Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
File: bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json)
Hash identifier: jd8YHWNwwqPUhgLVsrKzZbCmHcSfK6JF2U/KB4mousg=
Subject key identifier: 3F:DA:F3:B2:37:9A:06:1E:3A:49:92:52:01:20:46:5C:2F:6A:C6:FA
Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Certificate issuer: /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Certificate serial: 019880F96195EF2F024B9CF4C56AF4645EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 20:01:23 +0000
Manifest this update: Wed 06 Aug 2025 20:01:23 +0000
Manifest next update: Thu 07 Aug 2025 20:01:23 +0000
Files and hashes: 1: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: 5SJ6hx8jq8NOD6Kskb8RGm9BWOvGkHV+QWVU9GCNjFM=)
2: eEvrSYjLUGg5GhW7JvZI3HWYfcI.roa (hash: GMSu0KMyD4SKyVpe+o1Z3AHIVpLBmKGk+5TuUmweIis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:61:95:ef:2f:02:4b:9c:f4:c5:6a:f4:64:5e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Validity
Not Before: Aug 6 20:01:23 2025 GMT
Not After : Aug 7 20:01:23 2025 GMT
Subject: CN=3fdaf3b2379a061e3a4992520120465c2f6ac6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:96:94:69:7f:cf:2b:4f:38:e6:93:b4:8e:
f4:4d:3d:38:4a:24:6f:f2:fc:b4:ee:9e:4a:bd:96:
08:f3:b2:d6:cd:5b:48:d3:c5:4b:81:b8:e4:f9:9c:
83:39:e8:3a:ab:c6:4b:4c:3d:72:9b:04:16:2a:da:
18:ee:60:65:60:80:87:aa:d0:de:52:d6:71:7e:aa:
43:66:8b:70:7b:74:8f:2a:66:73:0c:4b:f0:5d:58:
fd:bb:7e:a6:d5:c7:88:3b:36:52:7b:47:b9:65:1a:
e9:fb:d8:af:e0:d0:86:b8:a4:de:b1:70:9b:ab:3f:
9a:2e:ff:0e:08:eb:b9:24:29:bf:59:e0:8e:e2:3b:
eb:a5:ee:14:71:d7:cb:39:ab:69:96:61:74:16:30:
3d:5b:73:d4:22:b9:53:51:71:a6:82:f7:d3:3d:bf:
68:48:b2:94:f8:27:4c:da:1f:7f:5c:df:1c:a4:e7:
43:44:68:c4:08:82:70:f2:02:78:df:7c:c9:74:97:
4c:6c:e4:20:ed:37:ad:ea:d4:af:58:ce:af:a7:26:
09:54:13:f4:19:29:53:ea:46:e4:1b:2f:22:18:44:
3a:d2:09:9f:a4:fa:9b:dd:53:74:b1:80:e2:b1:d3:
d4:99:4e:43:c2:d0:e6:9b:f5:1c:d9:94:bb:c2:aa:
4a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DA:F3:B2:37:9A:06:1E:3A:49:92:52:01:20:46:5C:2F:6A:C6:FA
X509v3 Authority Key Identifier:
keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ed:2b:1b:a0:a0:fa:2e:f4:94:a2:95:a9:f7:8b:ea:94:b3:
78:78:53:92:b3:79:db:92:80:89:88:a8:10:1b:79:bb:71:26:
99:48:cd:c3:be:a4:25:98:4a:83:63:4d:ce:0a:98:9c:43:2d:
f4:aa:d1:ac:2f:f4:f9:ec:08:1a:b5:b4:92:04:ff:92:20:dc:
5e:26:73:85:e3:10:be:7c:26:49:2a:16:e5:b5:10:93:b3:22:
ed:9d:76:6f:ba:ab:44:cb:df:1b:b9:09:8f:a2:06:db:ac:82:
d5:bd:59:69:2a:4e:b5:73:7b:27:eb:f8:e4:3f:38:a3:f9:a8:
4f:40:45:b9:dc:6d:b0:30:76:c6:3f:79:eb:4c:dc:a7:52:ea:
06:50:6a:bd:1b:11:ea:16:f9:d3:e6:5d:c7:a7:2d:8d:52:aa:
13:31:0b:b6:da:c1:80:e7:ee:07:dc:cd:e9:07:4a:ac:8c:b5:
5e:5e:5b:0f:01:53:60:e6:f3:4f:48:44:cb:08:74:9a:3f:91:
ba:4b:f8:bd:93:5f:95:36:e1:d9:d7:13:5e:18:79:19:34:dc:
54:fc:8d:85:42:4f:cd:1d:22:92:f5:27:57:f7:19:d2:d7:1f:
1c:5e:6d:ea:ea:16:a5:1b:c2:25:ef:bc:55:e6:ba:ab:5e:e1:
c5:28:c5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:07:46 2025 by rpki-client