Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
File: bmgcJW1nKYHLOc4lynjPIVz06qY.mft (raw, json)
Hash identifier: 4SU0PHWcFE9iIrM3mBX1VKrF3knfP1EA27X9jDkeNhU=
Subject key identifier: 46:D8:F0:51:AA:6F:AC:0D:7D:F6:87:C3:0A:71:2F:6E:F7:D4:35:B4
Authority key identifier: 6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
Certificate issuer: /CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Certificate serial: 019780C447C30E7FB72F7DE70F8DC8F63A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
Manifest number: 1595
Signing time: Wed 18 Jun 2025 02:00:36 +0000
Manifest this update: Wed 18 Jun 2025 02:00:36 +0000
Manifest next update: Thu 19 Jun 2025 02:00:36 +0000
Files and hashes: 1: bmgcJW1nKYHLOc4lynjPIVz06qY.crl (hash: zkFlgnO+Zc0Czwo/gpzEezlRrhVmLctMY8Gt0u1PfX0=)
2: tvKD3UXqZVXDvVX7leTlMKw_qew.roa (hash: WK5XR30REtOfSSrTxnfQEhXv68zn6pJyCz3GjFrJURA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:c4:47:c3:0e:7f:b7:2f:7d:e7:0f:8d:c8:f6:3a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Validity
Not Before: Jun 18 02:00:36 2025 GMT
Not After : Jun 19 02:00:36 2025 GMT
Subject: CN=46d8f051aa6fac0d7df687c30a712f6ef7d435b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4a:33:95:7a:2b:66:32:f8:2a:97:62:71:c5:
fe:7b:d7:40:41:a1:ca:c5:6e:7a:9e:df:63:a8:7e:
93:db:e6:fb:86:7d:c7:1a:12:52:fe:ba:52:4a:ab:
a2:64:83:be:16:85:69:11:90:ea:50:f8:e2:00:24:
d8:06:a2:65:67:b7:57:7f:40:ed:0d:e7:ed:94:ef:
1f:50:0f:e7:77:de:fe:41:1a:60:ca:23:23:0d:5b:
3b:07:bb:a2:4d:88:36:be:0f:3f:66:35:d4:19:7d:
4b:34:42:d0:20:0e:22:2b:f7:f0:21:3a:b2:39:8c:
d0:b4:4c:e1:01:b4:63:fe:de:71:fe:21:cc:c1:30:
f7:9b:11:0b:b0:f1:26:0b:44:66:b5:1f:87:ac:4f:
ca:19:da:89:e8:34:3c:d7:32:1e:92:c1:bb:37:14:
97:33:b9:6c:12:95:1b:c9:a7:04:ba:b9:eb:48:3a:
8c:08:fc:0b:12:f2:6e:6a:0e:e6:ce:45:7f:09:cb:
36:94:5f:da:e5:de:e1:38:9b:0d:77:be:86:3f:54:
53:fd:f0:bd:61:55:7e:9a:21:7c:3d:11:8a:3d:06:
e6:96:1a:bf:dd:a7:47:b7:cc:ce:72:6f:96:fd:d4:
c7:0f:bb:b3:fc:ce:ad:17:4d:16:e3:e6:a0:56:9f:
20:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D8:F0:51:AA:6F:AC:0D:7D:F6:87:C3:0A:71:2F:6E:F7:D4:35:B4
X509v3 Authority Key Identifier:
keyid:6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:99:90:b3:8c:e7:68:62:55:49:c1:da:41:55:7e:a3:70:a3:
50:2b:53:02:ab:1c:a9:e2:08:10:cf:1d:b7:f3:2b:d2:72:96:
b2:8a:c0:67:2a:b5:b7:61:ef:51:2a:5a:64:ef:72:c8:28:66:
e4:95:3b:be:75:f9:e3:15:e5:e3:2d:51:c3:71:d2:83:df:9a:
fb:80:d0:05:10:cf:0d:09:41:c7:03:25:15:ba:2e:e0:92:a8:
d5:97:d3:4b:30:4f:1f:6f:d5:85:09:47:06:87:57:28:f7:b3:
9e:ef:84:5e:9e:eb:cd:b0:39:41:4a:be:be:6a:58:b6:2e:35:
4a:f9:5a:f6:40:45:bb:24:25:a4:70:20:ef:e7:b7:62:07:f6:
33:07:d5:ec:62:89:ba:b0:0d:3f:1a:f3:35:04:1d:0e:1a:cc:
0f:4b:83:53:bb:f4:68:44:b4:99:22:c1:b3:c8:8a:65:25:cd:
37:3b:85:95:6d:2e:bf:14:06:ff:c4:53:d0:61:5a:33:79:7a:
a2:b9:f6:72:1a:32:10:7b:7d:ec:04:7d:28:28:5e:3c:51:e5:
7f:46:f0:50:a0:76:00:d5:11:84:73:a9:98:a5:78:7d:49:72:
16:95:3a:e4:f4:52:be:6d:b3:b8:b8:0d:fc:40:8e:fa:7a:46:
fa:db:81:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:26:42 2025 by rpki-client