Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
File: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json)
Hash identifier: q8uqU8T2swW0Mf+QdrZ51w3K7HUU5FHCGwX9gN11DbI=
Subject key identifier: 18:44:98:0E:4D:10:E3:4E:27:52:42:74:B1:29:30:8B:CD:F9:A8:F2
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 0198D54DFE81E3B46C3B8362E8871E20106D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
Manifest number: 09C8
Signing time: Sat 23 Aug 2025 05:01:54 +0000
Manifest this update: Sat 23 Aug 2025 05:01:54 +0000
Manifest next update: Sun 24 Aug 2025 05:01:54 +0000
Files and hashes: 1: 1uAuKLt072-ZQlDEaEvJ4cVZt0U.roa (hash: VxasM346e46c28SKyluMBsYSF6rJX7VQBKo0/PUfiM8=)
2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: R1AwIKPKSNbRtHyf5qwYlNMurFIyslNDEtfVOY8AHec=)
3: FOTPh9BPoJbjEvO_XqYw0Ecj8wo.roa (hash: Tk8RIwgbHfyEByRiqFBz9C7JpjarILl3F0YIF0cWF/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:fe:81:e3:b4:6c:3b:83:62:e8:87:1e:20:10:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: Aug 23 05:01:54 2025 GMT
Not After : Aug 24 05:01:54 2025 GMT
Subject: CN=1844980e4d10e34e27524274b129308bcdf9a8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:df:3b:0b:28:9d:90:21:75:8f:7e:93:2b:
8e:4b:7f:bb:44:85:c8:38:ff:88:8e:e0:ac:90:d5:
fe:f0:7d:14:89:32:f5:e8:00:52:02:0a:52:28:54:
e7:6f:3d:3b:f3:f1:14:f2:c6:18:73:3c:19:ce:a7:
72:ce:51:f4:24:4f:7a:e2:c8:bc:58:ef:b4:ce:64:
28:0c:71:91:46:40:0e:64:12:bf:ce:ab:34:3f:6d:
dd:e6:be:46:fb:05:89:c3:e7:58:96:83:cc:aa:41:
91:9e:0b:71:8a:e7:8e:5f:4f:5f:ca:f2:64:e6:82:
10:d1:3e:37:b3:27:e9:e1:4d:4c:61:21:2a:01:d5:
58:d1:98:82:c4:7e:df:03:e0:85:72:49:20:6c:ec:
36:ee:68:e9:d6:b8:1f:06:2d:9a:da:2f:12:c5:4b:
27:31:e8:35:27:35:ad:c2:a8:37:6d:43:b0:22:7a:
40:32:ec:b6:c3:43:60:da:06:5f:7f:a7:ba:1c:15:
7a:ec:dc:c4:7e:f4:5a:3e:db:4d:54:6d:79:a2:8b:
ac:12:06:a7:55:55:90:4a:1f:6d:2d:f4:c7:bb:60:
3e:ef:8f:43:15:0d:28:18:64:e1:95:a8:1d:8f:8b:
96:9e:11:ad:ed:be:58:eb:63:09:cc:70:7e:3b:d3:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:44:98:0E:4D:10:E3:4E:27:52:42:74:B1:29:30:8B:CD:F9:A8:F2
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:17:db:4b:01:e8:1c:bb:78:c1:9c:e2:9b:ca:de:c5:4e:2e:
ef:ed:78:59:29:d7:e0:a7:cb:f6:53:eb:96:4e:eb:88:93:8c:
c0:88:d5:dd:01:b7:f6:54:ba:71:44:7f:dc:da:ab:65:c4:39:
