:
92:3d:d9:b8:30:37:1e:2a:37:45:ad:56:c1:52:02:
ed:a9:52:2a:d9:cb:1d:85:99:63:45:8e:fc:ed:2e:
f5:b3:e2:be:c3:0c:19:71:ab:a9:60:55:86:72:9a:
b8:ec:52:ee:96:d5:5c:51:dc:8b:2d:2e:23:5d:ba:
28:ba:39:73:e4:5c:73:f7:12:ba:21:ae:e3:05:6c:
a2:f6:40:e8:c7:72:df:1b:16:bc:a0:f4:2e:20:5f:
b6:0b:49:86:2e:2e:5d:db:dc:9f:f5:dd:bb:f5:2a:
fe:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BE:9E:0B:20:42:0D:0A:AC:8B:96:2D:ED:81:2D:B4:F4:1B:97:4C
X509v3 Authority Key Identifier:
keyid:06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:23:4c:24:79:44:b9:a2:06:3e:46:d2:b7:ac:32:89:cb:34:
dd:af:19:0f:7a:27:47:73:f2:9e:39:21:ae:39:54:40:4f:62:
96:53:03:27:92:79:10:7e:b3:23:f6:61:ac:5a:12:e7:0c:2a:
31:de:87:f4:16:9f:2b:5c:d5:6b:9c:79:09:1c:39:eb:de:64:
dd:c2:b9:fc:0c:8c:9d:08:9e:69:ae:a3:d7:57:48:22:c4:5a:
a8:70:bd:44:ac:97:40:6f:9f:b7:a4:65:20:4d:2e:6b:75:41:
81:2b:c3:48:f1:58:6f:21:f2:e6:a3:3a:4f:ee:20:75:24:60:
67:3c:df:d0:6b:89:05:8f:19:b2:85:9e:39:10:e9:c9:11:9b:
85:f9:31:d8:58:99:b6:30:5a:8e:71:6b:75:76:10:c2:79:27:
66:6c:a4:52:41:50:f0:89:73:7b:81:64:e4:7e:50:04:f0:cc:
ab:0c:b4:d0:90:61:4a:75:ed:d5:16:d1:e5:30:7d:37:8d:b1:
91:f2:c0:41:ea:8e:d7:30:50:91:87:b1:0e:3e:7d:28:8f:f6:
67:bf:56:cf:64:00:84:79:16:61:18:07:3f:75:e3:cb:d0:2c:
3b:54:e8:4a:a4:dd:fe:18:0a:00:c3:e5:1f:0a:2f:be:67:1f:
4c:54:14:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:55 2025 by rpki-client