Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
File: BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft (raw, json)
Hash identifier: sHEqNcYTNiX2vD7KRYNj9Fqz4uws5HE/jn1Nedh0H6M=
Subject key identifier: 0D:6B:08:A2:9F:25:C7:D2:AD:92:FB:7E:51:E9:3F:91:41:A7:AE:AA
Authority key identifier: 06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
Certificate issuer: /CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Certificate serial: 01988F22BD5467765BE91530F5006B168CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
Manifest number: 02E8
Signing time: Sat 09 Aug 2025 14:01:15 +0000
Manifest this update: Sat 09 Aug 2025 14:01:15 +0000
Manifest next update: Sun 10 Aug 2025 14:01:15 +0000
Files and hashes: 1: BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl (hash: 4pzNeDIaO+jbukeqcy5XXKFcbd2CimsS5XWCHv/rTUM=)
2: IBb1HqZFTHsm_sCmjR2ccm8RUCA.roa (hash: KJ8NP0RBTfkNOG7Be7nzu7TlYeYPrpFzbgBEOJgWVgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:22:bd:54:67:76:5b:e9:15:30:f5:00:6b:16:8c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Validity
Not Before: Aug 9 14:01:15 2025 GMT
Not After : Aug 10 14:01:15 2025 GMT
Subject: CN=0d6b08a29f25c7d2ad92fb7e51e93f9141a7aeaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:71:20:1b:ff:68:d1:9f:4a:70:e7:71:17:70:
a6:4b:4f:85:ad:74:29:14:5b:e3:62:d1:54:87:55:
7b:a1:19:6d:ca:db:aa:23:c2:85:5e:de:01:c3:06:
3c:86:8e:57:6e:62:91:aa:13:3d:a4:2f:0c:28:c0:
10:cc:9a:0e:3c:69:7e:90:f5:47:83:bc:3a:e7:01:
29:e5:c3:c6:2b:88:39:a7:81:7e:4a:a3:be:b2:f0:
91:93:34:71:d9:73:89:68:e6:cc:87:f9:07:62:2d:
7d:94:b8:b6:11:d3:5a:65:00:b2:cc:ca:c1:87:58:
08:0e:5c:59:be:73:e3:3c:60:4b:7a:f8:33:fa:fc:
43:9e:d5:7d:d7:91:eb:e2:a0:e5:db:7f:d0:a5:ee:
6d:29:f0:b9:05:0b:42:94:32:7f:da:6a:da:d9:04:
62:94:f7:8e:09:6a:bc:1c:f5:49:d2:22:50:50:b4:
62:3b:15:9e:4f:99:9a:a8:30:eb:1e:c6:30:05:4a:
3c:7c:2c:da:02:f7:9c:6c:6d:93:99:66:82:eb:fe:
0d:54:08:cf:35:73:37:37:44:6f:44:5e:da:3b:be:
90:eb:75:fb:5d:a8:12:7c:33:e8:40:7b:f1:0b:07:
de:d5:44:15:ed:c2:9b:58:aa:4f:1b:da:09:07:01:
25:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6B:08:A2:9F:25:C7:D2:AD:92:FB:7E:51:E9:3F:91:41:A7:AE:AA
X509v3 Authority Key Identifier:
keyid:06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:29:ac:18:dd:fb:39:7e:cb:1b:82:f5:db:6e:f7:4a:9b:b4:
d8:81:fa:8e:50:24:58:76:55:52:f8:ae:75:a0:fa:0d:18:a0:
67:a5:c3:df:06:63:5b:29:9a:7e:84:f8:81:47:5a:92:f4:03:
58:26:03:62:c0:aa:d5:88:4e:1c:fa:3b:c9:68:d8:45:5f:d1:
f3:85:fa:3a:72:41:ba:56:91:0b:5b:80:28:1b:5f:5c:a7:65:
be:17:32:95:22:17:b0:0a:d9:c9:5e:86:32:fb:d6:92:92:8d:
64:e1:4d:b8:b1:9b:e7:c2:88:fc:4b:ff:2d:76:70:70:f9:f3:
5d:e9:0e:18:6c:81:63:86:57:12:0f:17:7d:88:d4:45:e0:ad:
bb:d4:a5:d9:2d:d3:b6:85:6e:34:82:b1:c0:70:55:ed:48:83:
9c:95:5e:31:1d:0f:a2:2d:89:0f:df:1f:4c:be:07:ab:40:1f:
b1:4b:ff:28:26:c8:3c:a0:83:4b:ef:44:65:20:78:fb:55:03:
2a:2b:22:63:94:31:4b:38:15:64:d3:2b:12:ca:b7:8e:1b:aa:
38:09:fb:97:e7:11:6e:fe:44:97:f1:d7:e7:76:9d:f7:7c:dd:
71:a0:cd:0e:bd:cf:dd:eb:ae:7b:e6:8e:a5:df:3a:87:dc:b8:
a0:58:19:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:32:27 2025 by rpki-client