Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
File: BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft (raw, json)
Hash identifier: gqzfUaOoiZJCEl/7yLYHctAPfiBfVLWhJGVr0oHgde4=
Subject key identifier: 45:83:0C:35:1F:1B:88:F2:0B:98:16:E2:1E:01:0C:E7:ED:F1:98:17
Authority key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
Certificate issuer: /CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Certificate serial: 0197B632A02C01CEF9265030DA059F99A3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 11:01:00 +0000
Manifest this update: Sat 28 Jun 2025 11:01:00 +0000
Manifest next update: Sun 29 Jun 2025 11:01:00 +0000
Files and hashes: 1: BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl (hash: Anlf4ksYwNUvgDRyPiUXIko04eRPjXyndHncB4dJCJg=)
2: N7TBLk6ijg60Rw5drnJxmPzvOok.roa (hash: Gzj1MrzdxuXElz1N9UYhs6KigXCuOfoYMXiwL2fVYSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:a0:2c:01:ce:f9:26:50:30:da:05:9f:99:a3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Validity
Not Before: Jun 28 11:01:00 2025 GMT
Not After : Jun 29 11:01:00 2025 GMT
Subject: CN=45830c351f1b88f20b9816e21e010ce7edf19817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c8:ff:5e:f1:12:ae:93:12:55:7f:0a:67:ab:
d0:21:a4:c6:b1:02:28:6f:b9:bc:b4:a1:db:c0:7b:
ed:8c:e5:58:a6:68:09:58:65:bd:f7:1f:f3:7c:1b:
1c:83:08:9f:9f:13:c9:da:5f:2c:36:97:b5:77:1c:
e2:44:9f:42:ec:e0:41:fc:06:1c:aa:f9:ee:fa:66:
e9:ea:72:1a:73:5c:73:dc:8e:e7:e9:05:ec:92:e4:
08:8e:d3:8d:e4:b8:3b:71:93:8c:15:0f:8c:1b:21:
6c:d8:ac:77:9d:65:12:98:3c:ce:54:82:d4:b3:ea:
1e:63:f2:e0:f7:bc:dd:26:a9:de:93:08:39:1e:2f:
c0:15:ed:2d:a3:65:76:fd:d6:62:43:2a:97:fc:fa:
c8:4e:d1:25:76:17:dd:d6:f0:d2:f2:7e:9f:07:49:
e5:c9:27:61:02:9a:02:ab:4d:e8:b3:58:cb:51:9b:
25:07:08:a8:45:89:cc:57:3e:f3:3e:21:c9:c8:b8:
3a:71:2f:18:d6:7a:38:b3:a3:f9:ab:b3:e4:c9:a0:
07:d1:82:96:6a:21:c5:90:39:9b:8d:93:7c:72:ad:
16:9f:be:43:9c:1b:a4:26:cb:9f:ad:73:04:5f:ea:
a9:21:1f:68:48:3c:90:37:68:a5:6f:3d:fc:18:13:
c9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:83:0C:35:1F:1B:88:F2:0B:98:16:E2:1E:01:0C:E7:ED:F1:98:17
X509v3 Authority Key Identifier:
keyid:06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d0:9f:cf:ae:06:01:15:40:f0:02:2f:08:f3:c1:8b:dd:2a:
62:69:0f:d4:b1:fe:d3:32:b9:b3:25:df:d4:97:03:69:b1:60:
22:b9:f4:3b:9d:e2:98:0a:6d:58:8c:c5:4f:3d:ab:78:81:c2:
64:0c:ed:31:62:7c:ff:83:86:61:39:ec:1e:6c:79:60:8c:8d:
4f:73:5b:84:f0:3f:b2:d3:aa:ad:4b:77:56:1a:1e:d0:3a:7f:
28:b1:0d:be:38:aa:fd:cb:d2:53:2a:28:94:55:a2:34:6d:7b:
66:b0:0a:f4:1d:ba:83:3b:7f:7c:8b:8c:14:3a:b1:e9:19:90:
8f:68:60:0c:19:f7:e0:23:30:0d:f9:2d:28:11:b9:07:f8:e2:
6a:a0:8a:0e:5b:70:c3:4f:a0:43:44:fa:45:7e:cb:54:14:99:
c3:35:f0:65:83:00:0c:d6:8b:1d:2b:c0:b1:c9:c2:30:83:d2:
89:99:21:aa:33:4a:87:ca:87:ac:ec:3a:41:3c:7a:5b:b4:6f:
17:8f:c5:74:0e:94:a4:f3:b6:75:f2:56:78:1d:6a:62:c8:d6:
30:7e:12:e6:c3:6b:47:b5:4b:69:a9:46:67:7a:2c:46:c2:ab:
7c:22:54:08:06:7b:7e:6d:41:77:b2:ae:65:2c:f3:67:f0:b7:
47:d0:28:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:49 2025 by rpki-client