Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
File: BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft (raw, json)
Hash identifier: 3nrbQB+NB+MBJsWLlNDa8iwo6mj6ikd8W+adAbYG0Zs=
Subject key identifier: 99:AC:FD:F7:74:AD:9E:C3:D4:B8:85:27:D5:44:50:C9:08:AF:0E:68
Authority key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
Certificate issuer: /CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Certificate serial: 01976CCFE62F0995B9F9696C80914730CCCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 05:00:53 +0000
Manifest this update: Sat 14 Jun 2025 05:00:53 +0000
Manifest next update: Sun 15 Jun 2025 05:00:53 +0000
Files and hashes: 1: BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl (hash: iYLrx6n6y5iJAMAD22IQh+QHWM5VlV2ox6s2pLqL57U=)
2: N7TBLk6ijg60Rw5drnJxmPzvOok.roa (hash: Gzj1MrzdxuXElz1N9UYhs6KigXCuOfoYMXiwL2fVYSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:e6:2f:09:95:b9:f9:69:6c:80:91:47:30:cc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Validity
Not Before: Jun 14 05:00:53 2025 GMT
Not After : Jun 15 05:00:53 2025 GMT
Subject: CN=99acfdf774ad9ec3d4b88527d54450c908af0e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:85:07:22:51:61:1d:a7:8f:e3:03:27:4d:
29:11:77:9c:88:56:66:05:ff:4f:ad:66:cf:2a:ca:
11:c4:63:96:cf:2c:b8:a9:44:e1:cb:f0:d7:88:8e:
49:93:63:79:38:02:31:11:d9:6c:aa:16:fa:52:37:
af:59:6b:6b:c9:9f:5b:7b:b1:20:11:3e:57:27:e8:
82:e5:86:9f:26:ed:49:13:46:29:37:bf:10:2f:b0:
81:8a:b9:9b:27:92:9b:ac:74:11:ad:d9:f9:1e:b5:
0a:df:1b:49:eb:ed:bf:5e:3b:0e:83:3e:10:fb:1e:
c2:83:53:b1:5b:e1:b6:4d:08:a2:45:8c:82:61:a5:
78:11:e4:ec:a5:e5:d2:42:b6:8a:27:3f:b6:55:fc:
f9:7e:aa:f3:23:cf:e3:d4:bb:8e:9d:42:6b:4f:35:
5d:1c:cf:95:7d:f5:ff:a7:d2:d9:6e:59:0e:86:0d:
f3:64:e4:15:ff:c9:f7:51:b9:e6:2e:c7:f4:23:aa:
7f:26:9e:c3:b8:81:94:da:1c:90:38:40:dc:6b:62:
e3:04:33:75:00:05:bd:cc:fc:a2:21:41:86:e9:fa:
7b:ef:2b:a5:7b:88:f5:c7:43:bd:d8:22:d7:78:f6:
5d:b2:bb:ed:6d:13:92:38:2f:20:c2:27:ed:20:c0:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AC:FD:F7:74:AD:9E:C3:D4:B8:85:27:D5:44:50:C9:08:AF:0E:68
X509v3 Authority Key Identifier:
keyid:06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ab:45:0f:2a:cd:ad:2b:a9:97:06:8d:48:01:8b:f3:77:24:
97:99:b4:55:11:06:b5:e5:f3:bd:5f:cd:42:32:f2:54:88:02:
76:88:5a:d4:85:b5:a8:40:0b:14:5a:c3:0f:3d:c3:96:09:19:
a4:87:f6:13:8c:1c:6f:1d:c8:63:dd:47:74:6b:fb:58:09:bf:
11:65:9d:5d:8e:ad:fc:08:a6:69:a8:45:90:46:18:fd:30:5b:
9b:a8:12:65:f8:51:f8:20:1b:16:4a:2e:df:3f:6f:b6:8a:50:
7b:c1:28:ab:7a:73:2c:ed:25:bc:2e:d2:5f:27:f4:5c:e3:5b:
f9:1e:8a:c8:b0:92:b9:89:1b:60:d7:7c:8c:e4:2b:16:62:ca:
22:5e:53:20:32:83:34:e3:97:b3:b8:36:ff:ae:18:9e:25:72:
d5:e9:b8:41:90:cd:7e:45:4b:0f:41:29:22:a8:92:2b:20:57:
f1:c1:84:0a:52:4c:2a:61:3b:ac:6e:76:f1:2c:4c:26:03:a8:
c0:65:20:c8:e9:0c:01:49:3b:3d:70:e5:7f:5c:41:97:98:6a:
b4:bb:5c:ef:ad:90:49:73:86:5b:97:7a:f0:c9:63:1d:dd:0b:
dd:06:6d:e0:7f:6e:36:e4:ef:63:40:87:bd:18:94:08:84:d5:
b0:1c:d6:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz+YvCZW5+WlsgJFHMMzMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MTcwMmQyYzI5MTk1ZmEwYTdkYjExZWU0NjVmMGMwNTQ1
ZDE3MDkwHhcNMjUwNjE0MDUwMDUzWhcNMjUwNjE1MDUwMDUzWjAzMTEwLwYDVQQD
Eyg5OWFjZmRmNzc0YWQ5ZWMzZDRiODg1MjdkNTQ0NTBjOTA4YWYwZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUGFByJRYR2nj+MDJ00pEXeciFZm
Bf9PrWbPKsoRxGOWzyy4qUThy/DXiI5Jk2N5OAIxEdlsqhb6UjevWWtryZ9be7Eg
ET5XJ+iC5YafJu1JE0YpN78QL7CBirmbJ5KbrHQRrdn5HrUK3xtJ6+2/XjsOgz4Q
+x7Cg1OxW+G2TQiiRYyCYaV4EeTspeXSQraKJz+2Vfz5fqrzI8/j1LuOnUJrTzVd
HM+VffX/p9LZblkOhg3zZOQV/8n3UbnmLsf0I6p/Jp7DuIGU2hyQOEDca2LjBDN1
AAW9zPyiIUGG6fp77yule4j1x0O92CLXePZdsrvtbROSOC8gwiftIMDIswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJms/fd0rZ7D1LiFJ9VEUMkIrw5oMB8GA1UdIwQY
MBaAFAYXAtLCkZX6Cn2xHuRl8MBUXRcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wMGIyOGItY2M3Mi00NDA2LWI2ZDgt
NGM1MWM2Nzk3YzFmLzEvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8wMGIyOGItY2M3Mi00NDA2LWI2ZDgtNGM1MWM2Nzk3YzFm
LzEvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6tFDyrN
rSuplwaNSAGL83ckl5m0VREGteXzvV/NQjLyVIgCdoha1IW1qEALFFrDDz3DlgkZ
pIf2E4wcbx3IY91HdGv7WAm/EWWdXY6t/AimaahFkEYY/TBbm6gSZfhR+CAbFkou
3z9vtopQe8Eoq3pzLO0lvC7SXyf0XONb+R6KyLCSuYkbYNd8jOQrFmLKIl5TIDKD
NOOXs7g2/64YniVy1em4QZDNfkVLD0EpIqiSKyBX8cGEClJMKmE7rG528SxMJgOo
wGUgyOkMAUk7PXDlf1xBl5hqtLtc762QSXOGW5d68MljHd0L3QZt4H9uNuTvY0CH
vRiUCITVsBzWeg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:06:47 2025 by rpki-client