Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier: dpuD2stQ4KRoUsQU65dmTsxGWicjU2CwXYR7RyL0uvM=
Subject key identifier: D4:0A:7C:32:43:F3:4A:7C:4E:C2:B9:C8:B2:AF:0D:9B:8B:95:AA:94
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial: 01989749BF53500B016795BB2C4224D494EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 04:00:49 +0000
Manifest this update: Mon 11 Aug 2025 04:00:49 +0000
Manifest next update: Tue 12 Aug 2025 04:00:49 +0000
Files and hashes: 1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: FjEYaC81aPlFmV7/uugoimQsQBSg1oldbE1M2YswYDs=)
2: BliaGrjDAqHKNEj9Mx9veOEBPEw.roa (hash: Zp3YmeNzMTw4uQ2BI2h1hZyUbxrVTAnKdQaDtTTNRXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:bf:53:50:0b:01:67:95:bb:2c:42:24:d4:94:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
Validity
Not Before: Aug 11 04:00:49 2025 GMT
Not After : Aug 12 04:00:49 2025 GMT
Subject: CN=d40a7c3243f34a7c4ec2b9c8b2af0d9b8b95aa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:e7:f2:0e:cd:82:1f:4e:61:36:92:69:99:
2b:b0:29:f5:9d:37:5b:7b:97:32:1c:2d:4d:70:bc:
8a:7e:3b:38:6a:a2:3c:68:93:26:49:14:8e:2e:67:
05:25:c3:21:6d:53:22:7e:75:e2:59:5e:4e:34:74:
67:6a:20:ee:77:81:0f:e0:3f:7a:37:7a:d7:b8:7d:
e9:3d:4d:51:30:fa:5f:59:5b:7f:87:b6:c2:6a:60:
3d:b7:8c:d4:82:33:ab:cd:81:80:9b:71:e4:b8:0d:
b5:82:70:fd:30:5c:1c:28:c7:ab:e1:8b:b5:34:c5:
9b:a9:47:d3:da:ca:c5:6c:0c:06:fb:bb:f5:ac:4e:
e4:8f:88:cd:45:6e:a7:d8:4a:ae:cf:a9:79:da:6a:
d2:68:4c:02:1f:06:79:4d:9f:7e:9c:97:18:8a:3a:
9f:52:d4:18:8b:5e:57:94:42:46:a5:c8:c4:ab:30:
06:63:0a:ab:44:e5:3f:8b:39:40:1e:69:24:aa:1e:
62:82:95:24:83:83:69:d1:3a:41:21:52:90:e5:66:
08:2b:0c:11:ff:d6:9a:58:dc:22:42:ee:88:2d:69:
9a:63:9f:e7:96:99:2f:ea:0d:94:ec:8f:58:78:db:
a8:5e:2b:71:79:5a:59:99:65:a1:bd:3f:a2:5d:00:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0A:7C:32:43:F3:4A:7C:4E:C2:B9:C8:B2:AF:0D:9B:8B:95:AA:94
X509v3 Authority Key Identifier:
keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c3:69:bd:21:1a:49:53:c8:1d:3e:96:24:f3:49:d8:08:53:
3c:7e:ca:17:4a:1c:5a:cd:3b:10:c8:85:da:13:d4:72:8a:92:
e3:1d:3a:81:4e:59:63:b7:00:4a:49:de:a3:38:78:32:aa:29:
e5:51:e2:e8:e8:1a:7b:9a:81:e2:fa:99:cc:a7:26:5b:4b:f6:
6e:6e:7c:43:90:19:85:a2:dc:64:ba:bd:b0:8f:db:4e:66:23:
d8:aa:ff:d4:2d:92:44:b1:e9:79:ba:a2:8f:a4:a5:09:96:e1:
a7:04:e7:d0:f9:9b:6e:27:d6:d5:8e:ea:18:18:b2:c5:28:b7:
31:57:14:b3:c6:b2:cd:2b:0a:f0:6d:e0:00:13:a6:a1:0e:be:
f7:50:16:8d:4e:c7:27:94:5d:44:8a:77:bb:1f:8e:77:96:fe:
5c:bf:3a:11:4c:09:a3:cd:92:02:8d:3c:d8:1f:cc:a4:ed:21:
22:91:98:69:79:7c:c1:d8:bc:af:77:67:38:ee:88:ae:f7:8f:
69:32:62:08:cf:c6:12:df:19:50:85:14:4a:80:da:0f:0a:89:
c3:9e:9d:bf:6e:69:c5:21:b6:50:00:c7:47:62:38:cf:25:08:
e2:9d:df:93:e7:e8:e2:75:8a:bf:48:b9:b1:18:57:c3:dc:6d:
64:53:9c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:26:34 2025 by rpki-client