Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
File: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft (raw, json)
Hash identifier: nxaEvdEQVTCuYzoqkHdo4Lg0XinGlIF/gWp0t1oydRA=
Subject key identifier: 94:D7:38:96:32:47:DD:6A:7A:1A:94:30:A0:19:5D:AD:69:1A:BB:26
Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Certificate issuer: /CN=047ee74ac490e31f1d40764f092411ee25eb1665
Certificate serial: 0198D4A847F86E6D8AE3ECC298A869CC638F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 02:00:54 +0000
Manifest this update: Sat 23 Aug 2025 02:00:54 +0000
Manifest next update: Sun 24 Aug 2025 02:00:54 +0000
Files and hashes: 1: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl (hash: 5jTvYkE2DkCmJkQbah/fH5n/v/vXHIdluqhr5ezWSR4=)
2: lTisVzPeiPslXlhHYnIYv10zoj8.roa (hash: nI5Tne3/W5S4/3jqutx+PLa3bngqaYEDH1hjjV/uGx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:47:f8:6e:6d:8a:e3:ec:c2:98:a8:69:cc:63:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665
Validity
Not Before: Aug 23 02:00:54 2025 GMT
Not After : Aug 24 02:00:54 2025 GMT
Subject: CN=94d738963247dd6a7a1a9430a0195dad691abb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:b8:cc:27:d5:58:30:2e:3b:61:27:a5:05:
48:a4:d7:1a:bd:90:76:3d:05:8b:16:f1:a9:8f:d2:
53:5c:fc:18:a0:87:c5:b3:44:8d:39:5f:11:00:8e:
8f:05:15:ad:13:7a:7d:8a:df:e3:1c:0f:46:eb:b2:
d6:43:54:c6:37:b2:c6:03:22:36:c2:80:6e:73:74:
19:02:37:9e:4c:69:6e:86:5b:4b:31:e4:59:58:a4:
73:11:96:1e:96:d7:1a:17:4a:4d:87:58:5e:d1:75:
1b:5f:f5:d9:8a:ba:04:ad:a3:54:d1:4f:54:7f:89:
11:0d:68:80:ba:eb:59:a9:82:f6:ac:62:c7:fa:69:
7d:04:c8:6b:6d:12:91:2a:6a:ac:ab:09:41:4d:7e:
95:52:9f:0f:00:7e:50:3b:1e:37:78:b6:c9:8f:53:
69:94:61:18:d6:42:e4:1f:34:4d:56:9a:32:55:63:
6c:ee:0a:9c:77:9a:8a:9f:c9:d0:d6:60:57:7b:4f:
e7:6e:84:e8:90:bd:b8:04:27:d0:a9:db:f9:8c:84:
a3:11:24:3d:2a:55:6c:47:4d:be:67:a7:0c:63:26:
8e:b3:ad:6e:44:f6:bb:9a:07:3d:27:df:eb:ef:ed:
30:90:79:e2:8f:a4:dd:72:ad:9a:9b:a2:71:62:0c:
07:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D7:38:96:32:47:DD:6A:7A:1A:94:30:A0:19:5D:AD:69:1A:BB:26
X509v3 Authority Key Identifier:
keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4e:1d:00:62:1f:b4:af:60:77:c4:de:48:68:ae:4f:b9:df:
29:bb:c0:d5:44:d6:94:30:8f:e3:c6:75:79:a4:b3:82:f8:03:
fa:f1:79:d7:9a:51:90:dc:80:83:7f:cc:75:ab:10:93:06:1b:
81:29:2f:14:0f:d5:db:1e:e0:ff:85:e9:bc:b5:f1:27:14:0b:
c9:c3:b2:fe:1a:e3:bf:a6:6a:05:7c:aa:9b:3c:4b:58:26:82:
45:d2:4d:25:10:22:3d:b7:cc:69:de:a4:22:b0:b4:c5:63:f0:
95:01:cf:7e:62:ea:92:c6:b1:8f:93:8b:79:7f:b6:9b:71:e6:
3a:38:8f:b8:17:ca:a8:39:25:d4:2b:a5:20:0a:40:09:c6:9f:
6a:ad:0b:f4:5c:dd:8b:5b:6c:fa:98:41:82:c2:a1:70:4a:cd:
14:0d:14:9b:da:98:46:b1:12:4f:5f:a0:f3:89:6c:81:fc:12:
82:98:b9:c9:23:6a:12:6c:5a:8d:a8:01:5b:0c:7e:a7:0b:9e:
df:44:3d:2b:20:06:65:7f:b6:e2:71:0b:4b:4a:66:6f:d7:26:
9d:8b:25:a8:36:92:61:2c:6d:ef:3f:f2:c0:2d:05:21:42:7a:
3b:d4:48:a5:80:ee:6d:c0:7e:d4:f9:a1:84:a5:e5:65:15:bf:
60:d9:26:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqEf4bm2K4+zCmKhpzGOPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0N2VlNzRhYzQ5MGUzMWYxZDQwNzY0ZjA5MjQxMWVlMjVl
YjE2NjUwHhcNMjUwODIzMDIwMDU0WhcNMjUwODI0MDIwMDU0WjAzMTEwLwYDVQQD
Eyg5NGQ3Mzg5NjMyNDdkZDZhN2ExYTk0MzBhMDE5NWRhZDY5MWFiYjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ24zCfVWDAuO2EnpQVIpNcavZB2
PQWLFvGpj9JTXPwYoIfFs0SNOV8RAI6PBRWtE3p9it/jHA9G67LWQ1TGN7LGAyI2
woBuc3QZAjeeTGluhltLMeRZWKRzEZYeltcaF0pNh1he0XUbX/XZiroEraNU0U9U
f4kRDWiAuutZqYL2rGLH+ml9BMhrbRKRKmqsqwlBTX6VUp8PAH5QOx43eLbJj1Np
lGEY1kLkHzRNVpoyVWNs7gqcd5qKn8nQ1mBXe0/nboTokL24BCfQqdv5jISjESQ9
KlVsR02+Z6cMYyaOs61uRPa7mgc9J9/r7+0wkHnij6Tdcq2am6JxYgwH4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTXOJYyR91qehqUMKAZXa1pGrsmMB8GA1UdIwQY
MBaAFAR+50rEkOMfHUB2TwkkEe4l6xZlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkg3blNzU1E0eDhkUUhaUENTUVI3aVhyRm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xN2Y3NjktNTgzMy00ZjI2LTkzZjgt
ZWE3ZjIxOGZkYjUwLzEvQkg3blNzU1E0eDhkUUhaUENTUVI3aVhyRm1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xN2Y3NjktNTgzMy00ZjI2LTkzZjgtZWE3ZjIxOGZkYjUw
LzEvQkg3blNzU1E0eDhkUUhaUENTUVI3aVhyRm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMU4dAGIf
tK9gd8TeSGiuT7nfKbvA1UTWlDCP48Z1eaSzgvgD+vF515pRkNyAg3/MdasQkwYb
gSkvFA/V2x7g/4XpvLXxJxQLycOy/hrjv6ZqBXyqmzxLWCaCRdJNJRAiPbfMad6k
IrC0xWPwlQHPfmLqksaxj5OLeX+2m3HmOjiPuBfKqDkl1CulIApACcafaq0L9Fzd
i1ts+phBgsKhcErNFA0Um9qYRrEST1+g84lsgfwSgpi5ySNqEmxajagBWwx+pwue
30Q9KyAGZX+24nELS0pmb9cmnYslqDaSYSxt7z/ywC0FIUJ6O9RIpYDubcB+1Pmh
hKXlZRW/YNkmhQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:27 2025 by rpki-client