Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: lhPI3uMoEztpNL4RHvbqkUcysWTFF7+C+ep2kCDWzpA=
Subject key identifier: BE:A7:C8:B7:C8:D1:EE:6D:A1:20:AF:55:67:9E:32:F1:B4:77:77:FD
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 0197B70E6C3F3D4BB5BE37C1AC24D0FDB382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 15:01:05 +0000
Manifest this update: Sat 28 Jun 2025 15:01:05 +0000
Manifest next update: Sun 29 Jun 2025 15:01:05 +0000
Files and hashes: 1: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: +2Kb87xus6qvS9nwsX+nlw23sK+G690cNMecTNr5AOc=)
2: OseFlpN5BBrbNEKlLXg6nEL0mf0.roa (hash: 656ZLuWKc6figtfDxdhxBQM6z66wyeYFhuGY7fphkn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6c:3f:3d:4b:b5:be:37:c1:ac:24:d0:fd:b3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Jun 28 15:01:05 2025 GMT
Not After : Jun 29 15:01:05 2025 GMT
Subject: CN=bea7c8b7c8d1ee6da120af55679e32f1b47777fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:50:7f:77:ca:3e:41:b5:ea:c6:5c:fc:4e:
66:4c:33:ba:07:de:dc:7a:f9:61:49:eb:82:35:37:
a9:84:49:a9:bc:5e:ab:be:1c:bb:c1:e2:c1:34:39:
7d:f4:1f:95:db:4f:e2:86:97:be:c5:b9:26:a7:81:
40:74:3b:12:bb:8e:14:e4:94:85:3a:a7:94:4b:3b:
78:32:a9:0f:59:69:e9:ad:e1:43:76:13:0b:ba:86:
e4:16:84:51:06:8a:67:c8:b4:f0:3b:4a:13:a5:29:
a9:f5:bb:a1:04:79:09:b1:5b:f0:ae:02:09:1e:ec:
e9:a8:97:44:fd:f0:25:55:d7:78:04:b4:82:b9:dc:
b0:6a:fe:b1:36:26:fd:9f:7e:1e:61:cc:7b:d8:bb:
2e:70:c7:b9:1c:cc:e1:2a:04:6a:1e:e7:8c:2c:99:
c9:22:1e:d5:3a:1c:95:32:d1:91:08:c1:ac:49:90:
ce:17:7b:82:09:6c:5f:7d:17:e7:62:87:87:b8:fb:
28:90:d6:ca:09:56:4b:4c:5c:aa:66:c7:3e:a9:19:
dd:c8:56:8f:c2:ba:c3:6b:36:da:95:8f:62:d8:a1:
15:77:bf:b5:5c:97:28:7c:7b:ef:73:fe:a6:79:2d:
a5:92:4c:8a:e8:28:a3:f4:f0:f3:c4:e5:ae:ac:f2:
ea:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A7:C8:B7:C8:D1:EE:6D:A1:20:AF:55:67:9E:32:F1:B4:77:77:FD
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e3:ef:45:7b:49:15:93:05:4f:bd:d6:66:40:c8:8d:ce:57:
f0:a4:c6:28:84:c5:c9:5f:8f:51:8a:ac:d8:0a:d3:a5:4e:db:
52:1f:cf:5f:57:57:75:a9:38:87:0d:a0:85:c0:fb:2a:67:d4:
16:16:fe:15:c4:c5:8d:19:87:58:c6:52:8e:85:b4:85:80:d7:
f6:91:22:f7:f1:69:b5:86:a7:8d:a4:4c:91:7e:f6:d2:9d:bf:
77:d8:09:63:0d:81:c9:12:b8:93:48:83:4d:19:f4:b8:70:46:
b0:a3:a3:2d:99:7d:7d:6d:17:b0:17:a4:23:ba:d8:d7:49:f1:
67:53:24:0d:8e:63:95:74:e8:0a:48:76:44:2f:e1:7f:94:9d:
a2:0e:f2:c3:12:bc:c3:67:41:e1:f9:2d:a6:85:29:21:2a:7d:
25:ba:27:e2:70:a7:ac:d0:71:e6:71:5a:69:61:6a:4d:88:1f:
5d:41:c1:aa:2e:aa:9a:42:4f:d7:64:e9:70:b2:13:35:81:db:
bf:87:3a:36:b4:98:11:68:ee:56:d8:c9:2e:bd:fc:b7:b1:8c:
52:f3:fa:16:d8:a9:93:f1:12:c0:60:c5:c7:91:48:90:a5:19:
07:b6:9b:67:68:a4:f4:07:62:e7:d8:a6:f0:5a:90:d8:1f:c8:
cc:d9:ff:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dmw/PUu1vjfBrCTQ/bOCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Nzg1MTE3OTg2YWRhYTQzN2JlYzMwYTJiZjlmMTU3YTky
NTdkZjIwHhcNMjUwNjI4MTUwMTA1WhcNMjUwNjI5MTUwMTA1WjAzMTEwLwYDVQQD
EyhiZWE3YzhiN2M4ZDFlZTZkYTEyMGFmNTU2NzllMzJmMWI0Nzc3N2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm5Qf3fKPkG16sZc/E5mTDO6B97c
evlhSeuCNTephEmpvF6rvhy7weLBNDl99B+V20/ihpe+xbkmp4FAdDsSu44U5JSF
OqeUSzt4MqkPWWnpreFDdhMLuobkFoRRBopnyLTwO0oTpSmp9buhBHkJsVvwrgIJ
HuzpqJdE/fAlVdd4BLSCudywav6xNib9n34eYcx72LsucMe5HMzhKgRqHueMLJnJ
Ih7VOhyVMtGRCMGsSZDOF3uCCWxffRfnYoeHuPsokNbKCVZLTFyqZsc+qRndyFaP
wrrDazbalY9i2KEVd7+1XJcofHvvc/6meS2lkkyK6Cij9PDzxOWurPLqkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6nyLfI0e5toSCvVWeeMvG0d3f9MB8GA1UdIwQY
MBaAFAZ4UReYatqkN77DCiv58VepJX3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2Ut
ODRlZTQ4ODU2NmYxLzEvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2UtODRlZTQ4ODU2NmYx
LzEvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOPvRXtJ
FZMFT73WZkDIjc5X8KTGKITFyV+PUYqs2ArTpU7bUh/PX1dXdak4hw2ghcD7KmfU
Fhb+FcTFjRmHWMZSjoW0hYDX9pEi9/FptYanjaRMkX720p2/d9gJYw2ByRK4k0iD
TRn0uHBGsKOjLZl9fW0XsBekI7rY10nxZ1MkDY5jlXToCkh2RC/hf5Sdog7ywxK8
w2dB4fktpoUpISp9Jbon4nCnrNBx5nFaaWFqTYgfXUHBqi6qmkJP12TpcLITNYHb
v4c6NrSYEWjuVtjJLr38t7GMUvP6Ftipk/ESwGDFx5FIkKUZB7abZ2ik9Adi59im
8FqQ2B/IzNn/wA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:08 2025 by rpki-client