Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft
File: bHwktnELOtfXKCoMlH9rlTHVjsU.mft (raw, json)
Hash identifier: LN0tUHiGz0qyEdq+ixDnf/mJV389CZRmHZTDDhYcZZY=
Subject key identifier: AE:46:53:D9:9A:E0:92:3F:A3:10:9E:54:3A:4E:67:4E:6C:83:EC:E2
Authority key identifier: 6C:7C:24:B6:71:0B:3A:D7:D7:28:2A:0C:94:7F:6B:95:31:D5:8E:C5
Certificate issuer: /CN=6c7c24b6710b3ad7d7282a0c947f6b9531d58ec5
Certificate serial: 0198879FA7BE93CC8437633E26C465F07562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHwktnELOtfXKCoMlH9rlTHVjsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft
Manifest number: 161D
Signing time: Fri 08 Aug 2025 03:00:43 +0000
Manifest this update: Fri 08 Aug 2025 03:00:43 +0000
Manifest next update: Sat 09 Aug 2025 03:00:43 +0000
Files and hashes: 1: bHwktnELOtfXKCoMlH9rlTHVjsU.crl (hash: 3Z8dI91HaOy2xgMKIsaaNgcaJuKwjelMrQBBeWL/wkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHwktnELOtfXKCoMlH9rlTHVjsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:9f:a7:be:93:cc:84:37:63:3e:26:c4:65:f0:75:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c7c24b6710b3ad7d7282a0c947f6b9531d58ec5
Validity
Not Before: Aug 8 03:00:43 2025 GMT
Not After : Aug 9 03:00:43 2025 GMT
Subject: CN=ae4653d99ae0923fa3109e543a4e674e6c83ece2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:b6:6d:a1:06:3c:0a:54:79:08:fc:6e:40:
2f:24:2a:06:81:21:ea:69:f2:b0:0b:ac:40:86:5d:
a4:d9:94:89:14:f3:80:91:4a:5d:ed:46:42:62:a6:
da:a7:8a:5d:ff:0e:ec:4e:66:13:8a:4e:89:da:88:
94:fc:50:d7:94:d5:ab:cb:6d:d2:3f:2c:a5:73:cf:
45:6c:d0:96:2b:94:d0:f9:b8:96:96:31:12:5f:67:
e6:77:ca:32:f2:11:bd:f1:99:9f:f3:ef:8d:a1:4b:
45:36:ff:aa:db:6d:e6:16:9b:56:f7:b4:0d:49:b8:
a2:62:54:99:ed:1a:84:a0:5d:16:97:33:08:38:d4:
e4:40:ee:9a:af:2a:ce:6e:d7:fd:6a:f8:32:9f:f9:
04:30:d1:14:59:b4:ea:69:37:59:c8:eb:dc:56:18:
4b:f4:7f:ac:85:24:88:a0:6b:df:e2:ec:46:6d:5b:
35:65:2e:97:b1:41:28:4a:79:c3:69:2a:9a:34:7d:
ed:a5:d1:c0:9f:10:57:b5:5a:5d:b4:ec:77:d1:0a:
81:ef:56:73:38:88:65:d3:3f:df:9b:36:1a:0a:92:
ad:ef:74:ee:b5:b0:bd:c9:8b:9f:b5:6d:de:79:a4:
c3:0d:30:0d:57:78:1c:86:92:e6:7f:83:56:9a:bb:
c4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:46:53:D9:9A:E0:92:3F:A3:10:9E:54:3A:4E:67:4E:6C:83:EC:E2
X509v3 Authority Key Identifier:
keyid:6C:7C:24:B6:71:0B:3A:D7:D7:28:2A:0C:94:7F:6B:95:31:D5:8E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHwktnELOtfXKCoMlH9rlTHVjsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5b:9f:bc:78:4e:8f:f4:e3:1c:da:be:89:32:9d:50:a3:ac:
4b:84:7f:0d:ac:1a:c6:3e:a9:6f:0c:3d:69:d1:45:84:a5:d3:
a4:25:b4:bb:ba:36:1c:b2:5a:01:99:db:29:2c:89:c6:5c:0b:
9a:75:c4:d2:8f:4d:e6:37:36:c9:53:87:52:b1:02:7e:e1:be:
fc:e5:c9:e1:ef:c3:a0:33:c4:a3:00:a0:23:79:5e:8c:33:b8:
52:49:b5:51:9b:6a:a2:94:af:85:81:60:41:30:56:e1:9f:b8:
72:85:a7:be:86:3c:2a:5e:cb:6d:f4:26:2b:92:2a:97:7d:58:
d0:06:fe:af:db:f6:14:57:48:cf:a2:37:e5:b8:28:f7:46:15:
29:f9:c9:30:61:2f:e7:12:a8:2f:70:91:57:6b:e3:03:68:b8:
0d:ff:a4:ce:09:6d:0b:7f:1b:ca:89:a4:0a:cc:ae:25:da:3d:
af:f0:95:52:cd:75:d7:55:86:a6:80:fb:d3:5a:80:e8:32:40:
88:30:e9:3f:69:ce:32:7d:0f:86:4b:e4:99:e1:a6:aa:f5:74:
0a:ed:66:e3:e7:8b:57:c7:8d:04:f3:6f:f3:7f:05:9f:5e:51:
d2:25:5f:b2:98:1c:f6:06:d0:b1:e2:49:c9:ab:2c:56:2e:a9:
bf:72:6f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:09:42 2025 by rpki-client