Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
File: BkhNH1fbDMIyb6pT06eq0mjbwmY.mft (raw, json)
Hash identifier: hNfmOFT/OBVZSJUGJbDIV3cJsIT+S7GKKHPBFBVlvjU=
Subject key identifier: 65:39:58:A4:CC:16:92:2E:E7:06:8C:E5:21:6A:B6:D0:67:14:2C:A9
Authority key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
Certificate issuer: /CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Certificate serial: 0197B6D7B70FCE7BD9618185FFF711A38E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 14:01:19 +0000
Manifest this update: Sat 28 Jun 2025 14:01:19 +0000
Manifest next update: Sun 29 Jun 2025 14:01:19 +0000
Files and hashes: 1: BkhNH1fbDMIyb6pT06eq0mjbwmY.crl (hash: T24L4WPz2luu1WSkocX7NCP6syzKB6cpyw8duuYkuBg=)
2: wjXBOQcWQ-FZfNOvsXQ1F4lPlGw.roa (hash: E+xrzCXzCwEyErrE4D/BReffI2+8855YllSEHagiBtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b7:0f:ce:7b:d9:61:81:85:ff:f7:11:a3:8e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Validity
Not Before: Jun 28 14:01:19 2025 GMT
Not After : Jun 29 14:01:19 2025 GMT
Subject: CN=653958a4cc16922ee7068ce5216ab6d067142ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:62:fe:07:d0:68:c0:90:b2:fe:40:2a:f1:
f8:9a:f8:8b:26:2b:a4:14:3f:26:97:af:7c:59:ed:
fe:dc:d9:24:d2:e5:94:f3:7a:af:69:53:5a:e5:e2:
09:1c:2e:dd:59:12:42:b5:5f:6d:f5:d6:35:62:b1:
c7:a9:17:69:22:34:6a:45:74:23:df:af:5a:d6:a0:
8f:a0:9b:ef:31:53:5e:f5:25:e1:4e:22:bf:db:17:
89:a8:bd:53:d6:08:e6:a8:71:5f:67:5b:23:9b:4d:
84:c6:fa:04:ab:e0:b8:8d:78:9c:f0:61:c7:77:31:
57:3c:7c:4b:70:31:6d:b6:f2:15:68:01:66:d5:1b:
eb:74:5d:68:ad:b4:dc:42:ef:60:9d:23:f9:60:23:
8f:55:be:2b:0f:79:59:5e:cc:b0:fb:16:ae:a6:c0:
30:63:72:81:c6:73:99:c1:f3:91:6f:e9:f9:79:cc:
66:98:2f:46:0b:c4:e0:8f:04:9c:41:09:30:f0:6d:
5a:34:03:98:02:33:b4:5b:bd:15:0f:a6:45:64:46:
10:1f:de:85:d1:97:a0:40:58:02:69:54:17:5f:ae:
6f:61:1b:92:56:8e:4c:1f:28:6c:64:2d:a3:29:26:
b2:e1:ac:98:61:75:9a:e0:99:6e:c4:1e:0a:74:4a:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:39:58:A4:CC:16:92:2E:E7:06:8C:E5:21:6A:B6:D0:67:14:2C:A9
X509v3 Authority Key Identifier:
keyid:06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:23:72:a3:d3:2d:a3:56:c6:24:cf:e0:2f:07:1c:aa:db:2e:
38:12:23:1c:62:c2:46:f6:3b:b1:94:ec:39:fe:e7:7a:af:73:
45:61:f3:da:25:4a:1a:30:32:02:c2:3a:db:7e:ed:f1:9c:6e:
