Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
File: BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft (raw, json)
Hash identifier: kVK8E/A0SmxWpkZgQPJ/aH9dhP4ELI+/9/cVgM1HNUA=
Subject key identifier: 17:1B:8A:2C:E7:17:B5:A7:06:6A:15:55:FD:98:28:10:87:E0:DC:B3
Authority key identifier: 04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
Certificate issuer: /CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Certificate serial: 01991D9C93C7609A7062A3C7DC7E90F7800F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
Manifest number: 43
Signing time: Sat 06 Sep 2025 06:00:24 +0000
Manifest this update: Sat 06 Sep 2025 06:00:24 +0000
Manifest next update: Sun 07 Sep 2025 06:00:24 +0000
Files and hashes: 1: BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl (hash: iXq0x7w18Fixy0WYLZ4Kx4UgzODYJPvXUmvqwalDKqQ=)
2: SKma3lJH_nMIY0Jk_dGXIETBqnk.roa (hash: UvrsRqXxi0T7Fu2Z9LEfglN30LChbDf1sZ63pwOaTP8=)
3: YDrJUaM078njYLujsFOLBuJi-Ak.roa (hash: ynnnM4zonEkcKprGHH1eGlvVH9BFKbrOufYcESLz12A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:9c:93:c7:60:9a:70:62:a3:c7:dc:7e:90:f7:80:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Validity
Not Before: Sep 6 06:00:24 2025 GMT
Not After : Sep 7 06:00:24 2025 GMT
Subject: CN=171b8a2ce717b5a7066a1555fd98281087e0dcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:43:36:d6:44:d1:05:ba:ed:6b:da:f9:48:
47:3a:9d:e3:6d:97:6b:0f:ce:6c:b2:d9:c8:9e:23:
50:fe:0d:86:24:cd:72:bd:be:81:fd:22:1c:a4:6c:
5a:20:b8:60:a7:70:01:62:c7:9b:42:22:52:c8:6b:
59:4a:0d:c6:3c:07:83:66:2d:dc:c5:19:5d:98:df:
ad:b0:ae:1e:ff:10:25:e5:5f:30:2d:df:82:c2:b6:
d3:9b:cc:8b:48:6b:2c:f0:98:a1:39:d9:c3:43:db:
38:b4:51:42:f3:7b:89:39:cd:36:91:d9:dc:cb:df:
ab:d8:67:81:97:ef:e5:f3:50:aa:9a:95:f5:d8:d1:
d3:ee:e5:76:a7:5b:97:0e:bf:08:9b:f5:85:33:78:
b3:ae:d0:bf:40:bb:5e:46:dc:c4:9b:42:97:d1:4e:
b4:04:42:67:3d:cf:1e:55:51:0a:64:28:ac:1e:ce:
70:6e:d9:fc:fa:28:b0:f6:f7:bb:51:b6:40:6a:b8:
ca:1d:fa:82:42:c1:89:e5:e9:fd:d9:c1:dd:ea:2b:
12:26:69:56:0d:fd:f2:59:55:52:0b:90:a3:b1:92:
b5:35:79:e1:18:6a:f6:9a:8a:d8:19:4a:8c:d0:b0:
ec:df:c7:2e:6f:1d:73:45:4b:27:e8:20:0b:9c:ec:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1B:8A:2C:E7:17:B5:A7:06:6A:15:55:FD:98:28:10:87:E0:DC:B3
X509v3 Authority Key Identifier:
keyid:04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:02:8a:16:da:8e:97:74:ff:7a:e9:67:1e:b6:15:8d:00:16:
95:91:c8:73:14:ac:d1:7c:9c:df:43:a9:85:6b:7b:02:df:ec:
de:da:41:e6:48:c8:e0:4e:d8:c9:9b:23:9f:3a:c2:f7:58:c6:
4f:58:c9:5e:f8:0a:94:f9:6d:31:f2:93:4c:c6:72:ad:3c:49:
c1:33:fc:60:c3:4b:53:fb:fc:79:d6:df:c2:0d:53:e7:7c:bb:
00:c3:17:cf:21:cf:63:80:80:8a:a7:41:60:66:e3:a3:65:c6:
f1:c1:c3:05:5e:ab:1b:81:9b:cd:45:d0:d8:fc:e3:ae:5f:6b:
89:e5:70:bb:18:b4:25:c5:b5:52:ab:44:bd:20:00:a1:98:9c:
7d:ac:65:c1:0c:27:35:07:92:79:40:32:3e:9d:b6:a0:61:ee:
3e:59:bf:00:c3:d6:b0:33:96:1f:76:00:fb:45:63:a4:a8:50:
33:ef:99:69:b9:b4:f8:7a:0a:fc:0b:2a:34:30:7b:24:f8:ce:
bf:4d:6b:d0:32:84:2d:79:39:8e:a4:3c:bf:49:1c:27:a8:1d:
86:d1:c7:6e:1b:44:ba:70:ba:b6:b9:46:98:55:f3:98:fe:48:
b9:b7:6d:a8:fe:9f:61:39:0f:ba:fa:2c:a7:5a:e8:bd:e0:e8:
77:a6:a4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:06:12 2025 by rpki-client