Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier: MuyTTqXwsJzRwvmr8o/56AWoofS9GRBdG415wQUx9YM=
Subject key identifier: 56:52:FD:C3:46:F0:FB:F1:37:85:3F:BB:8A:49:BE:9A:1D:C6:88:EF
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial: 0199FC58ABC52E45D2C772C544FA67B91BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:33 +0000
Manifest this update: Sun 19 Oct 2025 12:01:33 +0000
Manifest next update: Mon 20 Oct 2025 12:01:33 +0000
Files and hashes: 1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: GW7XQ+Dhs5vb2JkH16Dxo4jWaQEwKoJX6nJfnI2Ycro=)
2: BliaGrjDAqHKNEj9Mx9veOEBPEw.roa (hash: Zp3YmeNzMTw4uQ2BI2h1hZyUbxrVTAnKdQaDtTTNRXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ab:c5:2e:45:d2:c7:72:c5:44:fa:67:b9:1b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
Validity
Not Before: Oct 19 12:01:33 2025 GMT
Not After : Oct 20 12:01:33 2025 GMT
Subject: CN=5652fdc346f0fbf137853fbb8a49be9a1dc688ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:67:61:d6:8d:bd:c6:59:c6:0b:b8:1d:4b:
ec:06:4b:91:61:07:3b:6b:3b:62:c7:cb:38:3f:95:
75:da:19:6f:d6:68:73:13:9b:66:ae:8a:d8:eb:7a:
2f:42:22:89:26:68:7f:a8:3e:66:82:b3:48:9a:0a:
09:29:85:18:95:d1:d3:cf:a0:d1:df:03:e3:72:df:
3b:8e:be:7c:93:d2:41:9f:1b:1e:f8:ba:8e:24:6c:
18:1f:99:58:50:a4:83:7e:44:c9:ec:16:c9:48:01:
b2:04:21:5d:75:7f:3f:be:2f:88:ea:ad:76:d1:ea:
14:db:5a:9e:4d:33:29:f6:f0:3e:fd:28:54:6e:ea:
78:7d:01:fd:7c:52:2e:77:2e:07:50:b0:34:71:ae:
b5:6f:c3:13:91:66:79:19:04:53:b9:3c:6d:c5:80:
92:da:1c:d2:d1:51:0c:55:4e:5c:55:04:30:95:fc:
21:16:00:53:ee:df:b2:a1:a5:6d:72:7e:c5:92:bd:
7b:c6:fa:7b:43:bd:92:09:ec:22:92:cf:17:66:50:
e5:49:a4:19:cd:c8:a8:1c:2e:a2:9e:df:eb:b7:1c:
35:85:3c:d0:8e:45:62:ab:1d:c7:70:d1:7e:41:e5:
8c:58:96:e2:03:b9:70:07:3a:ec:bc:34:3b:c0:d8:
6a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:52:FD:C3:46:F0:FB:F1:37:85:3F:BB:8A:49:BE:9A:1D:C6:88:EF
X509v3 Authority Key Identifier:
keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e5:94:a9:49:6a:2f:27:a4:76:d1:53:31:78:35:d2:92:23:
d3:fb:65:0e:ac:05:61:2a:d4:98:47:2f:88:2b:f3:77:f9:0c:
74:06:ae:77:94:e9:34:af:0f:61:00:2f:05:28:42:ec:12:37:
6c:3d:58:ac:71:1b:4b:be:98:ce:a4:a1:7b:c1:84:ad:56:4e:
c9:3f:e1:e7:e3:3b:d1:59:3d:ac:50:48:9a:69:a5:53:8c:71:
93:81:1e:9f:a6:3f:f0:49:81:c8:dc:49:24:35:17:b6:1a:23:
d0:8c:cd:f3:bf:64:1c:38:8b:dd:1c:95:bb:d9:cd:8e:f2:cc:
02:a4:33:f5:fe:47:8d:59:a2:70:d7:2a:d2:a8:2e:01:b0:5d:
f8:e2:62:c8:32:de:df:60:69:34:08:91:78:6a:af:52:85:18:
a2:f8:68:11:24:59:84:d4:3a:c8:c3:d2:04:2b:c3:fc:eb:f5:
f0:f8:30:6f:ce:83:7e:50:3e:e6:d8:aa:b5:44:06:85:5d:79:
3d:ce:14:5d:e3:ae:d9:b2:2b:48:8d:a0:f7:90:46:39:ce:b2:
b8:99:26:14:95:4f:1a:f3:f0:2f:d0:43:11:9f:6c:ac:b7:d5:
ab:d9:c1:16:89:32:ec:b9:47:5f:d8:9b:01:13:48:ed:5c:f1:
3d:22:c0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:14 2025 by rpki-client