Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
File: BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft (raw, json)
Hash identifier: 7t/Evy94nySuRfDtcr2Kt8si9rPB1JOuBngZq2UHv78=
Subject key identifier: 1C:D2:2B:D1:31:2D:76:BD:94:A8:0C:CB:73:65:20:95:96:40:A1:63
Authority key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
Certificate issuer: /CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Certificate serial: 0198D7E13E4392C84D0B3FEA415C33EBF511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 17:01:59 +0000
Manifest this update: Sat 23 Aug 2025 17:01:59 +0000
Manifest next update: Sun 24 Aug 2025 17:01:59 +0000
Files and hashes: 1: BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl (hash: quwR/M9p9kQG8J93Vu5JOE2SAjt6459uywiL+hT/PqA=)
2: N7TBLk6ijg60Rw5drnJxmPzvOok.roa (hash: Gzj1MrzdxuXElz1N9UYhs6KigXCuOfoYMXiwL2fVYSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:3e:43:92:c8:4d:0b:3f:ea:41:5c:33:eb:f5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Validity
Not Before: Aug 23 17:01:59 2025 GMT
Not After : Aug 24 17:01:59 2025 GMT
Subject: CN=1cd22bd1312d76bd94a80ccb736520959640a163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:7f:6a:39:b3:f3:37:2a:a1:6e:35:13:70:
2c:49:1e:9d:4f:38:41:8f:53:44:27:9e:01:80:6f:
ef:f8:d4:f8:41:c9:1a:5d:de:cd:c3:70:83:ff:d0:
65:1d:57:29:c0:aa:ab:ae:c4:6e:1d:15:1f:4d:cf:
15:0d:e8:83:42:73:dd:c9:b2:30:02:0b:55:92:fb:
2f:9c:67:c0:af:e8:69:11:cc:12:4e:c6:55:96:00:
bd:c1:86:6a:d3:12:26:4b:46:72:ca:4b:4c:28:20:
01:49:ea:bc:d5:6b:20:8e:d5:fc:fb:af:b7:f6:d7:
06:d2:c6:7e:ad:bb:f8:29:76:36:2e:71:c3:f6:a7:
18:9a:41:9a:c9:42:f0:33:52:38:76:7b:98:18:82:
46:68:1a:b4:df:0c:78:70:26:fc:15:ca:f5:a0:b1:
40:48:91:95:e4:a2:c8:b1:23:ba:93:dc:01:85:a2:
ea:d8:ea:b6:b7:62:22:22:bd:d1:90:18:3e:65:bf:
0c:f2:c5:0e:07:0a:5f:77:7a:86:e4:33:cd:09:4d:
0a:1d:57:a5:06:f1:90:61:cb:25:27:a3:c6:1c:d2:
f2:4a:b0:96:86:14:87:d0:97:32:7d:67:d8:97:87:
c9:52:dc:cf:cd:ea:57:31:1a:5b:66:c2:3e:c2:87:
cf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D2:2B:D1:31:2D:76:BD:94:A8:0C:CB:73:65:20:95:96:40:A1:63
X509v3 Authority Key Identifier:
keyid:06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ec:8b:bf:53:fb:2d:b0:9a:b0:5c:cf:5f:95:f1:7b:c3:fd:
af:2f:1b:9b:5c:d1:b8:30:a5:7a:d1:82:58:93:c8:71:8d:28:
38:26:ce:60:3e:e3:d3:e3:fa:77:02:9a:35:b8:09:22:4e:c4:
54:19:a3:6c:52:de:88:ae:42:fa:b3:ce:47:b9:90:a1:6c:b1:
e8:0c:1f:43:8a:0e:20:65:26:ed:44:a3:1a:b4:46:a1:8b:d3:
5d:45:ad:90:fa:45:af:72:96:29:0c:39:90:12:7f:54:88:40:
f5:43:56:85:72:b9:8a:ca:2d:7e:bb:8e:75:18:18:4a:82:6a:
52:18:bd:06:f0:0f:2b:8e:a1:30:f0:c1:d8:f4:d5:84:09:dd:
eb:ff:18:ce:07:20:a1:4e:fb:e5:67:13:cc:5e:f1:7c:88:ab:
cd:bf:e9:a6:3f:d6:f0:10:19:59:44:cb:fc:25:c5:50:87:7c:
f2:a1:99:21:b7:a2:03:99:55:2c:5b:02:70:d0:d6:40:88:1d:
39:d7:1e:3f:09:bb:d0:da:fd:4b:e8:82:f6:e5:1f:36:f1:bb:
ae:d8:9a:d4:22:6a:3d:8a:89:e9:3a:54:92:98:ce:c7:e5:26:
5d:f0:8b:a4:1d:4e:f9:c3:28:bd:8e:ed:f9:12:6f:ea:7f:b4:
cc:2a:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:38:53 2025 by rpki-client