Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: CZiTqJj6QMpXj+AqaTy3/TS4ZFT/gWlB8/SlVRSdDk0=
Subject key identifier: 1E:DD:19:95:1D:CE:46:F0:21:B1:21:EC:A5:A3:5B:66:48:49:AD:1F
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 019896A6AFD4C1B2FF44B6DE48F207E0D051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 1628
Signing time: Mon 11 Aug 2025 01:02:42 +0000
Manifest this update: Mon 11 Aug 2025 01:02:42 +0000
Manifest next update: Tue 12 Aug 2025 01:02:42 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: 2UBUHQW7eYFITa7EJbdujP0UJl1UOwl/Bohh1j7v2Js=)
2: Kli1CIfvUzezQEeZgfmrCqdQM_I.roa (hash: 78hmVW1qiWAvpebiM5hdAQNsJHKvS7UWJOLOAC6eO10=)
3: yilBdRRmJ9mIX_a1TabLEV03EEk.roa (hash: 4eslmC4MgTLkKxmkhr2W/5XHOeBZOMOpeHMJJDH3k34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:af:d4:c1:b2:ff:44:b6:de:48:f2:07:e0:d0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Aug 11 01:02:42 2025 GMT
Not After : Aug 12 01:02:42 2025 GMT
Subject: CN=1edd19951dce46f021b121eca5a35b664849ad1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0f:57:ec:fd:67:fd:88:f2:b9:a1:9e:64:cb:
aa:88:98:29:2c:59:ff:84:46:e2:3f:07:66:09:19:
8c:eb:0e:6e:55:e2:21:1a:cf:93:13:24:be:3d:70:
18:9c:4a:4e:0d:57:03:5d:42:de:20:34:1f:b4:66:
28:33:28:e1:94:f4:48:aa:ce:ff:ef:bf:77:9e:85:
1c:5f:3a:02:ad:4f:8b:fd:40:ff:b0:01:b7:ad:86:
25:4f:c7:0d:ac:fd:f5:c3:41:3c:3e:1c:f3:76:71:
47:a9:84:ed:4d:b7:4a:3a:1a:2b:9e:45:99:a8:75:
6d:7b:61:b0:28:c8:23:36:f2:25:1a:e4:88:32:11:
dc:b8:64:a2:3c:20:5f:19:ed:65:60:41:f5:9d:54:
f5:a0:c9:96:39:a6:93:ec:d6:71:17:1e:32:53:52:
45:f7:db:b8:13:7a:be:fb:4d:5a:16:95:0c:c0:da:
4f:c4:70:8d:4f:c9:ef:f9:80:ce:05:91:71:00:bc:
57:87:f8:fc:0a:fd:79:10:12:7b:e3:6a:e2:fb:5e:
14:57:b9:7e:8c:15:9a:ae:f6:7d:fb:8d:84:da:68:
20:86:36:42:bc:d0:17:29:5b:dc:b1:b4:73:7b:f4:
5f:54:52:7e:6a:07:ad:d5:bd:69:1f:47:02:97:ef:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DD:19:95:1D:CE:46:F0:21:B1:21:EC:A5:A3:5B:66:48:49:AD:1F
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f8:9e:f6:28:c7:2e:76:cc:9e:54:2c:d4:af:84:92:c9:3d:
a8:a2:ea:03:fd:25:e9:88:7c:02:6e:45:84:46:15:2b:6a:f0:
8a:76:ad:39:f0:86:d9:29:53:6c:9e:08:3c:0c:5c:c0:81:40:
dd:21:b7:a7:d2:84:b1:b8:c0:94:58:95:47:88:c8:a2:e2:fd:
0c:1e:d4:7b:1d:cf:24:d1:0c:81:fd:6b:8a:f9:e0:34:2b:e5:
ed:eb:bb:12:bc:80:c3:b4:05:99:e8:5e:76:1d:c0:24:fc:ed:
d4:2a:b0:83:97:0f:d7:7a:16:78:84:6f:f9:8c:bb:5f:49:f0:
4a:07:0a:63:83:5c:bb:ac:77:58:5d:f0:7a:7a:bb:73:6b:72:
48:f5:ad:a2:b5:db:c4:6a:9a:d4:69:8d:b2:79:a6:c3:76:f5:
d4:9b:4e:83:20:e9:54:9e:59:34:2d:8a:16:27:93:24:c8:37:
34:fa:70:6a:9a:56:c5:86:44:d5:1f:77:64:ca:78:e2:e2:de:
53:f9:4b:cb:b1:38:90:6f:c7:b2:ab:87:ee:2a:76:d2:d3:e9:
5b:3e:65:0d:dc:16:af:da:e5:0b:37:27:20:28:99:d4:a1:32:
e5:72:cc:68:00:2d:4a:0c:55:d9:8b:9e:98:d4:1a:73:fd:61:
03:89:79:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:55:10 2025 by rpki-client