Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: Mlv/rltO4HIvszSTZUHmPyvPGdPp1ACtGdK/UHmhnfI=
Subject key identifier: 14:EB:E2:BF:74:A2:44:8B:36:28:78:10:E0:1B:16:EE:9F:0F:D6:A0
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 0198D660B02511F9BFA078CD0748350311C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:01:57 +0000
Manifest this update: Sat 23 Aug 2025 10:01:57 +0000
Manifest next update: Sun 24 Aug 2025 10:01:57 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: Heb/8gpFjXvI4TS5OSUDqicY2u96mWWtSqnkH9rItGM=)
2: Kli1CIfvUzezQEeZgfmrCqdQM_I.roa (hash: 78hmVW1qiWAvpebiM5hdAQNsJHKvS7UWJOLOAC6eO10=)
3: yilBdRRmJ9mIX_a1TabLEV03EEk.roa (hash: 4eslmC4MgTLkKxmkhr2W/5XHOeBZOMOpeHMJJDH3k34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b0:25:11:f9:bf:a0:78:cd:07:48:35:03:11:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Aug 23 10:01:57 2025 GMT
Not After : Aug 24 10:01:57 2025 GMT
Subject: CN=14ebe2bf74a2448b36287810e01b16ee9f0fd6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:26:ee:58:61:9c:26:86:0c:b1:d7:23:21:
09:f3:37:cf:1a:38:cc:12:05:b1:3e:44:13:7f:01:
85:02:06:bc:51:6b:ae:ba:f3:4b:bd:58:54:80:8b:
92:0c:46:81:ba:cf:d7:6d:bf:c0:cb:17:24:85:01:
e2:a5:d0:14:0e:4f:a9:4c:d8:4b:ec:7d:15:18:84:
aa:0f:86:98:27:29:98:2f:4d:e5:e9:e8:ea:06:b0:
62:2c:47:77:1b:08:9a:e3:82:fb:c3:e6:b2:d9:77:
a3:6b:1e:c6:88:d6:92:d1:d9:2c:a5:70:0d:c8:0e:
0d:db:7a:2f:16:7a:30:4b:b8:ac:1b:46:ac:9d:b4:
65:f9:01:fd:a2:e0:f8:14:7a:d7:e5:3c:21:75:6e:
40:03:e8:15:07:89:58:13:9f:84:42:d4:4f:87:c9:
f3:bf:4e:01:c1:80:a9:04:d4:44:6b:30:49:20:a5:
8c:cb:f5:29:c0:26:25:0a:4d:b3:58:8e:22:a4:ae:
73:e9:28:e5:c4:2f:29:76:1b:5f:28:0c:79:9c:1c:
49:ab:7c:e5:fe:04:04:bf:d2:4a:29:5c:23:21:df:
05:ff:c1:6e:2d:58:3f:62:53:ba:38:55:87:c2:37:
15:ac:5b:bc:ad:b3:8d:f3:d7:6a:c4:03:e5:87:a6:
4f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EB:E2:BF:74:A2:44:8B:36:28:78:10:E0:1B:16:EE:9F:0F:D6:A0
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:02:ab:76:80:2d:5a:bd:73:91:4f:2b:ed:dd:10:68:e1:6c:
54:0d:63:66:6e:a4:da:53:65:26:d6:38:5d:c8:60:d0:95:d4:
40:61:70:00:c1:fd:fa:1e:c1:32:ca:20:ff:17:55:03:9f:9a:
c7:48:fa:7f:84:08:5e:bc:a4:69:09:b5:c4:6a:f5:48:e2:fe:
d7:5d:e8:d6:36:b5:40:ab:22:61:38:51:66:d5:79:8d:64:5c:
2f:a4:de:f7:25:33:c2:89:eb:0d:43:28:d0:7a:aa:49:51:5e:
96:ff:6d:a6:a3:ae:7f:48:57:ac:9d:67:93:a6:7d:8e:06:f9:
78:9e:4e:dd:95:8d:54:9d:8f:67:5c:1a:93:71:71:d1:5d:29:
d9:1b:71:ca:65:f2:4e:06:a5:82:91:94:ee:6a:35:a7:72:b0:
3e:20:77:d1:69:8a:4a:76:ed:48:fa:ee:15:83:f0:fd:0a:e0:
74:b8:dc:b4:02:f8:01:55:e3:32:29:06:03:22:a6:53:ed:48:
ec:c9:22:50:38:62:24:67:bb:bb:36:9b:b5:4c:2c:3f:1c:ea:
fb:eb:71:41:24:4c:3a:f7:09:06:37:54:39:c1:4c:58:58:76:
94:37:2c:35:8d:5d:fd:c7:36:75:d9:4f:00:7a:e1:24:3c:55:
ec:89:6e:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYLAlEfm/oHjNB0g1AxHHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MWJiMDkxNmM4NTM4MDFmMjJjZTcyM2JjMmNjNDE4ODY5
ZGI3ZDAwHhcNMjUwODIzMTAwMTU3WhcNMjUwODI0MTAwMTU3WjAzMTEwLwYDVQQD
EygxNGViZTJiZjc0YTI0NDhiMzYyODc4MTBlMDFiMTZlZTlmMGZkNmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp90m7lhhnCaGDLHXIyEJ8zfPGjjM
EgWxPkQTfwGFAga8UWuuuvNLvVhUgIuSDEaBus/Xbb/AyxckhQHipdAUDk+pTNhL
7H0VGISqD4aYJymYL03l6ejqBrBiLEd3Gwia44L7w+ay2Xejax7GiNaS0dkspXAN
yA4N23ovFnowS7isG0asnbRl+QH9ouD4FHrX5TwhdW5AA+gVB4lYE5+EQtRPh8nz
v04BwYCpBNREazBJIKWMy/UpwCYlCk2zWI4ipK5z6SjlxC8pdhtfKAx5nBxJq3zl
/gQEv9JKKVwjId8F/8FuLVg/YlO6OFWHwjcVrFu8rbON89dqxAPlh6ZP2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTr4r90okSLNih4EOAbFu6fD9agMB8GA1UdIwQY
MBaAFAYbsJFshTgB8iznI7wsxBiGnbfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iYmIxYzYtOWY5MS00MzQ2LWI2MTYt
YzJkYzdhMDU4ZTMwLzEvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iYmIxYzYtOWY5MS00MzQ2LWI2MTYtYzJkYzdhMDU4ZTMw
LzEvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwKrdoAt
Wr1zkU8r7d0QaOFsVA1jZm6k2lNlJtY4Xchg0JXUQGFwAMH9+h7BMsog/xdVA5+a
x0j6f4QIXrykaQm1xGr1SOL+113o1ja1QKsiYThRZtV5jWRcL6Te9yUzwonrDUMo
0HqqSVFelv9tpqOuf0hXrJ1nk6Z9jgb5eJ5O3ZWNVJ2PZ1wak3Fx0V0p2RtxymXy
TgalgpGU7mo1p3KwPiB30WmKSnbtSPruFYPw/QrgdLjctAL4AVXjMikGAyKmU+1I
7MkiUDhiJGe7uzabtUwsPxzq++txQSRMOvcJBjdUOcFMWFh2lDcsNY1d/cc2ddlP
AHrhJDxV7Ilu4A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:18:18 2025 by rpki-client