Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: dIkvUOCPPpudyFzkLe/dawy+/4Wix9XzeJGvGUBhDlE=
Subject key identifier: 96:82:EF:1D:79:A2:09:1A:E9:A5:81:BF:A5:92:0A:2F:EF:1A:59:D4
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 0197846B0182C16EB67C539C96294223FF70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 159A
Signing time: Wed 18 Jun 2025 19:01:34 +0000
Manifest this update: Wed 18 Jun 2025 19:01:34 +0000
Manifest next update: Thu 19 Jun 2025 19:01:34 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: 4eWgRCxuwBPt+8rB7pEkWbwh+GnIV/2xwI356WK51wc=)
2: Kli1CIfvUzezQEeZgfmrCqdQM_I.roa (hash: 78hmVW1qiWAvpebiM5hdAQNsJHKvS7UWJOLOAC6eO10=)
3: yilBdRRmJ9mIX_a1TabLEV03EEk.roa (hash: 4eslmC4MgTLkKxmkhr2W/5XHOeBZOMOpeHMJJDH3k34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:6b:01:82:c1:6e:b6:7c:53:9c:96:29:42:23:ff:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Jun 18 19:01:34 2025 GMT
Not After : Jun 19 19:01:34 2025 GMT
Subject: CN=9682ef1d79a2091ae9a581bfa5920a2fef1a59d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:59:d4:21:75:18:3d:6d:23:df:6f:11:82:
cd:d8:4b:57:66:ae:60:ed:f8:bf:f2:7b:b2:2e:06:
6c:4b:d8:48:bc:9f:a3:dc:a4:0e:37:58:0a:ea:6e:
e4:25:1a:39:b1:98:e1:76:d4:07:67:f3:e5:76:67:
a7:6a:0a:20:de:be:33:55:47:db:92:66:a8:57:1f:
b7:08:f0:2a:88:f4:b9:17:8e:fd:88:16:a4:ce:9a:
ba:f6:61:c0:a4:f2:e7:75:42:c9:7c:7a:a9:3b:0b:
cc:b5:09:44:68:5a:20:97:ad:8f:5a:38:c0:7f:5e:
3e:7d:25:f6:bd:91:e0:ef:f6:da:77:5a:23:a5:32:
af:28:19:c4:97:46:00:06:8f:4f:0d:29:6c:73:d8:
29:db:c3:f6:ed:d1:4c:2b:9a:09:04:c8:e4:41:5a:
92:6b:64:ca:da:0d:42:20:f7:72:62:b9:95:c2:19:
36:57:fe:10:a6:ea:57:63:b3:3c:6e:e6:b8:f7:a5:
bd:8d:e2:d7:86:12:67:00:f4:e8:e0:61:16:94:1a:
5d:2b:97:45:d7:c6:5d:ba:d5:7f:2f:39:53:c2:a1:
47:65:49:5c:c8:5b:64:9c:84:66:24:f9:69:cb:97:
c0:5c:dc:cd:44:e3:a2:8d:3d:74:f9:e9:f6:30:47:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:82:EF:1D:79:A2:09:1A:E9:A5:81:BF:A5:92:0A:2F:EF:1A:59:D4
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d9:12:e9:a0:d7:b4:33:c9:e4:b7:73:cd:c8:40:82:39:89:
38:97:47:6b:62:0c:5a:69:df:af:d2:2e:12:19:36:5b:ac:6a:
b5:3f:dc:ba:0e:37:9c:30:51:8b:e5:78:c5:93:c0:e3:3f:28:
c4:f7:ed:32:2b:5e:ff:d4:80:f1:0c:d2:1d:13:9d:dc:d7:27:
84:eb:e4:5d:7f:4c:88:c9:19:77:16:0b:fd:fd:0e:c5:67:58:
ba:b9:7d:0d:94:3c:5d:91:4b:69:f2:cb:2c:8e:84:8b:41:50:
f7:e0:22:d0:71:92:03:94:1c:50:cb:39:eb:48:d2:48:12:30:
0a:dc:84:c3:cb:e8:7c:0d:6b:9b:54:dc:e8:bf:eb:c8:40:2c:
b9:e3:8c:eb:8b:9d:15:75:82:f9:38:63:fb:68:b3:09:cc:85:
29:f4:6e:a9:da:08:11:de:04:08:d0:97:12:d4:92:80:6a:07:
8b:50:09:49:99:62:96:ab:41:00:ea:78:0c:d0:59:a7:96:04:
21:07:b5:9b:69:48:9d:b3:49:f9:a8:66:d5:81:08:ea:27:46:
b1:3b:ff:ce:cd:89:33:ae:c9:7f:45:9e:bc:cb:90:9e:9c:dd:
f7:ae:fc:fd:47:3a:58:78:41:f7:d7:16:f4:3c:0d:b8:1b:61:
49:ae:55:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeEawGCwW62fFOclilCI/9wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MWJiMDkxNmM4NTM4MDFmMjJjZTcyM2JjMmNjNDE4ODY5
ZGI3ZDAwHhcNMjUwNjE4MTkwMTM0WhcNMjUwNjE5MTkwMTM0WjAzMTEwLwYDVQQD
Eyg5NjgyZWYxZDc5YTIwOTFhZTlhNTgxYmZhNTkyMGEyZmVmMWE1OWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyBZ1CF1GD1tI99vEYLN2EtXZq5g
7fi/8nuyLgZsS9hIvJ+j3KQON1gK6m7kJRo5sZjhdtQHZ/Pldmenagog3r4zVUfb
kmaoVx+3CPAqiPS5F479iBakzpq69mHApPLndULJfHqpOwvMtQlEaFogl62PWjjA
f14+fSX2vZHg7/bad1ojpTKvKBnEl0YABo9PDSlsc9gp28P27dFMK5oJBMjkQVqS
a2TK2g1CIPdyYrmVwhk2V/4QpupXY7M8bua496W9jeLXhhJnAPTo4GEWlBpdK5dF
18ZdutV/LzlTwqFHZUlcyFtknIRmJPlpy5fAXNzNROOijT10+en2MEfIaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaC7x15ogka6aWBv6WSCi/vGlnUMB8GA1UdIwQY
MBaAFAYbsJFshTgB8iznI7wsxBiGnbfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iYmIxYzYtOWY5MS00MzQ2LWI2MTYt
YzJkYzdhMDU4ZTMwLzEvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iYmIxYzYtOWY5MS00MzQ2LWI2MTYtYzJkYzdhMDU4ZTMw
LzEvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9kS6aDX
tDPJ5LdzzchAgjmJOJdHa2IMWmnfr9IuEhk2W6xqtT/cug43nDBRi+V4xZPA4z8o
xPftMite/9SA8QzSHROd3NcnhOvkXX9MiMkZdxYL/f0OxWdYurl9DZQ8XZFLafLL
LI6Ei0FQ9+Ai0HGSA5QcUMs560jSSBIwCtyEw8vofA1rm1Tc6L/ryEAsueOM64ud
FXWC+Thj+2izCcyFKfRuqdoIEd4ECNCXEtSSgGoHi1AJSZlilqtBAOp4DNBZp5YE
IQe1m2lInbNJ+ahm1YEI6idGsTv/zs2JM67Jf0WevMuQnpzd9678/Uc6WHhB99cW
9DwNuBthSa5V7Q==
-----END CERTIFICATE-----
Generated at Thu Jun 19 06:30:52 2025 by rpki-client