Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: 9tv6zKOOKIlNt0P7pGFIHvXyS+DSDPIBYWusprm8+MY=
Subject key identifier: 84:31:F9:5E:21:1C:FD:3A:A4:42:A0:3B:1C:B7:DB:B6:BA:35:18:94
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 01976BBD5773AB60C35506A9E75B3D188BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 00:01:00 +0000
Manifest this update: Sat 14 Jun 2025 00:01:00 +0000
Manifest next update: Sun 15 Jun 2025 00:01:00 +0000
Files and hashes: 1: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: M6rIeZololRj2stfNz4vxdOEDTfv8CsqTv8sHuDaUeM=)
2: OseFlpN5BBrbNEKlLXg6nEL0mf0.roa (hash: 656ZLuWKc6figtfDxdhxBQM6z66wyeYFhuGY7fphkn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:57:73:ab:60:c3:55:06:a9:e7:5b:3d:18:8b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Jun 14 00:01:00 2025 GMT
Not After : Jun 15 00:01:00 2025 GMT
Subject: CN=8431f95e211cfd3aa442a03b1cb7dbb6ba351894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:78:65:8e:d3:f0:a6:fd:5a:19:68:53:b4:aa:
4d:3e:ce:7b:13:b1:65:85:39:89:29:7d:4f:c4:80:
17:b9:15:f2:41:7b:9f:c7:4c:16:66:15:72:b9:5a:
c2:f5:87:a4:0f:c4:f6:73:8a:67:ef:ae:6c:0b:69:
05:5c:3a:34:29:ec:07:e4:c2:17:d0:28:97:ec:bb:
3b:9f:b3:76:18:1d:16:43:44:92:a8:13:36:c9:1b:
ca:07:83:5f:d6:a6:32:4d:b4:1e:77:90:e9:20:d8:
e8:0a:ca:a0:bd:68:6f:fe:d8:c8:21:41:47:b2:ed:
1e:16:d0:37:28:fe:ea:97:92:28:c9:25:cb:9b:c7:
59:17:dd:8c:f0:1e:5a:ad:e8:88:5b:36:0b:d3:7a:
40:d6:12:61:29:15:7c:f0:b8:f4:ae:af:fe:20:11:
d3:0c:a3:bf:5a:63:50:60:a2:82:ea:5f:08:a8:64:
b0:79:bc:0b:55:db:45:0a:5a:c4:e0:30:a0:76:44:
b1:9c:71:09:c9:36:df:5c:ce:56:e8:97:2b:e8:36:
d0:83:d7:17:0d:f1:3a:89:56:45:21:0e:bf:20:a6:
ee:17:0e:f5:89:cb:12:4e:ff:42:98:d7:cb:af:ba:
7b:16:c2:b0:06:c0:8d:79:12:83:0f:2f:38:e8:dd:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:31:F9:5E:21:1C:FD:3A:A4:42:A0:3B:1C:B7:DB:B6:BA:35:18:94
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3b:4f:34:80:05:13:9b:98:ae:74:86:30:71:6c:bd:63:92:
fb:d8:13:60:04:79:d2:ad:71:a5:95:a4:ba:18:f6:a5:38:26:
c7:1c:73:ea:7b:3e:85:70:8d:3f:9d:a1:78:76:8a:98:bb:80:
f0:8c:b8:dc:82:74:52:03:56:5b:a1:7d:a8:ed:e9:d8:0b:e7:
f0:37:89:da:06:08:50:4b:b9:33:bc:60:3d:34:90:8b:c5:17:
da:0e:84:4a:19:ad:ec:f9:8a:ef:77:67:ce:22:8a:de:33:d6:
ce:9a:14:7e:d1:9c:69:fc:a1:a5:e0:4d:ac:b8:86:ca:d6:4e:
15:1c:e2:80:99:80:d5:af:b1:83:06:61:2c:96:3c:71:d7:09:
be:d3:b2:db:59:a5:82:1b:28:77:16:1a:9c:c1:c0:43:65:3f:
39:f3:91:01:75:00:47:37:a8:df:86:39:7b:1e:23:6f:89:ab:
f6:86:38:f3:a9:36:27:ab:80:fa:8e:10:7d:b5:26:ae:5f:34:
b7:fd:49:fa:c5:13:98:61:59:24:a9:c8:b8:4f:23:a3:f1:a1:
e9:9d:fd:5d:51:a6:75:a4:c4:fa:a5:c5:42:08:20:a7:6c:b6:
ee:94:1a:62:4a:b4:45:3e:da:a7:13:fd:c6:85:a8:a3:00:bc:
10:38:5c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:50 2025 by rpki-client