Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: S32OTI1qrBKVlZw8vi6eRANI6ZyyYRC+uXrUVfBT6CE=
Subject key identifier: 9E:EF:38:94:E8:87:64:B3:2F:E9:96:39:DA:A0:D5:62:0E:B2:BA:95
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 0197470BB1A13F7518144DA728D8749E623A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 157E
Signing time: Fri 06 Jun 2025 21:00:38 +0000
Manifest this update: Fri 06 Jun 2025 21:00:38 +0000
Manifest next update: Sat 07 Jun 2025 21:00:38 +0000
Files and hashes: 1: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: 61bpGWnencKzj0XBmfWonuprfNqgHP9hSPl1tjO+4Xs=)
2: OseFlpN5BBrbNEKlLXg6nEL0mf0.roa (hash: 656ZLuWKc6figtfDxdhxBQM6z66wyeYFhuGY7fphkn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:b1:a1:3f:75:18:14:4d:a7:28:d8:74:9e:62:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Jun 6 21:00:38 2025 GMT
Not After : Jun 7 21:00:38 2025 GMT
Subject: CN=9eef3894e88764b32fe99639daa0d5620eb2ba95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:34:94:e1:76:c5:05:0d:61:9d:e1:15:80:eb:
1d:fc:e9:a5:5e:a0:a3:6f:e1:22:71:a9:b6:10:49:
32:5c:4f:db:01:56:af:cc:73:99:26:6a:df:fa:2e:
87:52:e3:f3:bd:fe:60:12:32:03:2e:ac:aa:60:cd:
76:f4:77:08:9d:47:dd:89:ee:1c:d3:cc:3c:3d:8b:
d6:03:60:31:15:9e:95:b2:43:a1:f1:1b:d5:c0:db:
79:3d:42:86:97:bf:a4:a8:fc:d0:53:e6:f4:30:16:
b4:db:0b:a6:cb:bd:f9:8f:bb:8f:4e:4c:32:da:6b:
6e:b4:5f:1a:f1:ed:2e:a8:76:5e:a6:e0:2a:4a:40:
76:21:38:16:2e:a7:21:e4:a8:6e:50:a7:3b:ae:ba:
96:86:e6:bc:78:07:38:9c:7a:e4:27:cf:8b:27:03:
39:7b:14:db:0a:db:d8:9a:eb:2f:d1:0d:5a:8c:12:
cf:b4:1a:e1:4f:81:f7:f5:33:c7:7e:e0:fd:32:bb:
eb:e9:3b:27:07:a8:f0:75:28:57:59:18:65:fe:b0:
0f:0e:88:70:74:b8:83:d7:20:5f:01:ab:5f:9a:c1:
8c:c6:29:b5:86:8a:ba:4b:b2:aa:7d:07:74:79:8c:
3e:03:5e:0b:79:ea:72:49:40:66:27:7f:73:65:60:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EF:38:94:E8:87:64:B3:2F:E9:96:39:DA:A0:D5:62:0E:B2:BA:95
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c7:f8:8d:bd:80:9c:74:9a:75:c3:ff:d1:62:04:c8:67:65:
2b:78:52:3e:e3:4b:1d:28:98:05:59:ce:ae:86:79:3a:64:af:
73:80:9f:05:e9:04:02:b6:1d:c5:17:1c:ab:17:0c:b4:90:1f:
b6:29:4e:9b:72:21:f4:de:82:d3:b1:d6:a5:99:aa:5b:9d:1a:
6b:12:bf:ba:37:9e:15:da:00:22:76:3a:4f:08:65:33:06:2d:
46:5b:34:d4:ce:d1:25:90:94:09:c4:bc:55:8c:e1:9c:e4:0e:
95:1e:99:e1:2e:e2:b1:44:f6:84:d1:95:bb:de:c1:33:06:89:
6b:8a:9c:63:69:0a:5d:a7:b0:f6:85:3b:6e:f4:bb:90:8f:c3:
79:b1:c8:a1:1e:27:ce:cb:70:c3:37:f9:33:7c:7d:d1:bd:1a:
df:e0:be:9b:10:91:27:ea:b5:01:87:03:34:20:f0:dc:e0:93:
16:19:d7:5b:d0:8e:57:f6:db:1e:fe:ea:d0:cf:af:8e:bd:c6:
92:3f:9d:b3:b5:eb:67:05:30:24:74:3d:68:c8:41:a0:1d:29:
ab:47:f1:94:9e:be:d4:47:11:8a:4c:f5:f8:21:56:8c:f4:c9:
9a:6a:46:95:8a:15:3d:f9:d8:1c:a7:1e:b5:67:c3:f0:65:e5:
20:45:68:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:04 2025 by rpki-client