Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
File: BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft (raw, json)
Hash identifier: osCyZLUsOXtB+g2xJKOFf6n64EuHjbKtDjYth8gylHM=
Subject key identifier: 6B:11:82:45:E3:04:F7:97:32:56:FC:89:68:2C:82:E6:62:BC:39:58
Authority key identifier: 06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
Certificate issuer: /CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Certificate serial: 0199FFFE556DF2F50D29F6579BAFF01591CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
Manifest number: 03A7
Signing time: Mon 20 Oct 2025 05:01:21 +0000
Manifest this update: Mon 20 Oct 2025 05:01:21 +0000
Manifest next update: Tue 21 Oct 2025 05:01:21 +0000
Files and hashes: 1: BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl (hash: MJvDsvWrNKeHgL5PRkPmMque7N2ueP6Gybc1yO4juRY=)
2: IBb1HqZFTHsm_sCmjR2ccm8RUCA.roa (hash: KJ8NP0RBTfkNOG7Be7nzu7TlYeYPrpFzbgBEOJgWVgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:55:6d:f2:f5:0d:29:f6:57:9b:af:f0:15:91:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Validity
Not Before: Oct 20 05:01:21 2025 GMT
Not After : Oct 21 05:01:21 2025 GMT
Subject: CN=6b118245e304f7973256fc89682c82e662bc3958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:60:d2:0d:6c:58:92:b8:82:a0:c6:7e:be:
b3:a0:b3:a7:b3:7c:a7:7a:0e:b3:90:78:15:81:fa:
bb:60:e5:79:1e:1d:1e:76:37:b7:c8:22:e6:d7:03:
fe:95:0b:a9:d6:05:7b:2e:f7:97:35:f8:b6:12:a9:
0f:58:4c:42:42:43:7a:b8:43:a5:fe:fc:7b:72:4c:
0f:6e:9b:96:d9:93:cc:b3:a0:8e:ba:51:78:91:1f:
bf:57:31:43:fb:a6:fa:68:01:1f:2f:b5:09:68:9f:
e0:3d:31:5e:1c:2d:5d:7b:24:c3:8c:e6:8e:99:1c:
37:57:b8:21:e4:40:0e:fd:96:87:4d:75:c4:23:3c:
77:a5:fb:0f:63:79:a2:42:e0:de:2a:ce:af:35:1e:
e0:c6:0d:78:91:08:6f:0f:3f:40:ff:59:05:47:ea:
ec:08:f6:90:06:28:63:5b:f7:a1:e8:37:00:b3:8a:
b7:2d:69:94:1d:1e:1b:6a:42:6d:e4:70:96:3b:8c:
95:2d:66:57:cc:0b:0f:56:44:e0:17:07:15:f1:fd:
fa:cf:8a:96:ad:d1:1f:7b:1d:67:69:43:14:66:90:
c1:54:ea:e2:75:ec:9f:80:d1:0b:20:c7:1b:25:a2:
dc:49:23:7c:41:c0:7f:9e:26:77:4c:dd:7e:94:59:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:11:82:45:E3:04:F7:97:32:56:FC:89:68:2C:82:E6:62:BC:39:58
X509v3 Authority Key Identifier:
keyid:06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6a:b8:dd:3b:39:ec:50:c1:64:d2:3c:c3:c8:84:7b:28:ff:
b7:d9:1b:a7:97:26:4b:91:f1:2f:c6:7b:82:01:aa:1d:7a:6a:
2a:1e:9a:f5:c7:aa:54:a8:fe:6a:35:61:f1:ed:af:cf:36:cd:
14:e9:3b:a9:a4:c2:2d:0b:9c:8c:28:4e:d9:00:d8:32:26:8a:
b3:08:39:63:00:94:9e:a2:18:85:cf:17:ce:9b:c6:6a:9a:fd:
13:17:2c:24:dd:df:40:a7:e6:f9:80:33:68:25:11:87:40:f4:
bf:dc:de:16:83:ea:1f:28:67:4d:21:9c:9f:b4:0e:f2:0a:c3:
5b:2b:7c:9d:6d:7f:43:6b:fc:ea:fb:1a:cf:36:5b:64:66:d0:
80:bd:14:be:a1:19:72:b5:92:ab:b7:b1:57:71:3b:af:57:a6:
01:39:b6:85:f3:e5:9a:8a:e5:f6:bf:df:f6:0f:80:c5:8e:18:
f5:86:22:7e:55:13:ed:96:22:21:74:85:21:02:76:02:87:a0:
b4:54:03:a1:4c:72:eb:3f:b0:9e:34:db:93:47:64:81:65:2c:
00:12:44:03:ef:76:28:cb:c0:b0:fe:cb:36:45:5e:d7:09:8a:
52:3a:ab:75:8b:dd:42:49:05:81:17:3f:77:1f:82:94:36:00:
bd:bb:37:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:35 2025 by rpki-client