Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: cokYd+unAqXgQT3NeQTtVM9rn0cAwC7F41wF2UY2Wfs=
Subject key identifier: E6:24:D2:AF:07:3A:E0:3B:9E:A7:C4:FB:C3:C5:93:F8:FC:A7:96:5E
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 01976A061799F8DC7A698ACB4E4777360854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 16:01:13 +0000
Manifest this update: Fri 13 Jun 2025 16:01:13 +0000
Manifest next update: Sat 14 Jun 2025 16:01:13 +0000
Files and hashes: 1: 2GrFuxyxyHkqumdayYRyftHOCCA.roa (hash: 58WfiupeF7jv1/JuV3+ZtSw5ZmglbAvhKCWRK1cfUPw=)
2: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: 8ipTOxF+GPjMfgQczeDrsqqGTJbXrvCQ+XUz7vTNAZ0=)
3: EFrmvdYAVAISDnJyY9LHHEwKIkE.roa (hash: VVoG4KmLy8MCQlXZBg6STGy/fzjISq/IYVzwvcg57xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:17:99:f8:dc:7a:69:8a:cb:4e:47:77:36:08:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Jun 13 16:01:13 2025 GMT
Not After : Jun 14 16:01:13 2025 GMT
Subject: CN=e624d2af073ae03b9ea7c4fbc3c593f8fca7965e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:02:cc:f9:0f:bd:dd:4b:71:33:17:da:dc:df:
0a:68:c8:f3:c5:fa:fa:bc:05:dc:f7:85:94:4c:4b:
68:22:71:a7:59:63:5b:74:18:d9:e4:cd:2a:ba:80:
ff:71:9c:e4:1e:5f:e0:e6:9e:90:3a:34:85:99:05:
40:68:82:55:72:a7:b5:48:60:dc:5a:cd:db:aa:0d:
94:e1:66:97:6d:45:60:a0:41:c2:76:df:04:31:a3:
7c:ae:2f:6d:54:af:bb:fd:f6:31:c7:c0:c4:59:06:
7a:a5:72:27:bb:0b:f4:79:53:e5:ad:35:82:32:0d:
03:4a:6b:0f:0c:6c:ca:10:3d:52:c5:6c:b2:7a:c8:
1e:a8:f4:d7:9b:30:9c:4b:36:02:11:e7:6f:b2:28:
72:56:c9:92:bd:09:fd:37:80:65:08:5c:88:c3:6c:
82:cf:be:bb:71:07:6c:05:d7:70:99:52:a8:42:1a:
de:5b:05:e8:33:4a:c0:af:f7:29:90:5d:45:a6:e6:
85:fd:9f:2f:3d:2f:63:43:d0:0c:a1:cb:66:16:e3:
3f:8d:a1:40:bf:be:8a:12:07:ff:e3:9c:dd:47:b8:
e6:73:ac:ff:75:50:0b:01:6f:05:f1:50:b5:ed:7d:
04:bf:74:31:b7:be:eb:b7:df:fa:89:0e:47:1b:53:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:24:D2:AF:07:3A:E0:3B:9E:A7:C4:FB:C3:C5:93:F8:FC:A7:96:5E
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:21:ff:1e:fc:96:c8:70:53:f6:1d:fd:ad:16:8a:25:8d:ed:
31:c6:d1:85:8c:df:ea:ce:45:e3:7a:f1:d4:fc:43:9b:a8:6e:
19:32:76:b9:de:b5:8d:f0:ee:18:05:3b:79:8f:1f:ee:2b:eb:
fd:e0:eb:0f:0a:48:21:a4:36:aa:95:36:49:b5:f8:25:16:20:
83:16:dc:71:20:c5:ea:ba:c7:fe:2f:f6:af:32:d5:21:30:48:
d2:db:b7:78:59:54:2e:e3:72:20:ec:c9:02:ac:f3:22:7b:22:
12:d2:d9:86:1f:6d:b2:9a:27:bb:6d:91:07:bf:79:cd:c6:e0:
ce:d4:73:ab:87:4a:03:d2:c4:2c:5e:4a:c9:02:92:f5:aa:0b:
af:7f:72:ee:f9:1c:e2:56:9f:f4:14:85:d1:8c:55:1e:e4:82:
a9:f5:fb:75:c3:a2:84:9a:78:78:a8:71:b6:44:b0:b3:1f:5a:
5d:30:ca:fe:a8:5d:d4:e5:0d:32:35:ae:ac:a7:ca:fd:a5:61:
d4:67:92:59:06:a5:4a:09:de:ac:c5:f6:27:ea:50:cf:5a:95:
6e:4c:bc:00:bf:e1:b5:4e:60:bf:1c:3c:c9:9d:2a:cc:0c:98:
64:bb:2f:de:a1:39:11:92:7b:06:d9:56:46:18:63:12:49:b1:
ca:d6:a2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:53 2025 by rpki-client