Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: uUHv5rXA8VjuUPdxFK2Ed6OF0LikmQzPpcxKeWYM0G8=
Subject key identifier: 7F:AF:85:78:56:72:EB:4F:59:B8:19:42:5D:BE:FE:74:A0:6E:03:2B
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 0198496611E92AFC78164D4536BD122551A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 01:01:22 +0000
Manifest this update: Sun 27 Jul 2025 01:01:22 +0000
Manifest next update: Mon 28 Jul 2025 01:01:22 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: u8v5gNRaj/9VBVYexsXLFkvYaW4E3kJ1FQWsoFiGJ4s=)
2: Kli1CIfvUzezQEeZgfmrCqdQM_I.roa (hash: 78hmVW1qiWAvpebiM5hdAQNsJHKvS7UWJOLOAC6eO10=)
3: yilBdRRmJ9mIX_a1TabLEV03EEk.roa (hash: 4eslmC4MgTLkKxmkhr2W/5XHOeBZOMOpeHMJJDH3k34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:11:e9:2a:fc:78:16:4d:45:36:bd:12:25:51:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Jul 27 01:01:22 2025 GMT
Not After : Jul 28 01:01:22 2025 GMT
Subject: CN=7faf85785672eb4f59b819425dbefe74a06e032b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:e2:98:91:29:d1:99:90:cd:9c:58:27:03:
e9:e6:b3:92:8e:49:0e:ea:56:04:1c:e8:e4:f0:e9:
7f:e0:6e:ae:57:de:b9:20:e0:44:b5:53:c4:7a:db:
dc:59:a0:82:27:53:ac:c9:85:70:be:e2:cf:c0:9e:
71:09:05:4f:5d:2d:5f:9c:cf:34:14:b4:60:aa:bf:
85:a7:ba:09:06:2b:68:40:63:94:c3:12:c9:41:f8:
31:ea:b5:8a:bf:c8:52:54:73:5b:21:c0:44:29:d6:
ea:79:56:a2:a0:11:ec:bd:9d:5e:e4:4d:a2:d8:f7:
bf:90:d2:b0:a2:29:70:d7:aa:71:e6:74:db:a2:8b:
f8:ab:c7:09:ac:31:34:cf:1b:3b:5c:f7:cc:de:36:
5d:cf:21:a8:f3:48:2b:1b:51:d8:d2:f9:8e:f9:2e:
98:b4:43:b3:e0:10:9a:bf:04:22:d0:04:6e:e9:c5:
bd:6c:fe:1d:c1:c1:97:c4:c5:74:ed:ad:99:b7:fe:
94:27:8d:95:10:a6:56:97:cd:a6:a5:08:9a:64:83:
be:80:30:8f:66:6c:4a:b6:dd:d6:3f:6b:98:36:76:
12:cf:fa:11:47:95:b5:85:fa:80:c3:bf:38:e6:5c:
bc:6f:01:ce:12:8b:f2:af:a1:cc:e1:4e:78:e5:df:
13:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AF:85:78:56:72:EB:4F:59:B8:19:42:5D:BE:FE:74:A0:6E:03:2B
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9c:aa:c2:ac:13:2b:e1:f8:4b:31:37:5d:d9:7d:61:71:94:
a9:c7:72:65:f6:05:c7:05:59:1f:43:73:ee:10:02:08:0a:20:
38:ab:6b:a1:b4:53:8c:7d:db:9a:1f:c0:b5:15:8d:6f:57:ce:
85:6a:13:24:91:4a:b0:42:ab:26:99:f7:d6:0d:53:8a:25:54:
a9:32:3a:da:97:c8:d9:bd:34:43:1a:07:b6:1c:3e:e7:46:a8:
fe:9c:5c:30:4b:a6:2e:82:4e:cc:9b:82:09:8a:7a:b7:6a:d4:
09:24:dc:cb:0c:99:91:ea:bb:a2:31:32:e1:ee:44:ed:c2:c4:
ff:ca:b2:6f:9b:73:2f:c9:ec:91:33:cd:a1:dc:75:f8:13:8a:
ff:f7:52:6b:b8:1f:e4:e8:e5:db:d4:0a:dd:1e:72:15:7a:c9:
45:2f:51:71:5b:87:47:aa:af:6f:87:4b:20:6e:89:b2:4d:58:
ba:0c:9c:4d:00:6c:c6:8c:50:03:fa:a9:75:8a:b3:54:fd:44:
07:c1:fb:19:70:76:bd:26:82:1b:90:17:d4:33:ad:9a:eb:ba:
17:a8:3d:f0:17:4f:53:92:63:5f:27:68:9d:87:36:35:a3:17:
c0:50:48:3c:6c:e3:c0:3b:b1:59:1e:c4:1d:88:eb:52:30:58:
a0:20:6b:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZhHpKvx4Fk1FNr0SJVGiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MWJiMDkxNmM4NTM4MDFmMjJjZTcyM2JjMmNjNDE4ODY5
ZGI3ZDAwHhcNMjUwNzI3MDEwMTIyWhcNMjUwNzI4MDEwMTIyWjAzMTEwLwYDVQQD
Eyg3ZmFmODU3ODU2NzJlYjRmNTliODE5NDI1ZGJlZmU3NGEwNmUwMzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowfimJEp0ZmQzZxYJwPp5rOSjkkO
6lYEHOjk8Ol/4G6uV965IOBEtVPEetvcWaCCJ1OsyYVwvuLPwJ5xCQVPXS1fnM80
FLRgqr+Fp7oJBitoQGOUwxLJQfgx6rWKv8hSVHNbIcBEKdbqeVaioBHsvZ1e5E2i
2Pe/kNKwoilw16px5nTboov4q8cJrDE0zxs7XPfM3jZdzyGo80grG1HY0vmO+S6Y
tEOz4BCavwQi0ARu6cW9bP4dwcGXxMV07a2Zt/6UJ42VEKZWl82mpQiaZIO+gDCP
ZmxKtt3WP2uYNnYSz/oRR5W1hfqAw7845ly8bwHOEovyr6HM4U545d8TSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+vhXhWcutPWbgZQl2+/nSgbgMrMB8GA1UdIwQY
MBaAFAYbsJFshTgB8iznI7wsxBiGnbfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iYmIxYzYtOWY5MS00MzQ2LWI2MTYt
YzJkYzdhMDU4ZTMwLzEvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iYmIxYzYtOWY5MS00MzQ2LWI2MTYtYzJkYzdhMDU4ZTMw
LzEvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJyqwqwT
K+H4SzE3Xdl9YXGUqcdyZfYFxwVZH0Nz7hACCAogOKtrobRTjH3bmh/AtRWNb1fO
hWoTJJFKsEKrJpn31g1TiiVUqTI62pfI2b00QxoHthw+50ao/pxcMEumLoJOzJuC
CYp6t2rUCSTcywyZkeq7ojEy4e5E7cLE/8qyb5tzL8nskTPNodx1+BOK//dSa7gf
5Ojl29QK3R5yFXrJRS9RcVuHR6qvb4dLIG6Jsk1YugycTQBsxoxQA/qpdYqzVP1E
B8H7GXB2vSaCG5AX1DOtmuu6F6g98BdPU5JjXydonYc2NaMXwFBIPGzjwDuxWR7E
HYjrUjBYoCBrEw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:43:07 2025 by rpki-client