f2:dd:5d:e8:ff:89:98:3b:6e:af:b5:35:33:f6:4f:ba:23:f6:
a0:66:bd:97:ba:54:5e:a7:00:27:75:b0:03:47:b2:1a:5f:90:
d5:9c:b8:33:3d:63:fd:66:27:71:3b:9e:09:bc:5d:8a:d0:1b:
4a:3a:9e:e9:45:d7:7b:c7:ec:b8:39:35:b0:7e:93:cc:33:44:
d8:44:ab:0f:20:91:07:ce:89:52:8c:8d:25:2a:b9:49:4f:c9:
71:bd:e7:df:b8:6c:e3:26:40:0a:d4:cb:0f:f7:7a:c0:a1:f9:
33:ed:2c:13:0d:c2:29:5c:64:85:0b:f4:e9:40:1e:82:7a:55:
84:b5:21:79:e0:3d:a2:c4:b2:dd:5a:0f:a2:04:b0:5b:6f:5c:
f2:93:a2:f4:1e:d1:2f:5d:ea:28:89:9a:05:08:7a:9c:1e:64:
d9:14:a6:5e:7e:87:98:98:ea:54:c2:cd:24:4d:c5:14:74:f7:
b0:cb:a0:4f:28:f6:c0:b0:ec:99:6f:1f:34:ea:d3:12:27:1e:
68:82:5b:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTf6B47RsO4Ni6IceIBBtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MWUyNTU0ZTUyMDM3NzgxZDEwN2M4ZjgzMTljOTNlNTk5
ODZmMDUwHhcNMjUwODIzMDUwMTU0WhcNMjUwODI0MDUwMTU0WjAzMTEwLwYDVQQD
EygxODQ0OTgwZTRkMTBlMzRlMjc1MjQyNzRiMTI5MzA4YmNkZjlhOGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPTfOwsonZAhdY9+kyuOS3+7RIXI
OP+IjuCskNX+8H0UiTL16ABSAgpSKFTnbz078/EU8sYYczwZzqdyzlH0JE964si8
WO+0zmQoDHGRRkAOZBK/zqs0P23d5r5G+wWJw+dYloPMqkGRngtxiueOX09fyvJk
5oIQ0T43syfp4U1MYSEqAdVY0ZiCxH7fA+CFckkgbOw27mjp1rgfBi2a2i8SxUsn
Meg1JzWtwqg3bUOwInpAMuy2w0Ng2gZff6e6HBV67NzEfvRaPttNVG15oousEgan
VVWQSh9tLfTHu2A+749DFQ0oGGThlagdj4uWnhGt7b5Y62MJzHB+O9NRXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhEmA5NEONOJ1JCdLEpMIvN+ajyMB8GA1UdIwQY
MBaAFAYeJVTlIDd4HRB8j4MZyT5ZmG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmg0bFZPVWdOM2dkRUh5UGd4bkpQbG1ZYndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mYTZmNDMtN2RkMS00MDViLThkY2Ut
MjliMDM4MDg0YWE2LzEvQmg0bFZPVWdOM2dkRUh5UGd4bkpQbG1ZYndVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mYTZmNDMtN2RkMS00MDViLThkY2UtMjliMDM4MDg0YWE2
LzEvQmg0bFZPVWdOM2dkRUh5UGd4bkpQbG1ZYndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBfbSwHo
HLt4wZzim8rexU4u7+14WSnX4KfL9lPrlk7riJOMwIjV3QG39lS6cUR/3NqrZcQ5
8t1d6P+JmDtur7U1M/ZPuiP2oGa9l7pUXqcAJ3WwA0eyGl+Q1Zy4Mz1j/WYncTue
CbxditAbSjqe6UXXe8fsuDk1sH6TzDNE2ESrDyCRB86JUoyNJSq5SU/Jcb3n37hs
4yZACtTLD/d6wKH5M+0sEw3CKVxkhQv06UAegnpVhLUheeA9osSy3VoPogSwW29c
8pOi9B7RL13qKImaBQh6nB5k2RSmXn6HmJjqVMLNJE3FFHT3sMugTyj2wLDsmW8f
NOrTEiceaIJbEw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:19 2025 by rpki-client