Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
File: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft (raw, json)
Hash identifier: olGiLfyuvjL6enkORARqccwc1TLd9594Obqlfx2Nrjg=
Subject key identifier: 59:8A:36:CB:27:05:F8:8D:65:41:40:D5:72:15:52:E3:5B:06:1F:9D
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 0198D705F5DD7793F0758216727FB919AB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 13:02:28 +0000
Manifest this update: Sat 23 Aug 2025 13:02:28 +0000
Manifest next update: Sun 24 Aug 2025 13:02:28 +0000
Files and hashes: 1: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl (hash: /Wn1Skii5NiRwebrZ4Td009NyNhQCBl50Wf9fW4TeYM=)
2: LVIJD49T-mpIvZxU62MTl9m9hkE.roa (hash: YaoE67iYSNEdVd0kQd7kfsjxfRQdded3vy+Kv/LAgPk=)
3: PTqvLbs-crQCXH75GKZKj2e3XH4.roa (hash: LPrD3bTGgphahX9ng5Tkg/VWB+najziQTzD7XFs0iFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:f5:dd:77:93:f0:75:82:16:72:7f:b9:19:ab:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Aug 23 13:02:28 2025 GMT
Not After : Aug 24 13:02:28 2025 GMT
Subject: CN=598a36cb2705f88d654140d5721552e35b061f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:4a:b5:74:55:80:a7:5a:09:59:ee:d3:5e:
0c:9e:b5:80:7d:5e:f4:27:18:49:72:de:cc:d6:7f:
ed:32:b3:f4:3b:29:89:7c:94:67:a1:05:94:9c:95:
6e:90:c9:61:68:c4:74:4e:02:28:15:8b:f1:93:be:
13:54:61:84:90:98:42:2d:1a:c0:fd:9b:a6:72:0c:
8c:28:62:92:6d:8c:6c:cb:8b:2e:d1:86:4b:be:2d:
f1:ad:33:d0:4d:57:af:80:ad:ca:7d:ae:68:62:ff:
3d:2c:47:28:b4:e7:6f:b3:99:14:52:f5:29:50:2b:
13:90:82:92:d1:ff:cc:a4:08:12:79:8a:ad:85:74:
4e:54:51:30:c3:b7:01:c7:d6:4c:00:79:7a:c9:b2:
5c:71:bc:b1:72:04:7e:32:50:00:e4:8b:bd:72:43:
f5:34:7a:83:ed:b1:88:1b:07:40:3e:df:ca:ea:a1:
95:a3:18:83:04:d4:e2:94:9f:f7:ef:3f:f3:be:cd:
00:9a:1a:60:43:3e:4b:b2:36:d4:ed:8e:2c:0f:7d:
1c:69:b3:b4:4a:dc:02:22:75:37:21:42:19:54:17:
8c:cb:b1:73:d0:63:48:4c:5f:b0:60:5a:ac:43:25:
eb:67:0e:29:40:ef:31:42:e7:fc:44:32:9e:31:0b:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8A:36:CB:27:05:F8:8D:65:41:40:D5:72:15:52:E3:5B:06:1F:9D
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:31:f2:71:ad:3d:27:7d:1e:75:74:4d:c0:ed:6f:e5:17:a0:
3f:3c:79:12:19:86:a2:44:82:28:96:7c:66:f6:ef:9b:ee:25:
53:4c:8c:58:6c:02:e0:6c:c0:f3:a5:98:e0:0b:9d:45:e6:63:
e1:f1:46:6b:96:4b:0f:00:af:fb:7a:c1:68:9f:e3:58:3d:d0:
2e:59:7b:4c:99:52:d6:58:54:a0:58:61:fe:21:ed:62:cc:84:
3f:67:fb:3b:1b:aa:6e:64:86:06:e2:43:de:77:ee:1b:f6:7c:
f2:0c:7c:97:22:19:80:9c:aa:38:74:88:8d:2a:15:9e:e7:d5:
aa:48:1a:bc:46:cd:75:bd:67:46:73:af:3a:f2:59:97:d9:bc:
eb:9c:d5:87:df:87:84:61:a9:05:ff:98:ac:e2:a4:ea:ae:d0:
b6:8d:be:b1:5e:32:81:75:52:d2:96:a3:62:ef:45:01:5d:fe:
f6:34:a5:92:d1:86:6d:cf:1d:74:19:37:a8:00:a8:aa:c2:9e:
0d:bb:14:d9:56:2f:7a:5a:3f:59:92:ea:2f:02:20:0f:ca:87:
c8:0b:d1:0a:cb:a4:15:2d:df:a4:93:4a:00:5d:66:9e:1a:00:
b9:f9:df:25:b3:fe:1a:eb:79:5b:6a:82:1d:15:ea:75:cb:4a:
96:d1:27:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:41:20 2025 by rpki-client