
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
File: BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft (raw, json)
Hash identifier: Xm3MCSEiZygBWxKg//2OJlkEKMeuepRknhdegR4PQTI=
Subject key identifier: D2:CE:12:33:3A:07:97:92:B5:68:D2:B3:70:7C:4E:4D:97:42:81:B0
Authority key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
Certificate issuer: /CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Certificate serial: 01987374205761877058193633861C372896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 05:00:46 +0000
Manifest this update: Mon 04 Aug 2025 05:00:46 +0000
Manifest next update: Tue 05 Aug 2025 05:00:46 +0000
Files and hashes: 1: BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl (hash: POh/Fud3bKynqzFPTJpp81ttnjDrj2Ir0Ok0UOeEOCI=)
2: N7TBLk6ijg60Rw5drnJxmPzvOok.roa (hash: Gzj1MrzdxuXElz1N9UYhs6KigXCuOfoYMXiwL2fVYSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:20:57:61:87:70:58:19:36:33:86:1c:37:28:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Validity
Not Before: Aug 4 05:00:46 2025 GMT
Not After : Aug 5 05:00:46 2025 GMT
Subject: CN=d2ce12333a079792b568d2b3707c4e4d974281b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:bc:16:81:63:1c:ac:19:0a:07:bc:3f:3a:
f5:b9:ec:ff:12:94:2f:66:07:42:91:32:52:4b:4c:
e2:ec:1e:ba:42:ab:91:07:0f:50:75:a3:2a:20:a8:
51:72:c3:db:43:0f:08:d0:0b:dd:78:c3:7a:94:c6:
48:55:b1:3f:a3:75:8c:ed:70:42:a8:ef:33:80:42:
e2:61:09:d9:42:44:b5:51:c8:6b:e3:72:b8:20:15:
2e:7f:95:90:2d:70:ea:a1:ca:0f:6a:d9:0b:70:ad:
99:97:39:3c:65:0f:35:0b:23:47:ce:d8:70:06:45:
e2:6e:6d:74:e7:70:a1:e3:86:18:54:c1:1b:2a:81:
53:95:c9:d5:b6:ca:22:f2:96:22:de:49:93:10:fa:
e1:fd:ad:5b:a6:05:36:69:43:73:44:a0:c1:2a:8b:
42:07:04:bf:71:58:03:f7:1e:08:3d:35:24:8f:81:
2e:e2:20:e7:fe:b8:cd:bf:d8:9b:15:58:eb:83:d8:
66:66:e3:fe:3f:e1:0d:eb:92:ba:4a:02:29:a4:e2:
ce:25:de:df:81:9e:af:6f:86:25:23:82:b9:a7:23:
13:f9:39:39:3c:a9:0a:9b:75:dc:ad:bc:5d:4c:82:
42:2b:5e:13:84:06:ae:69:ca:aa:c0:3e:c7:6e:09:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CE:12:33:3A:07:97:92:B5:68:D2:B3:70:7C:4E:4D:97:42:81:B0
X509v3 Authority Key Identifier:
keyid:06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:da:e3:08:86:cc:a0:ff:f3:a6:7e:65:37:8f:5b:05:60:2f:
13:0a:98:0f:8f:fc:3e:9e:d4:d3:0f:b7:bd:6b:1e:fb:f7:a8:
b0:ad:9e:e4:c2:4d:a9:23:a5:53:18:82:26:70:35:04:44:bc:
db:f5:64:75:a8:20:ed:65:64:ed:fe:23:76:da:5d:3d:e3:93:
1a:6d:97:b1:50:16:f0:75:09:60:4b:46:89:6a:de:80:84:ee:
a5:f8:1b:de:47:dd:cf:5c:1b:5d:10:5f:5d:4f:ff:f3:3d:53:
81:2b:64:4b:38:dc:f7:6d:fd:05:a0:1e:13:c7:a5:c9:f1:ea:
41:e4:f8:53:37:56:d6:6b:0f:d6:d5:2f:d8:10:6a:83:ef:ba:
a1:5d:28:10:f0:c0:ca:c2:27:8a:10:63:78:3d:d3:ed:c4:67:
2c:87:af:ec:92:27:ee:8c:3a:a2:28:b2:d3:d6:ef:bf:c5:e1:
d8:a3:1e:eb:7b:49:1f:07:b2:77:0b:d5:97:98:82:3a:0b:ba:
93:84:dd:e5:e9:2b:3b:6c:90:21:56:52:e1:37:a4:bf:23:54:
47:4a:59:9c:48:99:8d:43:a7:fa:c3:69:69:11:85:1b:52:8c:
1d:80:8f:b3:09:32:b5:c2:80:27:86:90:62:d0:ad:de:73:e3:
92:72:4a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:40 2025 by rpki-client