Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: ijZcsO1PbyB+Lwzwkd2LqQWW6BO8gZ06ePbSrCifwhk=
Subject key identifier: A9:79:9D:59:9C:BB:98:43:A1:E0:A0:18:87:2D:D5:2E:3B:50:C4:E5
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 01987E2EFBD900614C684F2845AC12030CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 07:01:05 +0000
Manifest this update: Wed 06 Aug 2025 07:01:05 +0000
Manifest next update: Thu 07 Aug 2025 07:01:05 +0000
Files and hashes: 1: 2GrFuxyxyHkqumdayYRyftHOCCA.roa (hash: 58WfiupeF7jv1/JuV3+ZtSw5ZmglbAvhKCWRK1cfUPw=)
2: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: jJUaW5x9xYFj6rRvVkBLkSw6uaJXOjqPkHjAvPajcJA=)
3: EFrmvdYAVAISDnJyY9LHHEwKIkE.roa (hash: VVoG4KmLy8MCQlXZBg6STGy/fzjISq/IYVzwvcg57xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:fb:d9:00:61:4c:68:4f:28:45:ac:12:03:0c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Aug 6 07:01:05 2025 GMT
Not After : Aug 7 07:01:05 2025 GMT
Subject: CN=a9799d599cbb9843a1e0a018872dd52e3b50c4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:96:92:52:32:62:5a:e1:b5:e7:d9:57:d2:4e:
2e:4c:2f:cf:3a:84:0f:7e:2a:5a:3a:b0:cf:05:0b:
7e:23:f9:25:a0:14:b7:12:22:e8:3e:32:6a:b9:35:
46:95:7b:9e:f7:b5:7a:13:a9:d4:24:8d:3c:06:6a:
a9:f7:66:76:0e:48:24:48:99:a2:07:45:ed:f9:2a:
9c:6e:fc:81:2a:fd:13:4e:3f:6f:7e:18:31:c7:39:
b3:11:85:d4:e8:5a:20:c6:59:f2:ef:7c:ea:25:3e:
e9:91:e0:b5:ae:5f:93:86:98:6a:4f:b3:75:04:c6:
4a:3d:dc:b1:b1:8e:51:e4:27:b0:3a:4c:2c:c3:4c:
73:f5:83:87:00:a8:70:31:d8:20:e8:55:13:89:30:
72:dc:5a:59:57:92:e4:ea:7d:b3:46:51:2c:28:86:
dc:aa:b7:53:bf:9b:2b:df:dd:5a:27:38:d0:9e:c4:
44:7f:9f:77:8c:0b:4d:f1:9d:a2:f8:44:72:ec:34:
ad:c5:61:f9:9b:45:1d:52:9c:89:41:16:0c:b4:83:
1c:52:62:11:93:02:07:90:57:cc:0c:db:b2:28:43:
87:f1:11:ce:37:0a:a0:4f:61:63:c5:59:c0:a0:87:
5e:6f:c2:a1:be:b1:f0:52:30:50:dd:2d:52:4c:56:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:79:9D:59:9C:BB:98:43:A1:E0:A0:18:87:2D:D5:2E:3B:50:C4:E5
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:97:1f:fd:19:60:db:7d:fa:33:2e:bf:53:12:01:f5:58:4a:
2e:ce:5e:e2:56:db:30:5c:22:2d:eb:7d:ff:52:dc:44:a7:13:
bb:f7:39:98:0a:90:1a:4c:b7:b3:ad:c1:45:7e:31:92:bf:b8:
9a:fa:3d:05:d0:0a:54:c1:20:69:03:fa:49:cf:a6:c1:93:ab:
cb:d4:31:97:8c:60:01:a4:9c:10:dd:e4:ae:e8:70:66:f0:e8:
73:ca:9d:96:6e:b5:a7:71:d3:e5:c9:2b:c6:ab:66:f6:ff:7e:
a8:14:29:d1:56:40:25:6e:52:2a:83:4e:a2:d7:ab:51:3e:df:
21:76:23:84:92:fe:0f:a3:34:d6:a7:ad:d6:3b:4d:7d:e5:5a:
9e:39:f3:71:b0:d5:43:57:7d:b0:2f:18:25:0e:14:43:c2:51:
16:bb:da:78:99:3f:e3:6a:84:1e:57:50:6a:a7:b2:9b:66:5e:
fd:b9:93:3b:a1:d0:91:11:fa:95:b3:89:fe:62:d3:02:35:0d:
4f:18:53:e3:74:8a:f3:17:99:4c:48:34:50:05:1a:2b:38:01:
c7:67:d0:a0:f0:93:19:9a:f7:a0:c2:a1:6c:b1:d5:64:4e:79:
15:aa:4b:35:20:ef:0c:c5:8b:23:3a:3a:02:3e:ab:db:e2:69:
c7:16:31:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:49 2025 by rpki-client