Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier: KijUwBlw0jkuRWPHd3knzfsxqwwM2sV4ZRsGSGOBcqE=
Subject key identifier: AF:DA:21:B8:21:81:DF:51:FC:AF:0D:C3:7A:86:A2:43:34:C5:5C:74
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 01989E95AA2EB7607FF62A0CF53AB7A42D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number: 08EA
Signing time: Tue 12 Aug 2025 14:01:05 +0000
Manifest this update: Tue 12 Aug 2025 14:01:05 +0000
Manifest next update: Wed 13 Aug 2025 14:01:05 +0000
Files and hashes: 1: 3kGa7kLBm042LbbqykHtZB7ufPc.roa (hash: w1pGOLasw4Pb62ELUrEIQqwR4u8hfryDi61TGvccVyw=)
2: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: rajGwZ8F0A04TynE6AR7So/yKuSvR5e00ycrHMlxFrU=)
3: F6fQGiNxub0Asxw2Ftlalm35-sI.roa (hash: wYkSnnpKM5pfTpyfgZw3XQ3Jd7ZS+gOnc16p21qV1JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:95:aa:2e:b7:60:7f:f6:2a:0c:f5:3a:b7:a4:2d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Aug 12 14:01:05 2025 GMT
Not After : Aug 13 14:01:05 2025 GMT
Subject: CN=afda21b82181df51fcaf0dc37a86a24334c55c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fc:f3:de:9e:cc:04:7b:04:8b:f4:51:65:45:
0d:a6:ab:b4:9b:ac:43:04:65:13:ea:9b:ab:bc:a0:
0c:8a:49:71:96:fa:d0:52:35:5d:79:ed:75:04:12:
7b:05:29:70:0b:41:fe:25:97:35:14:d5:4f:92:de:
f0:3b:26:bb:1c:7d:ce:60:66:1a:78:f3:1f:35:13:
49:52:3f:61:86:e8:ec:8d:44:b4:2c:91:a4:b3:e0:
1a:ce:99:67:aa:86:8e:32:d4:11:f0:6b:02:7c:dc:
64:1d:7a:c3:cd:e4:f5:7e:de:61:ff:f1:f5:76:45:
ca:d1:47:14:1f:f6:d4:ca:33:3e:2e:61:44:50:00:
97:70:e0:56:41:45:ca:0c:93:95:e6:23:ef:b1:4c:
87:9d:e0:5a:ad:14:d1:69:5f:8d:54:33:da:1b:b8:
8c:53:1b:b8:35:43:fc:8f:ed:80:7c:46:e1:30:4e:
a1:8b:35:0a:63:0e:6f:14:5b:c8:7f:9d:d2:3b:2d:
50:5e:5d:0c:b6:6b:ad:7c:e3:2b:ef:27:24:6b:22:
37:42:76:0c:d3:32:45:0b:71:35:d9:90:0d:27:50:
7a:03:97:39:8e:b6:3e:7f:4e:e4:eb:09:2e:97:f5:
50:a2:df:2b:80:4e:7b:82:8d:be:18:88:dc:63:17:
1e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DA:21:B8:21:81:DF:51:FC:AF:0D:C3:7A:86:A2:43:34:C5:5C:74
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6c:c4:f9:6a:85:58:0f:73:7c:7a:41:0b:96:33:e2:b5:aa:
3c:47:5d:a9:09:69:01:b9:d3:c1:48:e7:c1:cb:cd:9f:43:e1:
a1:e3:9e:48:d1:49:05:2b:70:3d:de:85:ce:1f:6b:60:11:0c:
b0:d7:d0:90:ef:e6:eb:65:80:9e:d0:b4:f1:63:36:3d:15:40:
93:17:b9:7f:fb:aa:2c:10:ee:3b:3a:cd:63:4e:48:a9:8c:b2:
99:21:dd:0d:8a:9b:26:20:dd:34:d5:6f:6c:13:c5:0e:33:a1:
e5:1f:6e:fd:6d:f6:c3:bc:ab:f1:28:e8:aa:76:8f:9b:a3:ab:
af:f2:80:8f:d4:ad:cc:31:c9:80:92:11:24:72:49:7c:d6:1e:
1c:bc:35:6d:72:19:b4:83:da:fc:70:14:05:0f:c1:0d:46:6a:
cd:a3:2d:58:9e:18:1c:51:a0:2d:ea:0e:6f:60:bf:a4:f6:e7:
c3:10:90:b5:6c:6a:61:be:22:90:51:1c:01:58:ff:8f:c4:b9:
53:03:48:71:44:a0:46:13:c6:f4:a7:35:40:f7:f9:5c:dc:4a:
ee:1b:54:b7:fd:2b:07:d4:e3:a5:53:4a:70:88:86:99:74:d7:
f7:08:c6:e9:03:8a:71:5d:69:99:c5:d4:aa:4d:a9:59:75:5b:
49:63:dd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:40:56 2025 by rpki-client