Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
File: bmgcJW1nKYHLOc4lynjPIVz06qY.mft (raw, json)
Hash identifier: S0oRey/1WljPunEPMC4RuEPM4sDnNXLwXjxTmUTTk2o=
Subject key identifier: 46:26:57:E7:C8:88:9A:C3:B6:52:63:57:07:51:3B:A5:82:DF:6E:A9
Authority key identifier: 6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
Certificate issuer: /CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Certificate serial: 01988B45A8A8977EE4602364322AEB038606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
Manifest number: 161F
Signing time: Fri 08 Aug 2025 20:00:54 +0000
Manifest this update: Fri 08 Aug 2025 20:00:54 +0000
Manifest next update: Sat 09 Aug 2025 20:00:54 +0000
Files and hashes: 1: bmgcJW1nKYHLOc4lynjPIVz06qY.crl (hash: ZYRMCGXTnAyOEZii0q/KevXeUXt64zsXvmMfgv0/q58=)
2: tvKD3UXqZVXDvVX7leTlMKw_qew.roa (hash: WK5XR30REtOfSSrTxnfQEhXv68zn6pJyCz3GjFrJURA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:a8:a8:97:7e:e4:60:23:64:32:2a:eb:03:86:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Validity
Not Before: Aug 8 20:00:54 2025 GMT
Not After : Aug 9 20:00:54 2025 GMT
Subject: CN=462657e7c8889ac3b652635707513ba582df6ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8a:15:e0:17:ab:f0:54:12:dd:ba:ce:6d:97:
aa:c1:95:3d:3f:37:66:c1:e1:c2:1d:f6:49:b1:e5:
14:f8:09:98:12:7a:42:24:7a:bb:7e:9f:07:bb:ee:
6c:a9:c4:94:a4:5c:64:65:10:69:6a:7d:c2:59:71:
8d:78:3b:69:3c:67:b8:1c:1b:d0:04:ec:20:bc:68:
15:7b:fa:68:d9:36:de:06:46:c7:f1:16:ec:e0:08:
b8:6f:cc:e4:03:54:06:8e:a3:cc:ce:02:b5:64:de:
1d:e6:1c:df:3a:38:23:c2:e0:1f:f1:ca:98:05:fd:
e1:79:58:8e:d7:06:29:18:14:ec:84:c9:3c:b2:25:
0a:20:98:9c:a4:d3:43:aa:a6:28:5a:5f:f3:55:bd:
77:e4:9a:ac:96:e3:aa:64:16:fe:36:ab:fd:45:a9:
f6:dc:7e:5d:4e:13:6e:dd:33:d3:4d:a5:16:3b:d4:
c7:ff:9f:54:2c:11:17:61:ed:39:ec:b3:92:9c:e0:
d6:24:de:13:c4:17:66:20:21:13:f3:32:2c:d8:5e:
51:03:86:47:93:77:50:0d:19:16:e7:6b:da:51:e0:
a5:b9:b6:7b:8d:50:b6:a9:66:cd:22:2d:d9:9a:ee:
39:18:ef:73:ce:65:79:0d:cb:1b:a4:ca:c8:bc:96:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:26:57:E7:C8:88:9A:C3:B6:52:63:57:07:51:3B:A5:82:DF:6E:A9
X509v3 Authority Key Identifier:
keyid:6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6c:16:4d:34:ee:75:95:af:67:ab:f0:dd:08:f1:6a:b3:ef:
6a:54:2e:96:ed:a0:3f:6c:89:74:2d:c3:86:0e:8d:70:2b:6b:
d1:f5:32:b0:26:59:29:d6:61:59:43:cb:7e:05:a4:15:82:a4:
df:df:c5:79:ee:ab:e0:ea:3a:cf:9f:86:b6:08:5d:a1:c1:39:
a2:4b:40:77:4a:1e:0b:fc:fe:7e:78:e6:98:35:dc:cc:3b:48:
b1:9b:b9:90:9e:07:dc:11:36:af:80:96:a2:ca:d1:25:38:43:
db:ec:dc:0b:9d:f7:10:b1:ee:b4:04:ba:02:6e:c2:5f:5c:83:
41:80:be:7f:f1:2d:66:47:39:63:78:6d:67:9f:37:c4:fb:5b:
31:4a:4d:4b:c1:d6:41:61:16:9a:01:5e:cf:6c:4f:ed:6e:a6:
7d:b1:2e:ba:55:92:57:ab:a6:61:e6:ea:80:09:1d:6a:1a:ce:
ff:0d:4b:1e:3b:20:82:34:91:e6:a4:a0:36:31:d1:f7:79:f8:
60:24:5e:85:8c:6e:df:9c:d7:c1:3f:a9:63:6a:f0:49:a2:5f:
b8:97:be:d3:f4:ca:0f:5d:4c:f5:34:a7:2c:e4:8d:c7:ac:2c:
20:af:34:62:dc:3e:57:fb:9b:eb:b6:e2:3e:6a:0e:e1:97:e1:
44:b5:dc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:45:33 2025 by rpki-client