Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier: 3WHn45mVgkDNqnYlH33kTt+A8iBZviauN1nGbu4hAd0=
Subject key identifier: A8:27:34:D7:E0:4F:E5:08:00:EE:66:6B:22:AB:5F:86:09:BE:59:21
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial: 019A4D747B512B2F21BC68F580E1EBFAB550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:01:10 +0000
Manifest this update: Tue 04 Nov 2025 06:01:10 +0000
Manifest next update: Wed 05 Nov 2025 06:01:10 +0000
Files and hashes: 1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: DUy4U99xUb8DRLPSqDRx+cSvLqvHUQQtSoZfk6RM2GU=)
2: BliaGrjDAqHKNEj9Mx9veOEBPEw.roa (hash: Zp3YmeNzMTw4uQ2BI2h1hZyUbxrVTAnKdQaDtTTNRXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:7b:51:2b:2f:21:bc:68:f5:80:e1:eb:fa:b5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
Validity
Not Before: Nov 4 06:01:10 2025 GMT
Not After : Nov 5 06:01:10 2025 GMT
Subject: CN=a82734d7e04fe50800ee666b22ab5f8609be5921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:9e:ca:20:b1:ca:2c:a5:d9:dc:64:05:b0:
c1:7d:1a:48:20:5e:a6:f3:1a:2a:51:70:77:a7:37:
e2:f0:0a:6b:5f:f3:6d:68:dd:64:27:bb:6c:eb:cc:
d8:ea:9b:33:38:cc:c7:31:b5:3d:50:51:ba:4d:56:
ca:87:54:1c:0a:da:f4:97:db:7f:af:47:5e:89:aa:
63:1f:17:91:4e:d1:e7:5f:a6:fc:32:36:f4:21:3e:
8f:f8:e8:ce:1c:ce:e1:84:28:1f:91:52:a6:47:7d:
14:45:2f:f4:1e:c8:e9:14:f8:c2:60:95:e1:5b:39:
15:68:f8:2a:dc:86:d5:76:63:e0:2d:ae:f0:61:3a:
7d:a0:0d:20:da:d2:92:7c:f9:5e:76:cc:98:33:e7:
bf:48:08:db:c9:78:73:3a:d7:7a:cd:6e:39:7c:2d:
de:8c:2b:36:55:f3:40:b8:c6:5e:6a:ff:65:7d:cb:
df:75:8c:b9:d7:ae:3c:bb:1f:81:27:f3:07:53:d5:
10:12:a7:bc:24:e8:9b:9a:b1:e3:31:95:7e:2a:e0:
87:1b:64:20:1a:4b:7f:23:45:c2:26:98:f5:2a:12:
91:7b:88:49:84:d2:51:fd:7d:c3:59:cd:c8:af:98:
d5:de:bc:7e:29:fc:58:2b:79:e6:82:e0:9b:bf:31:
4e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:27:34:D7:E0:4F:E5:08:00:EE:66:6B:22:AB:5F:86:09:BE:59:21
X509v3 Authority Key Identifier:
keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c9:16:2e:bc:f3:e6:fa:84:62:0c:05:2e:fe:ca:33:cb:a7:
3f:4b:aa:1b:d9:e1:8b:82:99:52:66:6f:fe:41:97:16:d3:d9:
cd:af:1d:cb:c6:80:a2:77:fa:42:ab:65:c0:a0:ec:d3:ab:fb:
c7:72:fe:55:ba:38:6b:fd:4d:3d:c3:f8:fa:6b:d7:dd:da:ab:
dc:87:2e:dd:5e:19:70:9c:0b:5a:70:3d:e5:48:bb:83:9e:77:
9f:22:c4:03:ed:f2:ec:fb:d6:51:d0:28:8d:5e:28:e7:9e:be:
2a:56:26:12:31:61:a9:85:e6:76:48:a6:bd:2d:f6:45:d3:56:
f2:12:a8:f2:3d:56:b8:26:64:7f:f9:df:b6:9f:94:e6:6a:2f:
09:ff:77:1e:92:1a:ae:74:68:62:2f:b7:67:00:6a:bb:f4:d0:
fc:f6:49:30:9f:5e:60:1e:65:12:b5:bb:ab:74:af:84:16:1f:
96:0a:bb:79:f4:5d:14:ce:98:81:fd:47:bd:6a:9b:85:55:d6:
5a:61:79:b3:6b:98:44:b9:18:0c:ad:dc:9b:50:87:43:87:4c:
83:74:f3:e3:d5:82:05:43:cf:f6:35:d2:8c:d6:10:bd:69:c5:
ec:8b:5f:ef:d2:30:93:bd:c8:1f:23:71:65:4f:b3:85:f3:74:
03:f5:25:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:28 2025 by rpki-client