6d:14:f4:2a:7d:51:fe:60:c6:cb:3d:d2:73:1b:95:79:90:74:
90:19:ac:a8:f1:63:4b:7e:b5:be:5f:0f:05:a3:b6:99:76:9e:
31:25:a8:07:fb:e3:a2:23:ea:fa:8d:0b:a5:c3:56:bd:be:81:
a1:10:41:dc:d2:60:6e:f2:f0:40:48:1d:f3:39:49:65:07:e5:
cb:d4:84:c3:bf:4d:e3:44:0b:99:b3:1d:3f:ed:4d:40:60:0c:
11:46:ef:81:b9:03:72:21:d1:5e:ff:1e:d1:f4:23:fb:17:cd:
e6:ff:16:74:0b:3e:14:48:9e:b5:1a:44:17:0e:a8:a8:0d:30:
ce:73:1c:11:47:5f:66:31:4f:33:7c:bd:72:b0:0c:69:a6:b3:
b2:74:a0:8f:38:e2:9d:2a:bc:4a:da:da:19:28:09:f1:de:3e:
9a:ad:44:06:c9:c6:85:50:c1:8a:aa:63:d8:7c:0b:7b:b4:c3:
c6:9a:60:81:00:9c:1b:14:37:59:23:37:74:f3:20:65:4e:ea:
e6:84:10:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe217cPznvZYYGF//cRo44HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NDg0ZDFmNTdkYjBjYzIzMjZmYWE1M2QzYTdhYWQyNjhk
YmMyNjYwHhcNMjUwNjI4MTQwMTE5WhcNMjUwNjI5MTQwMTE5WjAzMTEwLwYDVQQD
Eyg2NTM5NThhNGNjMTY5MjJlZTcwNjhjZTUyMTZhYjZkMDY3MTQyY2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvExi/gfQaMCQsv5AKvH4mviLJiuk
FD8ml698We3+3Nkk0uWU83qvaVNa5eIJHC7dWRJCtV9t9dY1YrHHqRdpIjRqRXQj
369a1qCPoJvvMVNe9SXhTiK/2xeJqL1T1gjmqHFfZ1sjm02ExvoEq+C4jXic8GHH
dzFXPHxLcDFttvIVaAFm1RvrdF1orbTcQu9gnSP5YCOPVb4rD3lZXsyw+xaupsAw
Y3KBxnOZwfORb+n5ecxmmC9GC8TgjwScQQkw8G1aNAOYAjO0W70VD6ZFZEYQH96F
0ZegQFgCaVQXX65vYRuSVo5MHyhsZC2jKSay4ayYYXWa4JluxB4KdEqFJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGU5WKTMFpIu5waM5SFqttBnFCypMB8GA1UdIwQY
MBaAFAZITR9X2wzCMm+qU9OnqtJo28JmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmtoTkgxZmJETUl5YjZwVDA2ZXEwbWpid21ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83MDI4MjktMGQ4ZS00OWRiLTg0YWUt
MDQ5MjUxOTRjNWU2LzEvQmtoTkgxZmJETUl5YjZwVDA2ZXEwbWpid21ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83MDI4MjktMGQ4ZS00OWRiLTg0YWUtMDQ5MjUxOTRjNWU2
LzEvQmtoTkgxZmJETUl5YjZwVDA2ZXEwbWpid21ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiNyo9Mt
o1bGJM/gLwccqtsuOBIjHGLCRvY7sZTsOf7neq9zRWHz2iVKGjAyAsI6237t8Zxu
bRT0Kn1R/mDGyz3ScxuVeZB0kBmsqPFjS361vl8PBaO2mXaeMSWoB/vjoiPq+o0L
pcNWvb6BoRBB3NJgbvLwQEgd8zlJZQfly9SEw79N40QLmbMdP+1NQGAMEUbvgbkD
ciHRXv8e0fQj+xfN5v8WdAs+FEietRpEFw6oqA0wznMcEUdfZjFPM3y9crAMaaaz
snSgjzjinSq8StraGSgJ8d4+mq1EBsnGhVDBiqpj2HwLe7TDxppggQCcGxQ3WSM3
dPMgZU7q5oQQMQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:33 2025 by rpki-client