Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
File: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft (raw, json)
Hash identifier: x8X7kqFaINF+Wm3f2ZYXDsWCaOMDFROHuOUOs9I3mvo=
Subject key identifier: 80:1E:9F:A6:44:21:9F:4E:58:28:2E:E7:76:95:70:44:35:D4:B3:DF
Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Certificate issuer: /CN=047ee74ac490e31f1d40764f092411ee25eb1665
Certificate serial: 01987DC0C9D796617957058718479291769C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 05:00:43 +0000
Manifest this update: Wed 06 Aug 2025 05:00:43 +0000
Manifest next update: Thu 07 Aug 2025 05:00:43 +0000
Files and hashes: 1: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl (hash: C3Gm8APifoknVBevzsinHC0JZEMPZqmArLQKw4NpQfg=)
2: lTisVzPeiPslXlhHYnIYv10zoj8.roa (hash: nI5Tne3/W5S4/3jqutx+PLa3bngqaYEDH1hjjV/uGx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:c9:d7:96:61:79:57:05:87:18:47:92:91:76:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665
Validity
Not Before: Aug 6 05:00:43 2025 GMT
Not After : Aug 7 05:00:43 2025 GMT
Subject: CN=801e9fa644219f4e58282ee77695704435d4b3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:15:ff:e5:9b:a9:1b:34:06:6e:09:07:b1:
1b:f8:23:46:ff:5c:b0:15:0f:d3:dd:48:5b:74:de:
f8:8e:70:8d:4e:48:82:da:e8:1c:a0:d1:88:e9:88:
1e:5d:08:a5:e0:f0:d7:95:5f:6c:42:7a:5e:14:79:
0b:3e:64:d8:14:7c:e9:a0:74:01:91:f9:7f:cf:c8:
75:f6:35:bc:21:aa:7a:15:bf:8e:9c:87:19:db:1c:
fb:3b:96:ec:4c:1e:22:57:b4:ae:4f:dc:1e:14:89:
0a:7f:aa:1b:36:64:6b:94:00:09:8a:cd:5e:74:a8:
1a:61:12:fc:00:59:cb:18:67:21:b9:e9:74:37:e9:
36:60:70:74:4a:57:57:1f:7d:e2:08:23:7f:57:18:
1a:1e:bc:70:8c:4d:2d:b9:6e:da:a3:e9:71:a8:f6:
26:54:8b:68:c1:5f:64:a3:98:08:10:cd:3e:15:e9:
ea:03:df:17:03:67:82:c2:d3:cd:df:24:f4:ce:c3:
90:a8:74:65:ff:e1:3f:3d:cc:66:34:08:ae:44:f3:
ff:b6:2a:44:bb:17:a5:9b:5b:72:f1:4d:f4:41:c6:
a2:c4:62:65:33:fc:a5:b2:c8:6a:ad:87:59:b7:d8:
e6:4a:7d:6e:d7:52:7c:25:e3:bb:bf:f3:8f:4d:b1:
01:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1E:9F:A6:44:21:9F:4E:58:28:2E:E7:76:95:70:44:35:D4:B3:DF
X509v3 Authority Key Identifier:
keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:52:4b:8b:57:43:d3:5b:43:41:21:28:3f:2f:78:ee:02:ae:
68:12:89:11:38:dc:67:69:dc:10:4c:a4:d5:81:01:af:77:0e:
bd:6e:15:8e:8e:0e:6e:d5:ec:50:6e:4c:33:c5:40:1c:a6:c3:
c6:61:ce:42:a3:b4:7b:1b:88:73:a4:06:36:df:40:c4:6d:3b:
07:6f:b9:74:9d:c6:70:fe:a9:e6:ad:7c:ff:37:5b:e2:b7:f5:
81:10:a1:81:3a:4c:2d:0f:c8:44:37:94:70:8b:45:d0:51:05:
1d:43:8c:ca:c6:6d:1d:4b:f3:e2:0d:38:a9:3c:83:95:8d:03:
05:71:7d:82:dc:9c:fb:4a:e5:97:22:db:9a:db:7d:8e:4f:36:
db:fe:4e:24:05:af:9b:8a:85:6f:98:3a:64:8b:96:f3:8e:f5:
99:43:f6:1b:59:71:95:c2:79:fb:bb:30:f3:e6:ab:2a:14:2b:
30:03:4b:91:46:36:64:a3:43:26:94:51:ac:76:42:aa:36:9b:
a2:39:57:05:0a:00:a7:60:41:a5:2f:41:c4:44:0e:23:0e:95:
29:03:b5:ae:e8:90:af:65:b8:a4:6c:7f:08:44:f9:22:f1:e3:
a2:7a:90:c0:bf:9a:52:ce:52:b3:ad:88:22:86:0f:29:b8:7b:
b7:32:5d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:35:45 2025 by rpki-client