Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
File: BsvHYUtJh4vzf94MGNfIUcLQfm8.mft (raw, json)
Hash identifier: ml1AicHSjPl/QSNYUmQUUcrVUGn5W6Fz6Gi7+bS2Sao=
Subject key identifier: 19:76:D2:B2:22:28:04:CD:60:FD:75:2F:9B:73:66:B4:DB:ED:51:20
Authority key identifier: 06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
Certificate issuer: /CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Certificate serial: 019846644C217100170057D3DFA079CB232C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 11:00:34 +0000
Manifest this update: Sat 26 Jul 2025 11:00:34 +0000
Manifest next update: Sun 27 Jul 2025 11:00:34 +0000
Files and hashes: 1: 8AWj4g0mxpAeQ6fJYXYND52Gfz8.roa (hash: 2r0E8x2l8OQ6i+ALf5Xdf7skVCZem0LAwWfFUiiW7hQ=)
2: BsvHYUtJh4vzf94MGNfIUcLQfm8.crl (hash: QEB4LTbNCcZ5+tl4ygG1Jzq+q1P9oWsZvb5V2dQL+Vs=)
3: z9CRwAoKZD-WKyzEgGIY-4pomCM.roa (hash: GIFVDo3J/VItfarKhSpqOK3aHLE2Bigm2lGriNtj4SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:4c:21:71:00:17:00:57:d3:df:a0:79:cb:23:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Validity
Not Before: Jul 26 11:00:34 2025 GMT
Not After : Jul 27 11:00:34 2025 GMT
Subject: CN=1976d2b2222804cd60fd752f9b7366b4dbed5120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:09:bd:96:e1:f1:08:df:ab:ca:64:d9:67:5c:
f5:cc:a5:63:bf:d4:0b:4a:d8:c1:77:3d:c5:d3:72:
4c:6b:9a:9a:9b:0e:4f:6f:e9:f7:01:bb:58:95:e0:
2f:1d:f2:02:91:2c:5b:26:d5:e2:fb:dc:98:70:68:
7f:57:57:d0:a7:c9:d1:2e:3e:e0:2c:bc:a7:91:ff:
0a:79:fd:81:19:c5:88:5e:90:8b:9f:44:e7:06:bd:
f9:dc:db:36:d4:13:9a:04:79:db:39:e0:8c:fa:45:
d7:ab:0f:65:59:6f:5c:d4:0d:9c:25:dd:18:6c:0e:
c0:25:bf:6c:95:d1:b3:b7:27:bf:e9:3b:69:e6:d3:
70:ed:c2:0c:c7:f8:40:c4:1b:1c:d1:df:b4:a8:1a:
f7:a1:d7:fd:59:34:6a:db:55:c9:b4:9e:fe:53:15:
07:48:b8:37:c4:3e:31:c4:66:0c:66:d7:4e:46:42:
0d:3b:d0:89:8f:de:94:42:92:18:62:73:bf:26:5c:
a7:00:fc:0b:ab:f2:e8:01:f5:49:87:e7:3d:7f:dd:
8c:0d:a0:26:4d:5f:39:a9:08:12:fe:61:1a:cc:77:
23:c1:af:15:2c:18:9c:0a:a2:75:27:00:b7:7b:28:
ca:48:01:98:d9:0d:62:93:d6:54:7e:2d:1a:4c:c3:
8f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:76:D2:B2:22:28:04:CD:60:FD:75:2F:9B:73:66:B4:DB:ED:51:20
X509v3 Authority Key Identifier:
keyid:06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:23:90:4d:4a:c4:de:6b:1e:69:cb:46:0a:16:dd:92:8c:24:
8b:09:c8:01:86:d5:5a:3d:47:e7:02:6a:73:ed:00:fd:1c:66:
73:95:68:b9:54:6d:07:f1:c5:ea:86:58:43:cc:00:74:e2:b7:
70:4e:48:04:10:64:13:a3:c1:48:1c:a8:18:d9:9d:32:af:32:
c1:52:66:11:55:5a:d2:b4:2f:f6:70:b7:ff:82:37:d2:e8:0b:
c3:9f:dd:1b:24:b5:18:76:a9:18:aa:94:96:8a:dc:bb:dc:8b:
cf:42:58:08:79:75:ef:a2:72:40:d0:ed:e5:eb:10:1e:b0:94:
30:b1:72:a6:6d:25:fb:4c:0e:7a:a6:15:23:32:69:5c:4a:a6:
fc:e6:18:c0:35:ec:55:22:cb:a8:ed:ad:bf:32:25:33:12:62:
98:16:bd:90:d9:47:17:f5:a0:62:2b:8f:39:33:c9:91:22:04:
85:55:e9:e1:93:ce:16:f7:24:bf:7c:04:0c:62:43:b3:69:77:
a3:52:9f:5c:3f:b6:82:90:86:34:af:59:b0:f0:7f:50:53:a8:
d4:4f:2b:b9:26:d2:2a:d8:1f:ba:49:0b:69:ac:c9:c5:25:7a:
5d:c6:fa:c1:7d:32:c5:bf:a7:3a:07:c0:4a:f8:52:6f:94:ed:
9b:b1:38:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:08:30 2025 by rpki-client