Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
File: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft (raw, json)
Hash identifier: hmHJyxE6XMRmXoud1TpwsEHp7w4Tk+7TuH06IRXqEqs=
Subject key identifier: 63:3A:30:6E:8B:BE:A0:6E:64:9E:B2:6F:DF:55:15:95:DA:7C:92:7C
Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Certificate issuer: /CN=047ee74ac490e31f1d40764f092411ee25eb1665
Certificate serial: 0197B6D794790B1318A64B8B94604826CD0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 14:01:10 +0000
Manifest this update: Sat 28 Jun 2025 14:01:10 +0000
Manifest next update: Sun 29 Jun 2025 14:01:10 +0000
Files and hashes: 1: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl (hash: SSFl+AWdj3ltXUJjtZUlObq9jL0FiWkbvdv/JkpS1bc=)
2: lTisVzPeiPslXlhHYnIYv10zoj8.roa (hash: nI5Tne3/W5S4/3jqutx+PLa3bngqaYEDH1hjjV/uGx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:94:79:0b:13:18:a6:4b:8b:94:60:48:26:cd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665
Validity
Not Before: Jun 28 14:01:10 2025 GMT
Not After : Jun 29 14:01:10 2025 GMT
Subject: CN=633a306e8bbea06e649eb26fdf551595da7c927c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:94:d1:68:4e:b0:60:ea:0a:b4:bb:19:6c:a6:
08:d4:aa:9c:6b:4c:3a:bd:3f:8e:d0:b6:4c:ea:b6:
26:1d:66:74:8a:ed:d7:1e:c7:da:da:53:8f:46:fe:
52:96:1f:d1:6f:53:bf:31:f3:8a:32:b5:f4:22:b3:
1f:b0:f1:b5:1d:ab:e1:80:72:93:c4:08:82:1d:f7:
1c:c1:aa:78:41:33:26:80:85:59:2c:71:24:cc:db:
29:f0:de:7f:30:65:9d:a5:36:47:7e:d7:16:a4:97:
49:57:40:7c:cf:97:2a:60:57:fb:30:68:19:9c:fa:
b8:9e:18:8c:dd:00:09:19:01:d2:2f:da:14:4b:4a:
b5:38:33:97:f7:18:5d:4c:51:df:b7:61:b6:95:6e:
ec:8f:03:fc:51:a2:ef:39:54:2a:d2:f6:1d:7d:2b:
e3:61:4c:ef:56:6a:1c:d9:c3:e4:ae:0d:50:62:1b:
a4:40:38:e7:8c:91:d7:62:d5:82:f4:40:c1:6e:41:
8a:e8:1e:20:41:3a:15:f2:e8:79:88:c3:b2:15:3b:
23:0f:32:6f:35:81:5b:37:2d:80:4d:15:6a:fc:ed:
3e:ba:c3:63:17:01:77:7d:ff:07:67:34:c8:be:fa:
e3:4d:ad:b2:02:15:1d:3d:0e:4d:03:5b:0c:6e:34:
15:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3A:30:6E:8B:BE:A0:6E:64:9E:B2:6F:DF:55:15:95:DA:7C:92:7C
X509v3 Authority Key Identifier:
keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:29:3a:bc:47:51:5b:e2:d0:a6:f1:6e:d8:a4:db:85:1c:14:
da:9c:c7:44:b3:1d:49:78:75:a4:f6:94:6f:f4:af:14:db:f7:
26:50:0a:67:73:67:5c:11:3e:01:8a:ee:e3:13:84:9e:22:b2:
e7:4a:88:cc:4c:5c:e7:4c:25:5c:26:b8:64:70:d8:46:e2:34:
7e:c5:ba:e6:84:79:2f:5e:62:6d:45:7f:25:a3:5f:a2:de:7b:
09:f7:59:9d:0e:dd:2f:29:0a:64:b7:dd:97:3e:c9:4d:80:96:
08:32:06:36:99:3f:af:21:c1:86:a1:d8:20:ce:10:67:aa:04:
34:2e:78:72:58:6b:4b:9f:fb:b1:bd:02:8a:2e:d9:d8:50:b6:
83:50:bf:76:7b:d8:dc:c4:cd:e2:bb:13:24:11:b4:fa:54:11:
f3:1e:6f:85:23:b8:64:ee:10:6f:7c:9a:ee:76:57:b4:f6:a4:
c6:5f:bc:a3:65:1e:00:19:dc:a0:5e:4e:e6:80:58:ea:e0:f9:
a6:4b:ff:b1:e1:14:d3:27:2d:ff:29:70:41:cf:01:de:89:8e:
40:e4:1a:79:c4:b4:4e:4f:4d:9d:91:c5:ad:38:46:87:80:a6:
0d:6d:9e:51:0b:97:1b:7c:05:66:fd:ee:6c:93:48:c2:ee:35:
c5:15:2a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:28 2025 by rpki-client