Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: o1vBpiBGwFMZeB95+s4vJ+WTwXtB2WI/oK4sJNxLZJI=
Subject key identifier: 7A:C4:25:41:D4:EA:20:84:F4:8E:E3:48:DA:DA:C8:45:F9:F1:70:5B
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 0198737425A77B922134BD9C5A6E98955034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0ADB
Signing time: Mon 04 Aug 2025 05:00:48 +0000
Manifest this update: Mon 04 Aug 2025 05:00:48 +0000
Manifest next update: Tue 05 Aug 2025 05:00:48 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: BXGc1/jXfTEqUcblpK9lGnBSBqGmi1dyzh8JasvWCQA=)
2: UiH643w1GrSMb8MdWOXuMKoflu8.roa (hash: Ox1u3sls+4F8aVo0Ns4HTUNM65vIvg8OdP6tILBOlsE=)
3: rLCMQEvNZKScfiZ6xzabxSP9S3Q.roa (hash: pzK0hpbuvro5D5X8t6Q8snrn8GpjD/ysREOxL+vWCA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:25:a7:7b:92:21:34:bd:9c:5a:6e:98:95:50:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Aug 4 05:00:48 2025 GMT
Not After : Aug 5 05:00:48 2025 GMT
Subject: CN=7ac42541d4ea2084f48ee348dadac845f9f1705b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:39:fd:e4:e8:a1:5c:8e:4a:85:e3:df:28:92:
ed:ad:18:b5:f0:45:e0:6f:63:94:dd:4c:7b:81:5c:
db:7d:7d:3d:c1:4e:9c:05:38:eb:4a:9e:57:83:e3:
fd:a2:80:f3:85:a6:29:5c:81:f2:fa:9d:ca:46:15:
9d:95:6d:eb:3a:c8:11:48:67:2e:32:ae:9d:ef:92:
d9:91:31:65:0e:d7:a1:8b:be:46:f8:ec:5c:4e:f0:
d5:24:c2:40:3f:f3:16:81:d4:b6:0b:0f:f5:99:54:
2e:5f:99:1e:65:45:f8:5d:aa:ff:5f:08:19:2c:1e:
ca:21:8d:c4:7e:e8:90:58:eb:50:cb:30:e9:0d:ab:
b9:f9:69:a1:97:c0:c5:1f:32:3d:f8:2a:b1:27:45:
4c:32:ee:8d:ba:51:08:c7:b3:76:11:9a:1f:ed:35:
5f:6f:e5:b4:19:f2:85:ba:cd:d2:06:e7:09:be:f0:
ec:96:3e:af:7f:8d:b4:a5:c6:de:77:d6:22:12:44:
ce:43:55:62:2c:ab:75:bf:a4:05:10:b5:cf:9e:47:
05:11:05:e5:f9:b1:75:93:76:60:34:a8:5c:91:f6:
ac:61:9d:64:63:6a:7e:8a:f8:1e:0c:af:7f:e6:2c:
7f:e0:8a:b5:92:85:3b:53:39:c9:cf:5f:5f:c9:b5:
a0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C4:25:41:D4:EA:20:84:F4:8E:E3:48:DA:DA:C8:45:F9:F1:70:5B
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:55:a5:c9:45:9c:29:23:1a:a0:9c:81:15:6b:9a:62:7f:1c:
e5:45:e6:7e:bf:c6:7c:b1:42:3c:a4:e0:83:90:4f:7f:f0:27:
39:df:04:44:83:ce:81:68:f5:5e:18:44:da:3c:d5:5e:ee:c6:
e3:ae:5e:38:92:40:83:56:dd:d9:7c:be:54:09:da:11:4e:43:
00:2c:10:ec:2d:1b:9b:18:d2:6b:58:87:ef:f8:df:b0:7c:b7:
9f:55:6f:f1:10:d5:88:74:14:34:e3:3a:b7:01:39:87:e7:3c:
0a:05:9e:4d:cc:7f:f5:cb:d5:6a:ec:2c:60:f0:77:8a:f1:76:
98:8c:42:e4:57:d2:48:76:6f:cb:44:05:43:b0:43:df:6f:02:
ce:d9:9f:b4:f8:61:cd:85:a1:6c:1b:a9:26:c2:c9:39:a6:20:
d9:52:4f:1d:66:b2:47:96:02:26:44:db:7b:3d:b4:41:68:dd:
e2:27:25:f1:f5:8c:51:66:a6:d6:2b:39:34:9f:70:ba:28:6d:
0d:ab:de:11:7b:cd:12:03:ea:e7:05:d6:92:c6:78:99:60:7c:
a5:b6:18:0d:46:d4:74:cd:1d:13:cb:2d:3a:45:da:e8:10:ea:
a6:94:04:93:0b:1c:46:76:b1:8a:d6:06:fd:6e:1e:fd:2c:60:
fc:75:06:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:46 2025 by rpki-client