Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: JR7mhQZBlrbOwXCNJQr7vMutoJpOiiOr/4fYiq0aA8o=
Subject key identifier: 8C:6B:99:F0:BD:FE:03:6C:49:7F:FE:DD:86:3C:9D:D9:26:12:36:CB
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 019A54C0C6260CE0A931954DF32999236E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 16:01:50 +0000
Manifest this update: Wed 05 Nov 2025 16:01:50 +0000
Manifest next update: Thu 06 Nov 2025 16:01:50 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: 3XCeWNfrtKkUF9Tn78Zp0+LM5GG0xNPQjgkn8/2oLlI=)
2: Kli1CIfvUzezQEeZgfmrCqdQM_I.roa (hash: 78hmVW1qiWAvpebiM5hdAQNsJHKvS7UWJOLOAC6eO10=)
3: yilBdRRmJ9mIX_a1TabLEV03EEk.roa (hash: 4eslmC4MgTLkKxmkhr2W/5XHOeBZOMOpeHMJJDH3k34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:c6:26:0c:e0:a9:31:95:4d:f3:29:99:23:6e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Nov 5 16:01:50 2025 GMT
Not After : Nov 6 16:01:50 2025 GMT
Subject: CN=8c6b99f0bdfe036c497ffedd863c9dd9261236cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:49:af:4e:2d:21:28:75:5d:6e:3c:a9:99:
6e:99:c6:e4:1c:3e:98:d2:e7:66:1b:12:ef:e0:1d:
a8:58:9d:94:5e:26:4c:92:6c:d4:07:bf:39:64:fb:
f5:75:64:c0:a3:07:ce:ea:58:4d:ad:d1:e5:9b:3f:
fc:04:7c:95:00:b3:b8:cb:a2:40:43:59:d9:f9:6c:
d2:a4:00:8a:c3:1c:1f:07:c9:4a:b9:f1:ea:cd:9c:
88:98:33:e6:a1:03:b6:e5:20:54:db:45:f8:71:27:
1d:cc:94:7b:ba:bb:55:9c:51:d7:f1:d9:30:24:4f:
69:41:36:d2:44:d7:b4:bf:0d:84:b0:4d:6f:69:9f:
69:b4:a2:fa:bd:5e:2b:ad:eb:0e:ea:f9:1e:3d:e7:
3b:15:02:c1:a7:75:81:90:43:1d:84:6d:ae:39:57:
b2:48:07:a5:65:d8:b0:50:6c:ec:71:34:fc:ad:71:
31:95:09:04:3c:00:a3:e9:2a:27:97:b5:26:0d:62:
e1:c5:ff:c9:cf:42:21:b5:9a:ee:45:1b:c6:9a:74:
f4:ed:25:2f:4e:13:e0:5a:62:30:97:1e:bc:5a:05:
b7:72:5d:2e:b4:a6:f9:1a:c1:91:4d:ae:44:bb:7a:
6a:33:52:e3:e2:1a:c4:cd:e8:c7:aa:13:44:70:38:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6B:99:F0:BD:FE:03:6C:49:7F:FE:DD:86:3C:9D:D9:26:12:36:CB
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c0:77:db:b1:75:2f:a5:4c:04:27:78:b5:ab:de:c5:00:53:
02:be:ab:2b:4e:30:b2:40:0f:1d:43:85:6a:27:61:5a:c3:c1:
b2:65:55:cd:5d:35:de:52:6b:c8:51:b9:c5:37:51:24:9d:fd:
b6:ec:c0:9b:71:ad:f5:0f:ff:96:19:27:23:36:fd:8e:6f:22:
f2:f1:da:6f:9c:74:99:9d:c8:a4:c2:12:87:ee:6d:5c:49:bb:
82:7f:b1:b9:a8:aa:74:11:c2:fb:e8:e0:b1:f5:59:cb:fa:bf:
4e:42:b4:c0:06:0b:89:42:9d:45:88:ca:ab:e6:2c:fe:ed:6b:
41:99:5a:64:06:da:f6:76:39:23:bb:c6:7b:5e:5b:b3:e1:10:
0e:16:bc:06:bb:1b:c9:df:a3:89:89:de:2a:69:f5:15:9a:e4:
bb:d2:e4:82:75:db:ec:b3:7f:c1:55:c9:4f:9d:e8:59:e7:fa:
14:ee:aa:cf:ba:96:e1:18:a7:10:7d:9a:e2:e1:03:9b:4e:c0:
6f:61:b0:52:81:8c:cd:67:b1:2f:f9:d7:83:e4:1c:d7:c7:18:
08:04:ec:31:65:09:aa:aa:4c:cd:cd:c2:6a:f7:76:ec:5f:38:
24:ea:f4:91:3c:a0:04:b1:e4:96:77:64:fd:d5:4a:21:6d:3b:
76:0d:f3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:14:44 2025 by rpki-client