Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
File: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft (raw, json)
Hash identifier: EVyaU5S2O4SHHpLLnJXG+m4uoujvYYhaycP2/aK78Eg=
Subject key identifier: F5:87:D2:48:82:77:1B:4A:C8:59:87:2F:8F:4C:47:0A:69:E3:A3:FD
Authority key identifier: A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6
Certificate issuer: /CN=a41870fc1854a3b093938c09cf60651ba993ffc6
Certificate serial: 019896A4E89FE8B29F6A581F5B8AD88A8706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
Manifest number: 0F30
Signing time: Mon 11 Aug 2025 01:00:46 +0000
Manifest this update: Mon 11 Aug 2025 01:00:46 +0000
Manifest next update: Tue 12 Aug 2025 01:00:46 +0000
Files and hashes: 1: H8Jh3PByPsoaxftF1Y0qeL6qk8M.roa (hash: OGYujsfjZeJUcMVXbqDzP8dUuHxSfUAIJn1ll6T06LE=)
2: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl (hash: gtXocyG1t5bT/tEExJIDiEKYzef/vAoSahD+7ilgo30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:e8:9f:e8:b2:9f:6a:58:1f:5b:8a:d8:8a:87:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41870fc1854a3b093938c09cf60651ba993ffc6
Validity
Not Before: Aug 11 01:00:46 2025 GMT
Not After : Aug 12 01:00:46 2025 GMT
Subject: CN=f587d24882771b4ac859872f8f4c470a69e3a3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:43:ad:ad:b4:ea:53:e8:45:33:0d:c6:79:
74:dd:79:31:2c:b0:13:e1:ba:96:03:1f:07:64:15:
82:4f:82:cd:af:f1:8c:61:cd:28:f1:df:25:0a:63:
8f:c7:32:92:20:10:51:73:de:13:48:d4:54:03:ff:
4b:27:84:a7:48:f1:e8:86:24:b2:53:20:e4:4f:cb:
de:37:55:8b:c6:f7:51:de:8a:b2:ab:b8:96:99:1b:
7d:4f:0d:df:a8:56:8f:8a:a1:75:ad:23:2b:a5:e9:
c0:c3:be:64:77:80:b6:6c:fa:06:1e:49:6d:b5:75:
88:2f:98:16:bf:4d:d6:94:21:36:36:c9:07:9b:20:
d2:69:cb:94:84:8f:f0:01:3f:ae:0a:f1:77:c9:4c:
2f:3c:26:c8:6f:6e:f4:58:a6:39:45:2f:bf:0e:4d:
b1:9b:1d:2e:c3:ba:a4:05:8b:80:5d:b7:41:f2:9c:
92:9d:45:83:3d:e1:b9:08:52:05:42:1f:97:23:50:
b1:76:e7:00:0a:09:63:86:4b:10:9d:9b:2f:eb:6e:
3f:bf:a7:e9:a9:68:c4:52:e5:24:00:90:98:67:43:
0d:29:56:26:a7:aa:f0:ca:10:80:b4:ca:00:65:a1:
8a:3e:50:9c:00:64:21:28:45:9a:c9:3c:24:92:b5:
6f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:87:D2:48:82:77:1B:4A:C8:59:87:2F:8F:4C:47:0A:69:E3:A3:FD
X509v3 Authority Key Identifier:
keyid:A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4d:27:97:1e:78:fd:f6:fd:b8:40:2b:e6:b5:62:77:73:f7:
f7:c0:93:39:de:41:4a:38:5b:68:4e:2d:d6:61:5b:e7:01:db:
78:9c:e1:e4:0f:18:fd:49:c7:e1:b8:f7:57:98:a9:e7:3e:fd:
c5:43:15:d7:2a:82:15:04:c9:e3:d9:78:33:68:d4:3a:b8:73:
1b:6f:cd:d3:19:33:04:6e:f6:c7:eb:93:84:e9:15:ae:04:9f:
b4:10:59:d4:b0:3f:26:55:92:78:88:90:8e:22:fb:69:43:5f:
6a:69:52:58:b9:55:53:8c:5b:6c:01:1b:27:86:e4:33:30:54:
5f:2f:20:35:09:02:a5:58:82:13:1b:82:7f:cd:30:8c:d9:31:
a7:20:93:ff:26:22:f5:22:7a:d4:88:62:d4:ea:37:c1:4c:13:
74:e4:d9:c3:92:e3:49:17:43:67:8b:f5:16:11:79:60:2f:ad:
ee:1d:5f:a0:7c:0c:ce:dc:f4:43:31:e8:01:7a:26:2b:28:df:
8a:f9:b0:72:65:93:eb:29:1f:40:7f:4f:b9:f4:e4:80:91:98:
94:12:93:a2:ed:d3:ea:f2:4d:fb:e4:98:1c:cd:55:54:1e:c4:
9a:d3:f4:1c:38:fc:48:c0:75:fd:fa:ab:99:5f:dd:94:1e:a2:
33:ef:ba:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:50:32 2025 by rpki-client