Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft
File: bHwktnELOtfXKCoMlH9rlTHVjsU.mft (raw, json)
Hash identifier: QTTF9mxcey0gQVpybbn7J2R/OsgImdNv6S4y2jhpeJc=
Subject key identifier: 4B:AF:B3:62:E2:09:4A:B7:59:8D:11:5B:6C:49:12:7C:FF:59:5D:BF
Authority key identifier: 6C:7C:24:B6:71:0B:3A:D7:D7:28:2A:0C:94:7F:6B:95:31:D5:8E:C5
Certificate issuer: /CN=6c7c24b6710b3ad7d7282a0c947f6b9531d58ec5
Certificate serial: 01976F998FE321F5F927937028AA0B9970B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHwktnELOtfXKCoMlH9rlTHVjsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 18:00:24 +0000
Manifest this update: Sat 14 Jun 2025 18:00:24 +0000
Manifest next update: Sun 15 Jun 2025 18:00:24 +0000
Files and hashes: 1: bHwktnELOtfXKCoMlH9rlTHVjsU.crl (hash: 2HvIUKXnp8mPZyg0SeMWt3UzdkO/GQLtn7yC3ydKvaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHwktnELOtfXKCoMlH9rlTHVjsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:8f:e3:21:f5:f9:27:93:70:28:aa:0b:99:70:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c7c24b6710b3ad7d7282a0c947f6b9531d58ec5
Validity
Not Before: Jun 14 18:00:24 2025 GMT
Not After : Jun 15 18:00:24 2025 GMT
Subject: CN=4bafb362e2094ab7598d115b6c49127cff595dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1e:8a:06:13:39:96:08:4e:2a:ac:57:0f:17:
bb:87:3c:c8:d6:88:8b:b3:b6:ff:53:7e:a7:9b:ae:
05:9a:a4:70:5d:6e:1e:21:39:91:b9:11:b3:0d:94:
37:15:5b:b2:ea:1d:0e:82:5c:c1:ec:22:5b:3a:5e:
10:1c:54:ba:3b:4e:2c:2f:dc:15:6b:38:19:88:a4:
78:38:02:53:5e:17:15:f3:21:fd:64:57:6e:81:57:
dd:57:2c:01:26:31:4b:df:4d:23:0a:49:b7:4b:5d:
e0:fd:43:2f:e8:51:02:1e:98:d9:d1:fa:d7:54:68:
30:0b:83:ae:18:f3:d5:f8:f8:9c:1b:42:e5:6d:48:
f9:02:34:cd:58:ff:5d:b8:30:ba:1c:3b:d0:1a:ba:
e6:01:a1:b3:91:14:40:54:fa:51:5c:ea:3a:f6:2c:
72:eb:84:f5:0d:5d:73:e4:a2:87:4d:0e:31:ce:45:
28:80:8f:ab:57:28:d5:e4:49:36:d5:22:28:c7:af:
00:e1:93:f9:25:c8:17:4f:58:2f:b2:26:d8:85:a3:
0b:eb:a0:fe:31:ba:f9:81:b2:e1:7f:35:a7:1d:d5:
f9:bc:41:11:c8:78:f5:15:40:15:73:d6:24:31:a4:
5e:b1:70:0f:47:bf:02:4b:af:2b:06:9a:40:bf:9e:
8d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AF:B3:62:E2:09:4A:B7:59:8D:11:5B:6C:49:12:7C:FF:59:5D:BF
X509v3 Authority Key Identifier:
keyid:6C:7C:24:B6:71:0B:3A:D7:D7:28:2A:0C:94:7F:6B:95:31:D5:8E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHwktnELOtfXKCoMlH9rlTHVjsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3c:22:2a:3d:fa:87:32:f7:c7:fc:63:20:73:20:7a:ef:cd:
82:87:1d:2b:ff:3f:8e:9e:a3:c3:6e:dd:34:d0:65:ba:3a:af:
e0:df:33:95:e6:4e:56:67:3b:53:e9:5f:9d:15:81:77:c4:dd:
0a:08:03:0f:ad:b8:ec:5a:4c:79:ec:12:c9:be:8e:2b:19:e0:
f7:06:bd:ca:bd:a5:fc:d6:2e:f4:67:d8:ea:29:a9:e9:1a:b6:
9a:f8:d4:02:cf:43:0a:4e:26:2b:de:8d:ac:f3:20:db:7b:3c:
5d:d8:9b:ee:4c:93:7f:70:0d:41:47:c6:e3:08:c8:c5:6a:93:
a6:13:2b:26:ea:66:ab:48:f2:22:55:31:02:d5:5c:60:30:5e:
ad:13:c8:f3:56:c7:b8:48:d6:fb:ed:39:e7:fc:15:04:a7:79:
2b:a7:39:f8:d7:0a:bf:8c:00:f0:a5:f4:f3:ce:38:a8:78:5f:
51:01:8d:a6:97:c9:d1:f9:66:bb:52:e4:30:fc:e0:ab:c9:bd:
c6:5b:aa:30:3b:4f:4f:29:c4:1f:b4:cc:62:b2:9b:db:eb:fd:
e4:08:b6:f4:04:f2:63:0e:4f:05:d1:3f:8b:c8:54:e7:ae:68:
5e:8e:d1:f5:c0:06:be:7c:da:e7:4a:f5:f6:12:c9:74:66:2d:
a2:09:0b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:59:56 2025 by rpki-client