Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.mft
File: BhJClTAYPA_O3K258VBVg5LwG4k.mft (raw, json)
Hash identifier: En70OJS41B/1ND3gGb3oQUk/FjpKxaaQ6RSa4tye7Fg=
Subject key identifier: 10:B9:75:CA:14:57:64:5B:4C:F2:3F:2F:63:BD:B1:7D:FB:66:5D:BD
Authority key identifier: 06:12:42:95:30:18:3C:0F:CE:DC:AD:B9:F1:50:55:83:92:F0:1B:89
Certificate issuer: /CN=0612429530183c0fcedcadb9f150558392f01b89
Certificate serial: 0199228D0CBE5D8CF3C79ADA570B9B02D488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhJClTAYPA_O3K258VBVg5LwG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.mft
Manifest number: 16
Signing time: Sun 07 Sep 2025 05:01:33 +0000
Manifest this update: Sun 07 Sep 2025 05:01:33 +0000
Manifest next update: Mon 08 Sep 2025 05:01:33 +0000
Files and hashes: 1: BhJClTAYPA_O3K258VBVg5LwG4k.crl (hash: tfvlWPau2P9rYAP5eNG2Ex88zMo0jv0oG4Mo3Rhp/Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhJClTAYPA_O3K258VBVg5LwG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:0c:be:5d:8c:f3:c7:9a:da:57:0b:9b:02:d4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0612429530183c0fcedcadb9f150558392f01b89
Validity
Not Before: Sep 7 05:01:33 2025 GMT
Not After : Sep 8 05:01:33 2025 GMT
Subject: CN=10b975ca1457645b4cf23f2f63bdb17dfb665dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c7:85:51:0d:9f:87:51:30:b8:7f:71:26:14:
93:be:05:c8:71:40:f6:3b:16:db:1f:ae:00:da:6d:
ef:c0:00:86:00:3e:42:5d:f4:06:a4:73:b0:5b:24:
15:ac:6a:ff:bc:33:32:38:25:e0:b4:af:b0:95:29:
51:85:55:4d:69:7f:5a:d3:89:9f:00:7e:a4:89:30:
a6:c0:be:8a:fc:20:46:6f:cb:ac:a3:a5:f3:b5:97:
1f:36:e6:f4:3b:1c:0b:64:36:2c:e8:4b:7f:ef:d5:
b1:6a:dd:e9:7b:2d:dd:5a:7f:38:de:bb:69:83:be:
97:30:70:17:68:76:5c:c3:86:c1:1a:c2:b3:49:a8:
46:c5:87:c5:00:05:f3:5d:dc:f6:41:ee:cc:fd:e8:
cf:79:30:cb:4e:12:92:10:e3:88:66:0f:1d:d2:35:
32:07:ec:38:34:4a:77:3a:68:07:34:ba:47:38:e9:
9c:0b:af:2b:2f:03:6b:ea:05:4c:f9:da:be:99:fa:
8a:3c:3a:a4:4d:d2:b2:b4:66:4a:de:5c:8e:22:76:
13:01:3f:e2:44:58:d8:a7:7a:69:a3:88:39:19:8a:
a7:af:52:44:2f:f9:50:8c:b0:91:4e:7a:8d:3a:50:
f5:aa:5b:6f:17:eb:f5:6a:41:87:8b:09:d0:57:0b:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B9:75:CA:14:57:64:5B:4C:F2:3F:2F:63:BD:B1:7D:FB:66:5D:BD
X509v3 Authority Key Identifier:
keyid:06:12:42:95:30:18:3C:0F:CE:DC:AD:B9:F1:50:55:83:92:F0:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhJClTAYPA_O3K258VBVg5LwG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e6:18:8c:ce:b4:4c:38:6a:a1:59:48:fe:7a:aa:ff:0c:5c:
21:d0:16:d4:7e:7f:66:da:f0:c0:3e:78:d7:65:51:4a:8f:95:
33:16:fa:c9:67:a9:0a:a9:76:14:0e:e0:d9:69:9b:ef:3c:e0:
37:d5:4c:6d:9e:66:5c:45:ed:33:e8:a3:5c:ee:11:e6:f7:c5:
7a:6f:cf:d5:a8:c3:e6:cf:c9:66:3f:9e:76:7b:57:a0:98:2e:
61:e0:ae:8b:f7:8e:cb:c7:c7:06:b2:9b:30:ec:27:c6:26:e6:
20:5d:e6:f5:dc:8d:7d:45:99:25:96:6d:9b:a5:e2:99:d0:13:
d1:7e:9f:18:e2:07:9d:8c:df:af:50:97:bf:4b:45:72:e9:e4:
5b:29:1d:43:ae:94:c1:2e:f0:7b:e2:1f:35:c0:1c:36:a1:4c:
94:60:c0:46:d9:ce:95:ce:0f:fe:17:cd:f0:56:94:4a:0e:ce:
15:39:35:e9:4c:30:8e:70:dd:f4:e3:2b:86:be:c5:ce:72:37:
28:3c:2b:d8:18:a4:8d:b3:f9:9d:86:60:0d:88:31:80:b8:a9:
b9:1d:d4:fe:06:67:5b:a9:3e:c4:6a:a6:a4:64:b7:56:9e:9e:
31:a6:ad:d2:cc:47:33:1f:d9:28:70:24:bd:3b:da:71:58:e9:
21:25:28:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:40 2025 by rpki-client