Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: I2qCKRFrO5Lfm2Lm5qC2kXOura3f2b/FLMAO6rft0Us=
Subject key identifier: 17:8B:42:3A:C7:91:61:56:B9:02:9F:D6:E1:48:AC:58:52:35:6C:FD
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 0198744FA927AF11EF62294DD5EB03058159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 09:00:34 +0000
Manifest this update: Mon 04 Aug 2025 09:00:34 +0000
Manifest next update: Tue 05 Aug 2025 09:00:34 +0000
Files and hashes: 1: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: hUIUnQRByuMqYJSQf7KNkjeeuimodwhLs0TP+Ns1lsU=)
2: OseFlpN5BBrbNEKlLXg6nEL0mf0.roa (hash: 656ZLuWKc6figtfDxdhxBQM6z66wyeYFhuGY7fphkn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:a9:27:af:11:ef:62:29:4d:d5:eb:03:05:81:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Aug 4 09:00:34 2025 GMT
Not After : Aug 5 09:00:34 2025 GMT
Subject: CN=178b423ac7916156b9029fd6e148ac5852356cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ab:53:4a:54:8b:11:ca:f3:f3:72:38:86:b9:
6c:77:23:5b:10:a0:0f:ca:3e:09:14:8f:d6:5a:99:
ef:7d:37:3e:5b:5b:3d:77:e1:06:3f:de:ee:a9:09:
12:1c:ff:86:27:db:31:c1:b1:1a:68:a9:9f:ea:6b:
77:d9:fb:68:62:64:47:69:57:7a:f4:82:a8:db:b0:
a4:9f:13:06:85:8a:41:43:14:0b:c3:6c:64:30:0c:
1b:b6:95:9f:51:ea:10:9f:6d:72:13:90:42:aa:63:
fc:97:c5:f8:d2:9f:88:67:0f:2c:ff:7a:a4:e1:d2:
29:de:1c:03:40:c0:27:56:ac:81:5f:ab:96:2d:1b:
6d:c5:fd:63:56:88:49:2b:fd:96:00:ee:a1:1e:52:
57:e2:84:0a:28:4d:b9:c6:79:12:ca:39:81:36:6d:
1a:35:e4:33:86:99:23:80:51:fa:70:d7:23:59:d7:
6a:b9:b1:0e:72:e8:3d:85:5d:4c:92:97:c8:a4:92:
db:88:a3:62:cd:e1:33:1d:65:58:4e:5a:a5:a5:be:
97:da:c5:9f:15:05:58:ca:54:ae:a7:fd:af:2e:c3:
22:e0:8a:d8:af:ce:aa:58:15:db:68:b8:84:9a:24:
5c:9f:e2:42:40:6f:e5:00:bc:b0:b4:c8:e5:10:9b:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8B:42:3A:C7:91:61:56:B9:02:9F:D6:E1:48:AC:58:52:35:6C:FD
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c8:41:a7:1a:7d:8c:f9:48:9a:1c:ca:54:c7:c2:b2:e4:40:
87:50:70:b8:68:66:45:02:23:cd:21:77:77:2a:2a:4a:1b:2b:
32:0a:31:13:7c:db:f4:6f:5c:80:f1:80:cd:99:80:c4:1a:95:
c3:19:fc:aa:0d:dd:b3:5b:1d:e0:82:14:f7:e5:74:c7:60:49:
f1:42:87:18:4e:5f:31:e1:b3:4b:7a:c3:c6:44:54:76:f8:9b:
c1:03:1f:a5:84:b4:3d:18:24:7a:7c:23:30:a3:6a:34:5b:a5:
30:0b:ef:79:23:be:06:f5:84:53:a7:0f:c5:19:17:03:71:50:
1f:b0:cb:6f:f7:74:43:3f:bf:01:67:f0:43:e2:02:8d:f6:a6:
8a:cc:73:6f:eb:f7:f6:64:e8:2a:6d:5f:a6:42:bf:d3:05:bf:
06:98:ee:7c:f2:6b:ae:b1:f3:e5:00:02:50:36:a3:31:36:71:
d0:ce:e8:ba:95:5c:8d:54:37:fa:02:92:54:dd:26:4a:14:ab:
89:9d:0a:a4:8e:6f:4b:e8:c9:b1:5a:03:ba:64:07:76:76:7e:
07:ef:ab:55:c8:39:31:b6:34:9b:bc:20:b9:7e:04:88:f3:a0:
f6:f9:27:2a:47:e2:c3:48:7c:8c:9e:70:19:1b:c1:75:1c:f9:
08:c8:87:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:21 2025 by rpki-client