Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: grl5vUoMtmhblwgXycAB7q4qMfyXSvg3mXlVt3lR1Cs=
Subject key identifier: 0C:3F:17:D3:28:07:C7:30:27:DE:19:8C:4C:A7:4E:50:61:E5:9F:DB
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 0197CDCDAAA1E63FBE5CEE5B829C12C0C9B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 15C0
Signing time: Thu 03 Jul 2025 01:01:37 +0000
Manifest this update: Thu 03 Jul 2025 01:01:37 +0000
Manifest next update: Fri 04 Jul 2025 01:01:37 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: 2AKVbwu5KNxFJalxfCdtNr6n7kQtV7HIkz95PCfd24s=)
2: Kli1CIfvUzezQEeZgfmrCqdQM_I.roa (hash: 78hmVW1qiWAvpebiM5hdAQNsJHKvS7UWJOLOAC6eO10=)
3: yilBdRRmJ9mIX_a1TabLEV03EEk.roa (hash: 4eslmC4MgTLkKxmkhr2W/5XHOeBZOMOpeHMJJDH3k34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:aa:a1:e6:3f:be:5c:ee:5b:82:9c:12:c0:c9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Jul 3 01:01:37 2025 GMT
Not After : Jul 4 01:01:37 2025 GMT
Subject: CN=0c3f17d32807c73027de198c4ca74e5061e59fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:da:d8:b4:5c:80:e1:65:8a:57:65:f3:05:
39:f7:67:40:e2:a3:73:44:d8:99:19:3d:ec:3e:62:
30:2b:0f:7d:84:4b:bd:c2:f3:f9:3f:e3:6f:f7:12:
23:d1:52:ac:48:b1:73:df:41:be:6e:ce:9b:7a:f8:
1c:ee:01:72:38:49:0b:0b:c2:29:a8:2a:0d:bc:39:
77:9f:08:55:ea:95:24:63:0c:68:69:ef:68:dd:c6:
ca:1f:14:0b:b4:bf:e9:06:ac:49:12:dd:b5:a1:00:
d1:2b:dc:21:1d:48:df:b4:b8:83:b9:af:80:8f:23:
79:07:7a:8e:8d:f4:64:b8:be:59:81:83:73:a0:23:
05:b2:de:b3:73:59:15:6d:f6:26:97:43:93:ac:8d:
47:5c:37:b0:e8:63:bc:d3:73:e9:b1:50:40:b6:dc:
c5:20:d1:e7:f3:06:ba:8d:dd:43:a0:6c:ad:c8:6c:
f3:c7:3b:ff:7c:7b:74:50:ac:08:52:2b:43:9a:cc:
cb:13:44:9a:35:3a:f2:5f:bb:48:2a:56:e1:73:e7:
ae:be:62:79:4b:25:ca:a5:fd:75:8b:27:fa:91:15:
8f:d2:6e:f4:fc:f0:a9:6f:28:7e:38:88:b9:53:99:
1f:78:31:ed:5b:32:79:c0:6a:af:cc:2d:b0:51:39:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3F:17:D3:28:07:C7:30:27:DE:19:8C:4C:A7:4E:50:61:E5:9F:DB
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3c:1b:ea:1c:d1:49:bb:6b:51:61:56:29:52:8b:9b:0c:77:
e3:ae:ef:1a:7a:e9:f7:d8:96:f1:a2:70:0c:21:ad:d0:2e:cc:
aa:fe:4a:f2:e2:9b:33:6e:88:ea:5d:47:2b:40:bd:b3:91:e8:
5e:e8:31:58:83:8a:e1:2a:b7:30:79:54:e2:d0:bc:29:4f:9d:
a3:79:4a:de:34:e4:d5:da:58:a6:19:f6:58:2d:04:b4:d1:7f:
31:c6:73:b3:aa:53:7c:09:5c:e6:e7:f4:c2:07:d2:38:0e:22:
73:f0:d0:95:eb:b2:ec:03:98:26:f5:65:08:a3:d0:18:46:36:
6e:a8:e9:66:18:fa:a2:1f:7f:cf:12:49:e7:22:ee:0a:17:6f:
db:e5:2e:16:ad:32:eb:24:1d:65:d3:b5:a8:22:1d:20:63:86:
2e:27:11:2e:ba:8c:e0:4f:0f:05:78:04:2f:90:96:2a:fa:0e:
f5:26:06:b0:29:76:3c:84:9a:3f:4d:78:21:5d:86:75:53:9e:
8d:b0:28:81:e2:3d:93:42:c0:1c:48:46:ea:1f:d9:38:70:92:
ed:76:14:e1:2d:83:be:b7:33:28:9d:a3:58:8e:3b:7d:87:0b:
88:22:b6:ab:67:86:f2:b0:64:28:40:cf:f6:c3:ac:bd:e4:8d:
ce:2c:a2:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfNzaqh5j++XO5bgpwSwMmwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MWJiMDkxNmM4NTM4MDFmMjJjZTcyM2JjMmNjNDE4ODY5
ZGI3ZDAwHhcNMjUwNzAzMDEwMTM3WhcNMjUwNzA0MDEwMTM3WjAzMTEwLwYDVQQD
EygwYzNmMTdkMzI4MDdjNzMwMjdkZTE5OGM0Y2E3NGU1MDYxZTU5ZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlDa2LRcgOFlildl8wU592dA4qNz
RNiZGT3sPmIwKw99hEu9wvP5P+Nv9xIj0VKsSLFz30G+bs6bevgc7gFyOEkLC8Ip
qCoNvDl3nwhV6pUkYwxoae9o3cbKHxQLtL/pBqxJEt21oQDRK9whHUjftLiDua+A
jyN5B3qOjfRkuL5ZgYNzoCMFst6zc1kVbfYml0OTrI1HXDew6GO803PpsVBAttzF
INHn8wa6jd1DoGytyGzzxzv/fHt0UKwIUitDmszLE0SaNTryX7tIKlbhc+euvmJ5
SyXKpf11iyf6kRWP0m70/PCpbyh+OIi5U5kfeDHtWzJ5wGqvzC2wUTl7LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAw/F9MoB8cwJ94ZjEynTlBh5Z/bMB8GA1UdIwQY
MBaAFAYbsJFshTgB8iznI7wsxBiGnbfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iYmIxYzYtOWY5MS00MzQ2LWI2MTYt
YzJkYzdhMDU4ZTMwLzEvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iYmIxYzYtOWY5MS00MzQ2LWI2MTYtYzJkYzdhMDU4ZTMw
LzEvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjwb6hzR
SbtrUWFWKVKLmwx3467vGnrp99iW8aJwDCGt0C7Mqv5K8uKbM26I6l1HK0C9s5Ho
XugxWIOK4Sq3MHlU4tC8KU+do3lK3jTk1dpYphn2WC0EtNF/McZzs6pTfAlc5uf0
wgfSOA4ic/DQleuy7AOYJvVlCKPQGEY2bqjpZhj6oh9/zxJJ5yLuChdv2+UuFq0y
6yQdZdO1qCIdIGOGLicRLrqM4E8PBXgEL5CWKvoO9SYGsCl2PISaP014IV2GdVOe
jbAogeI9k0LAHEhG6h/ZOHCS7XYU4S2DvrczKJ2jWI47fYcLiCK2q2eG8rBkKEDP
9sOsveSNziyisw==
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:08:57 2025 by rpki-client