Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier: kMDF4HBzbCHWbWKqqFX/Dn3xcsjHQHfZrNkFgsRFM+I=
Subject key identifier: CC:57:73:CC:8D:D2:84:04:9B:04:3D:B1:7E:91:10:E4:8A:C9:59:B8
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 01977AF9911F71432C70D46AA89575815891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number: 0853
Signing time: Mon 16 Jun 2025 23:01:05 +0000
Manifest this update: Mon 16 Jun 2025 23:01:05 +0000
Manifest next update: Tue 17 Jun 2025 23:01:05 +0000
Files and hashes: 1: 3kGa7kLBm042LbbqykHtZB7ufPc.roa (hash: w1pGOLasw4Pb62ELUrEIQqwR4u8hfryDi61TGvccVyw=)
2: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: U+hem7gJVsgEZ9hXGunhONQKrOFtgR2q2hkqjB2GgNc=)
3: F6fQGiNxub0Asxw2Ftlalm35-sI.roa (hash: wYkSnnpKM5pfTpyfgZw3XQ3Jd7ZS+gOnc16p21qV1JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:f9:91:1f:71:43:2c:70:d4:6a:a8:95:75:81:58:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Jun 16 23:01:05 2025 GMT
Not After : Jun 17 23:01:05 2025 GMT
Subject: CN=cc5773cc8dd284049b043db17e9110e48ac959b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:e9:88:fa:a5:9b:32:37:71:99:ed:1d:30:
89:8c:28:35:f5:8e:09:4c:00:18:76:d2:57:f8:76:
97:2f:cb:11:47:de:83:75:92:f8:72:9d:28:c8:7a:
ab:14:ae:8d:99:94:e0:ab:a1:ea:02:c2:64:04:d7:
6b:16:fc:94:5c:93:c4:e8:f0:fa:f8:5a:1f:c6:10:
28:a0:d8:a3:54:9b:16:cd:2a:ef:d5:40:6c:2e:66:
44:e3:27:b9:63:39:bf:c6:94:8b:7f:22:21:67:75:
47:c6:2e:d3:21:d6:3d:62:59:10:e9:78:7c:a4:50:
b3:98:45:0f:ff:93:ac:e7:bf:8e:9b:0f:07:7d:34:
cd:d8:e4:07:6f:9e:ff:70:be:51:c5:57:dc:eb:9a:
54:77:a8:8e:ce:90:bd:0a:b4:8a:94:45:6f:1d:de:
8d:d5:86:d5:18:54:b6:24:10:22:50:38:30:dd:e8:
84:45:af:2d:41:68:e2:13:81:dd:65:82:48:07:91:
c5:fa:1b:c9:c1:26:e5:70:dd:0e:5b:8b:2e:6d:07:
96:85:50:4a:95:d3:ff:76:6d:fc:fc:5f:a9:8f:56:
c7:67:0c:4e:92:76:31:8a:2b:6e:e8:f9:33:ec:32:
01:7c:62:c4:57:d2:b8:af:50:36:e5:f5:cf:93:3a:
17:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:57:73:CC:8D:D2:84:04:9B:04:3D:B1:7E:91:10:E4:8A:C9:59:B8
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ef:31:ff:10:73:2f:0a:0e:e6:d4:96:36:6e:f0:a0:99:2e:
9e:71:21:06:4d:68:31:34:3d:22:33:9b:21:f6:7e:2c:6f:32:
7f:58:1a:02:db:62:b1:bc:d0:43:f6:19:77:a4:7a:38:75:4b:
98:47:da:4b:80:e4:b9:b3:08:2f:fe:42:d3:54:ed:95:02:b7:
5d:f5:ea:42:bd:34:8e:d0:0c:4d:49:dd:6a:41:8a:7c:ef:80:
a3:3d:ae:f5:e7:bb:c7:75:97:78:fa:8f:11:69:70:1c:5f:b5:
ce:f9:51:d2:70:37:02:a9:7f:fa:9e:f4:74:37:cd:b5:e4:59:
39:eb:9d:06:f2:40:a1:45:c9:f6:76:b9:e1:19:c2:b7:2a:8c:
6c:04:30:ad:e6:09:fa:0c:05:0a:f0:aa:aa:80:5a:e1:5f:17:
1b:38:07:97:bc:50:a7:a2:a5:55:81:71:5f:e9:60:ca:9a:fa:
fb:9f:4b:63:e3:fe:0f:9d:74:54:a4:bd:fc:49:fa:93:c0:d6:
56:0b:18:29:c1:85:b5:1e:9d:d6:ce:ed:41:72:8f:c3:9b:43:
68:fa:66:62:89:48:73:44:7f:0d:a2:5a:97:24:f2:eb:16:d7:
8b:b4:7c:04:91:9c:ad:85:ed:7a:6a:20:86:40:54:34:35:d5:
62:6d:cf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:15:55 2025 by rpki-client