Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
File: BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft (raw, json)
Hash identifier: AiVXZT8IPEp/QJGYkVFWvIspbRRyowkBefDyDnTg2Nc=
Subject key identifier: 47:9E:8E:3A:E5:84:D5:97:80:9C:5F:A0:CC:67:2A:23:92:9D:36:2B
Authority key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
Certificate issuer: /CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Certificate serial: 01984CD4528A35E69B5F99ED0BC02E7F23F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 17:00:39 +0000
Manifest this update: Sun 27 Jul 2025 17:00:39 +0000
Manifest next update: Mon 28 Jul 2025 17:00:39 +0000
Files and hashes: 1: BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl (hash: yhtrl5+M5x+9GDZFTprrQzSuHgsd5V6cIsgbI42zbXQ=)
2: N7TBLk6ijg60Rw5drnJxmPzvOok.roa (hash: Gzj1MrzdxuXElz1N9UYhs6KigXCuOfoYMXiwL2fVYSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:d4:52:8a:35:e6:9b:5f:99:ed:0b:c0:2e:7f:23:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Validity
Not Before: Jul 27 17:00:39 2025 GMT
Not After : Jul 28 17:00:39 2025 GMT
Subject: CN=479e8e3ae584d597809c5fa0cc672a23929d362b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:40:a5:aa:89:c7:0e:01:8d:84:63:51:f5:
38:67:a0:62:cb:f5:ce:b4:15:28:9e:aa:53:a1:10:
bc:b2:8c:f3:bc:83:69:46:38:46:0f:3e:fd:2d:96:
e2:b7:6c:9f:53:b3:ae:54:a6:84:ec:ab:13:47:f4:
e9:b2:0d:30:c4:f2:4d:6e:87:99:b4:f4:9b:09:20:
56:9f:37:4e:bb:6d:c4:7e:8b:06:e3:1b:fb:c2:0a:
46:80:57:25:39:1c:82:5f:15:4c:c3:38:a7:67:fa:
9f:0d:88:ff:82:9e:3a:f9:de:4a:a4:0e:88:70:93:
5a:17:f9:5d:f3:df:61:f3:96:6a:f8:64:a5:c0:6f:
53:4e:dc:31:8f:f9:0c:ee:c3:78:b0:af:86:9e:c2:
92:ca:f5:73:7d:bc:72:66:ba:21:45:54:cd:a0:9c:
10:2d:59:ee:5a:5b:f9:73:92:f2:58:74:26:5b:d5:
ed:1d:35:83:57:99:bf:fd:0e:df:f7:9c:e5:3d:ef:
51:b8:36:c2:e7:cc:de:9f:d9:24:92:0c:31:cf:90:
d7:75:bd:fc:f2:6e:dc:86:ec:e9:6f:8a:e8:5f:69:
7f:a3:eb:99:85:6f:a4:a7:8c:99:51:7b:50:40:35:
f9:30:9a:9e:af:62:56:a5:53:78:34:9b:74:1f:33:
87:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9E:8E:3A:E5:84:D5:97:80:9C:5F:A0:CC:67:2A:23:92:9D:36:2B
X509v3 Authority Key Identifier:
keyid:06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:69:30:38:a3:75:32:cd:ae:34:2b:30:5d:86:ec:f8:e4:a0:
2c:5e:fb:ef:62:71:28:1f:9c:18:69:7b:09:b5:c2:8a:03:a1:
87:3e:82:c7:06:81:b5:91:c3:ba:fd:5d:a1:7a:f8:25:9a:bb:
c1:e0:01:2a:af:6c:dc:8d:89:b0:5f:31:fb:8e:e7:72:ee:cd:
0c:66:a5:f4:17:92:00:91:10:79:f7:56:7c:ed:ae:10:a2:8d:
77:be:fe:b7:d4:39:0d:f1:56:59:45:03:a6:2e:f2:fd:cd:16:
0f:a2:c0:b7:40:3f:03:50:39:5e:7f:47:40:5d:8b:1e:4e:e5:
b2:de:3d:46:fd:47:3e:bb:ef:2e:73:d7:c4:06:c3:9e:1c:14:
0b:ca:7b:b5:de:4e:f9:ce:96:d3:e7:8e:18:92:86:e2:e5:54:
36:3d:80:5a:0e:70:81:0c:5c:46:50:5b:5d:b3:db:1f:d1:69:
4f:e2:38:bd:ef:12:5a:cf:5d:a5:74:a4:a6:f4:0c:83:07:90:
09:cd:6c:0d:b6:93:f8:fb:d5:f6:70:9d:e0:bc:43:6b:32:8f:
3b:04:6f:57:d5:b4:50:e7:db:94:00:32:f6:92:f9:c2:16:3c:
11:26:23:1a:81:0d:e3:54:b2:27:03:46:06:35:ff:b6:ab:f6:
1f:b5:cf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:00:02 2025 by rpki-client