Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: qo3EKo4f4IhtJ9de5IGGSNMaVNwwdgR2cZbyZYwhZ1A=
Subject key identifier: 56:0E:16:CA:F2:D1:DD:04:89:1D:30:59:F0:0F:B1:32:2E:EC:53:8B
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 0199FBEB0D5B66954148A2BB173A5E220050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:01:49 +0000
Manifest this update: Sun 19 Oct 2025 10:01:49 +0000
Manifest next update: Mon 20 Oct 2025 10:01:49 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: Me1/LbygwHCZ89E2pWJWOG/OFz8JsW2+oqnbWov8I/c=)
2: Kli1CIfvUzezQEeZgfmrCqdQM_I.roa (hash: 78hmVW1qiWAvpebiM5hdAQNsJHKvS7UWJOLOAC6eO10=)
3: yilBdRRmJ9mIX_a1TabLEV03EEk.roa (hash: 4eslmC4MgTLkKxmkhr2W/5XHOeBZOMOpeHMJJDH3k34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0d:5b:66:95:41:48:a2:bb:17:3a:5e:22:00:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Oct 19 10:01:49 2025 GMT
Not After : Oct 20 10:01:49 2025 GMT
Subject: CN=560e16caf2d1dd04891d3059f00fb1322eec538b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:2c:87:b7:c8:1e:5f:4c:3c:f9:a1:c1:fc:
03:69:e5:73:19:86:c4:20:68:0b:23:65:f1:ae:f0:
77:d7:fe:7c:42:dd:f4:6d:e9:fb:31:c2:29:cc:6e:
d0:63:40:12:fb:40:45:8c:d1:07:9a:a3:dd:d7:1a:
d1:a9:ab:dd:7d:69:86:76:7b:6c:d1:ea:9d:92:29:
29:9d:ba:01:04:eb:44:e0:11:33:f9:fe:b5:5c:a9:
82:21:4b:47:e2:4a:3b:1a:0f:13:84:88:fd:cf:28:
d5:d1:8c:62:51:bf:5d:df:2d:bf:e8:fb:ad:75:e7:
6d:e5:ee:9a:c0:6e:f7:3d:af:30:84:77:d7:20:2a:
8f:46:ba:01:fc:f8:f9:14:55:73:86:dc:6d:5b:13:
47:c7:ff:55:6a:f0:df:f2:e4:fe:5c:8e:36:e2:c4:
da:26:f5:83:08:16:14:52:95:e9:5e:1a:0d:66:65:
be:4a:75:55:0c:88:d7:e2:da:6f:f8:77:3d:fc:78:
e6:21:f4:5a:4d:fc:f2:d3:f8:11:55:e0:5e:dd:1b:
5c:cf:a8:a3:47:e9:ba:14:5b:fd:df:81:0f:fd:ec:
07:a7:88:8b:ba:3f:82:6e:c1:47:47:f1:80:d9:91:
29:1b:8c:64:a4:b7:b0:c3:9e:b7:62:81:3c:97:72:
fe:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0E:16:CA:F2:D1:DD:04:89:1D:30:59:F0:0F:B1:32:2E:EC:53:8B
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a1:54:0e:5b:a4:81:73:5d:f6:63:4e:ce:19:79:5b:c8:c3:
79:89:e7:ec:ef:c4:c3:3c:de:21:2c:8a:e8:f5:4a:21:77:b6:
26:1f:34:51:e6:20:98:75:ef:a3:07:8d:39:9d:87:5f:b3:45:
b9:fc:9c:21:26:d6:fe:79:aa:e2:02:dd:a5:7a:0a:bb:96:63:
0b:0d:a5:c5:c2:57:99:8a:2a:1e:77:ba:5c:bc:ee:4a:6a:36:
dc:e0:93:76:c2:20:52:b1:01:a8:a2:77:76:3f:f3:e1:47:cd:
f9:98:54:9c:54:9e:90:63:c0:8d:eb:f8:36:c5:7f:2b:6f:22:
4b:fd:7f:a8:7a:09:9b:6e:d6:b6:82:d7:25:25:9c:b0:df:ce:
83:bc:03:97:f0:7f:51:d5:5a:c1:24:05:b4:80:cd:5b:2c:07:
53:dc:e6:2a:a3:e2:f6:9b:71:53:d9:73:e6:84:49:cf:78:ed:
1e:fc:36:14:63:46:60:1f:0d:21:d7:ef:85:b2:33:9f:da:9a:
cd:29:ab:ab:52:ba:4e:b7:27:ca:53:ca:4a:07:68:9f:eb:b8:
ca:14:bb:3b:2d:b8:60:ad:74:35:1d:7f:dc:3e:2e:68:72:de:
c8:06:12:68:f3:7e:2b:7a:bf:c8:a2:2e:6e:96:ae:3f:0a:7c:
6b:80:fa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:57 2025 by rpki-client