Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier: bTr7y2iOPmpXSY1ME4iPavKSogERCgrb93Ye+3SyGsw=
Subject key identifier: FE:AF:FE:66:E0:B3:5B:AE:92:63:F5:77:6E:FE:A4:68:15:82:F0:03
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial: 019752D90036E0A41E8E38B8E6FA21E3A4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 04:00:42 +0000
Manifest this update: Mon 09 Jun 2025 04:00:42 +0000
Manifest next update: Tue 10 Jun 2025 04:00:42 +0000
Files and hashes: 1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: 9A8UBzGJb1XKwLxYZxV8thybkAJAkHo2PQQL7CM0fKo=)
2: BliaGrjDAqHKNEj9Mx9veOEBPEw.roa (hash: Zp3YmeNzMTw4uQ2BI2h1hZyUbxrVTAnKdQaDtTTNRXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d9:00:36:e0:a4:1e:8e:38:b8:e6:fa:21:e3:a4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
Validity
Not Before: Jun 9 04:00:42 2025 GMT
Not After : Jun 10 04:00:42 2025 GMT
Subject: CN=feaffe66e0b35bae9263f5776efea4681582f003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c9:b8:5d:e4:45:f8:ef:00:5c:1f:67:e9:ad:
e4:36:a7:af:88:da:a3:c8:9e:ae:e0:69:8e:8f:f4:
6e:e7:21:54:73:62:3e:d3:98:e8:ce:ea:da:47:c7:
75:bf:21:a9:6a:d1:90:ea:e8:cb:18:c6:42:c9:fa:
57:c1:e8:68:06:08:54:2d:d6:2f:41:57:41:d2:2a:
a4:e5:b3:0d:ed:51:d3:ec:c7:fe:f7:43:57:d5:02:
9b:39:a6:a4:25:bf:29:56:9b:fa:27:42:75:80:15:
09:e6:57:c6:58:22:bd:24:fa:76:7e:8e:e2:dd:63:
a1:0f:d2:76:97:a5:d4:62:e2:a6:d3:dd:1c:8b:8d:
35:6f:d7:44:00:c9:71:8a:e2:6a:49:c5:8a:3c:40:
8b:c2:f0:8c:0d:a8:a7:49:9f:56:9c:96:0c:8b:9f:
18:92:7d:41:9b:2c:26:36:65:45:af:c2:6f:e7:04:
ce:88:ee:bb:40:ee:e5:db:82:c8:e6:69:91:86:0d:
80:c3:89:1d:80:aa:8f:f5:28:e9:58:e5:f9:5b:20:
85:ce:50:d4:19:05:fd:44:2b:79:6a:49:4e:0e:10:
72:cb:a1:a1:9b:39:0e:08:2d:a1:9f:61:37:ba:2f:
93:b8:fd:3f:5c:b0:0c:d1:8a:dc:9a:68:1d:3c:1c:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AF:FE:66:E0:B3:5B:AE:92:63:F5:77:6E:FE:A4:68:15:82:F0:03
X509v3 Authority Key Identifier:
keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3c:b6:bc:47:e7:3b:1f:84:ac:8f:5e:52:b7:85:28:d1:45:
27:74:10:28:10:1b:7d:35:9f:d4:9d:6f:8c:b5:5c:87:1e:4f:
7e:28:1d:60:51:ba:1b:4c:91:f5:b8:03:2a:d7:eb:fd:14:bd:
37:af:f0:64:be:59:a6:40:e0:f3:0f:cb:a0:d4:cf:35:ce:bf:
5b:a8:3c:b4:03:6f:f8:80:8c:c8:1a:7e:39:62:36:56:92:aa:
e3:f8:52:be:b1:a7:38:57:2b:bd:ef:a3:b0:5c:25:74:61:12:
b5:d1:4d:fc:65:46:d4:39:51:fa:b3:87:b0:f6:2c:85:c3:ba:
6d:76:8b:cb:da:d9:d6:d7:32:32:bc:24:53:1e:c9:c7:a7:b1:
b7:06:cf:17:7c:14:c7:b7:48:9b:98:eb:d1:42:dd:02:5f:f5:
a4:65:5c:bc:a1:78:91:54:b1:17:c7:ab:87:e9:30:1e:c1:44:
56:d6:4d:8c:af:7a:2e:ed:97:03:68:e8:d5:b7:bf:48:62:5b:
84:9c:ae:a2:47:fc:3b:c7:bb:54:55:4b:dc:f0:ef:a9:b9:7e:
ca:f4:26:d3:d8:6b:03:56:ee:8f:e0:a9:22:e9:07:bf:5c:2f:
ce:3c:04:e7:a1:a7:93:5c:82:42:d0:13:56:4c:9a:1b:99:29:
b4:ef:15:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdS2QA24KQejji45voh46T1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NzQ3YjU2NTg0NGUzZTJmYzcxMmZhYjViZTg1OTI0YWFj
NTg2NDMwHhcNMjUwNjA5MDQwMDQyWhcNMjUwNjEwMDQwMDQyWjAzMTEwLwYDVQQD
EyhmZWFmZmU2NmUwYjM1YmFlOTI2M2Y1Nzc2ZWZlYTQ2ODE1ODJmMDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8m4XeRF+O8AXB9n6a3kNqeviNqj
yJ6u4GmOj/Ru5yFUc2I+05jozuraR8d1vyGpatGQ6ujLGMZCyfpXwehoBghULdYv
QVdB0iqk5bMN7VHT7Mf+90NX1QKbOaakJb8pVpv6J0J1gBUJ5lfGWCK9JPp2fo7i
3WOhD9J2l6XUYuKm090ci401b9dEAMlxiuJqScWKPECLwvCMDainSZ9WnJYMi58Y
kn1BmywmNmVFr8Jv5wTOiO67QO7l24LI5mmRhg2Aw4kdgKqP9SjpWOX5WyCFzlDU
GQX9RCt5aklODhByy6GhmzkOCC2hn2E3ui+TuP0/XLAM0YrcmmgdPBysRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6v/mbgs1uukmP1d27+pGgVgvADMB8GA1UdIwQY
MBaAFAR0e1ZYROPi/HEvq1voWSSqxYZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82NDgwMGItNTRjYy00MGYyLWE3ZWQt
OTdiMjE1N2NiYWQxLzEvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82NDgwMGItNTRjYy00MGYyLWE3ZWQtOTdiMjE1N2NiYWQx
LzEvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzy2vEfn
Ox+ErI9eUreFKNFFJ3QQKBAbfTWf1J1vjLVchx5PfigdYFG6G0yR9bgDKtfr/RS9
N6/wZL5ZpkDg8w/LoNTPNc6/W6g8tANv+ICMyBp+OWI2VpKq4/hSvrGnOFcrve+j
sFwldGEStdFN/GVG1DlR+rOHsPYshcO6bXaLy9rZ1tcyMrwkUx7Jx6extwbPF3wU
x7dIm5jr0ULdAl/1pGVcvKF4kVSxF8erh+kwHsFEVtZNjK96Lu2XA2jo1be/SGJb
hJyuokf8O8e7VFVL3PDvqbl+yvQm09hrA1buj+CpIukHv1wvzjwE56Gnk1yCQtAT
VkyaG5kptO8Vpw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:00:44 2025 by rpki-client