Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
File: BhYY9tMA3yz1ni35f_6flWoj5jw.mft (raw, json)
Hash identifier: 0uYWoo7mHOJ3vy4xkvwbwEtzDvh51ozcyTLlt2Mb4R0=
Subject key identifier: A6:41:A2:E0:85:C3:51:CC:4A:6F:4B:32:DE:0A:84:C5:A5:12:A2:9D
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial: 019859465122A99E6BC2D1EA07BD061B078D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
Manifest number: 1608
Signing time: Wed 30 Jul 2025 03:00:37 +0000
Manifest this update: Wed 30 Jul 2025 03:00:37 +0000
Manifest next update: Thu 31 Jul 2025 03:00:37 +0000
Files and hashes: 1: BhYY9tMA3yz1ni35f_6flWoj5jw.crl (hash: nZgQN1hT+VrBYkpB1lp+RVrib32xXufniD3GqZXMiOo=)
2: PpLMyuWEi7GW-Zo7FScOzQEDqmw.roa (hash: tpDYLlf85669UfO2WjK12JWkdre1n2ZIYLt0uyeHU34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:46:51:22:a9:9e:6b:c2:d1:ea:07:bd:06:1b:07:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Validity
Not Before: Jul 30 03:00:37 2025 GMT
Not After : Jul 31 03:00:37 2025 GMT
Subject: CN=a641a2e085c351cc4a6f4b32de0a84c5a512a29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b6:dd:28:9f:50:9a:6e:d9:7f:aa:de:54:e6:
e7:46:6c:13:f3:25:48:a9:43:94:fc:38:c2:9c:53:
0d:91:fc:bd:6c:65:12:fe:3f:39:e1:27:94:24:00:
83:ea:8d:32:db:b9:cc:57:b5:34:c5:5b:c4:f7:20:
1a:2a:f2:c8:7d:74:34:9c:16:5c:e6:20:65:d9:f7:
8e:6c:a1:a5:37:7f:96:a2:5d:cb:70:db:db:58:82:
ee:65:3f:69:d0:5f:c4:9e:29:d3:db:bf:31:1e:35:
f0:ff:e5:69:37:74:4d:af:7d:e7:78:d3:fa:8d:3a:
69:ac:fd:b5:34:b3:ba:a4:56:57:2f:df:9c:6e:d8:
74:90:14:df:1b:09:fd:bb:d6:4f:cd:17:37:ae:cb:
d5:90:4e:40:07:e1:36:2d:81:cf:e3:ed:e0:ac:12:
0c:80:65:22:34:e2:b0:aa:5f:33:68:7a:58:a4:f4:
d1:32:f2:3a:58:a1:57:20:82:d6:16:a7:74:61:08:
c5:97:e7:33:28:99:bd:44:40:ae:4e:1f:a5:6e:af:
71:b8:82:28:ec:21:aa:8c:4d:43:12:4e:92:ed:ee:
e8:4d:c5:d4:fb:35:a3:67:aa:04:74:16:47:1d:ef:
af:cb:b0:35:45:c6:da:0d:f5:6b:54:82:d0:de:20:
56:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:41:A2:E0:85:C3:51:CC:4A:6F:4B:32:DE:0A:84:C5:A5:12:A2:9D
X509v3 Authority Key Identifier:
keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fe:f6:76:f7:83:8b:94:b4:b5:fc:c7:9f:7a:92:53:c2:88:
36:a0:a4:ff:53:00:5e:8b:2b:be:fd:21:ac:b4:65:1d:be:92:
76:14:cf:73:1a:33:92:38:02:72:95:cf:c9:27:72:04:36:de:
94:90:fa:98:56:4e:98:d6:53:bd:c8:dd:2c:2a:5f:8a:7c:11:
ff:26:f2:75:4e:86:14:28:58:0c:61:11:50:86:57:dd:36:ed:
b7:57:51:d6:08:cc:79:60:09:e0:a6:a7:8c:9e:da:d5:5e:cf:
c5:15:9e:3f:a6:0d:30:5e:9f:0c:78:f4:e9:1f:08:44:bd:72:
2e:bd:65:43:84:46:61:c3:5e:ca:8e:f0:e8:a4:d8:d5:da:91:
38:0a:1d:66:8b:44:aa:52:96:59:11:30:67:12:5f:a6:bd:21:
1b:89:d3:49:3a:39:5e:21:a7:5c:e3:fc:08:48:ac:c2:31:73:
5a:06:6b:c3:91:d2:de:8e:af:98:93:fc:c6:6b:72:83:9b:ef:
a2:c9:04:01:6c:a8:cd:b2:36:8f:17:93:02:fb:ef:64:44:31:
0c:7d:6b:5f:c1:19:5e:f3:86:bc:29:d4:29:80:05:fe:50:36:
60:3c:11:ab:c3:a1:e1:c2:2d:28:eb:1e:20:ce:2a:66:e4:8e:
20:09:61:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 04:28:16 2025 by rpki-client