Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
File: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft (raw, json)
Hash identifier: RBs4eN2QD0l3bB920gzd6S296XRiAczUt/MUrlfPc6w=
Subject key identifier: BE:DA:3A:1B:30:F4:13:FA:77:66:84:30:CB:B0:59:BD:BC:BD:71:47
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 0199244430471B5EC81B05FFEC4BE2FCD84A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
Manifest number: 1676
Signing time: Sun 07 Sep 2025 13:01:12 +0000
Manifest this update: Sun 07 Sep 2025 13:01:12 +0000
Manifest next update: Mon 08 Sep 2025 13:01:12 +0000
Files and hashes: 1: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl (hash: 5lRuJRTHiKVaafjdijTh4UOBnbYkPBGiF35/EfY9vJM=)
2: LVIJD49T-mpIvZxU62MTl9m9hkE.roa (hash: YaoE67iYSNEdVd0kQd7kfsjxfRQdded3vy+Kv/LAgPk=)
3: PTqvLbs-crQCXH75GKZKj2e3XH4.roa (hash: LPrD3bTGgphahX9ng5Tkg/VWB+najziQTzD7XFs0iFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:44:30:47:1b:5e:c8:1b:05:ff:ec:4b:e2:fc:d8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Sep 7 13:01:12 2025 GMT
Not After : Sep 8 13:01:12 2025 GMT
Subject: CN=beda3a1b30f413fa77668430cbb059bdbcbd7147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:f9:3d:28:02:22:49:c0:f3:58:40:47:94:
e7:c4:f5:0f:ec:d9:8d:e1:a8:c5:7a:b7:c2:35:b0:
3b:c4:bb:6e:74:d3:af:31:f7:e0:8f:95:40:ff:0f:
1e:18:30:74:8f:d6:b6:0a:16:82:a6:f4:ab:a0:20:
a2:69:4a:8a:70:b9:4d:69:53:17:ff:1d:13:67:5c:
0b:92:3f:72:cb:53:89:cf:57:94:10:d4:5a:25:4c:
06:36:06:52:57:4f:53:75:6a:7f:8b:53:55:df:88:
21:85:dc:ce:2b:fc:1c:46:fa:3c:5e:03:33:fb:6c:
d3:e1:16:59:e8:f1:31:0d:68:2c:18:e9:7f:bc:d2:
15:f7:d9:af:1d:5c:32:11:fd:3f:e7:a6:f3:cb:1d:
76:3e:c7:2e:78:27:79:1e:ca:ff:cf:78:30:4b:b4:
ca:aa:87:02:18:1b:79:f9:a3:cf:2c:56:15:2d:7d:
24:3e:92:1c:5e:28:f9:5b:e8:f5:d7:d6:c2:55:05:
2b:18:21:03:a1:3b:e9:77:c5:58:45:d8:b8:bc:96:
b5:6f:58:e3:54:c7:89:ad:6b:58:d9:1e:f8:93:f6:
56:40:d4:0e:1f:81:70:ed:70:f2:ec:31:9d:57:52:
61:e6:50:e0:f5:be:a4:8c:d8:62:84:2d:61:25:38:
52:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DA:3A:1B:30:F4:13:FA:77:66:84:30:CB:B0:59:BD:BC:BD:71:47
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:97:d7:c1:1b:e2:b5:f1:db:9e:ca:16:e0:78:14:09:e0:c7:
86:fd:71:ac:1e:18:4d:59:fc:92:94:3b:b7:b1:13:f9:b5:4e:
fc:62:d3:4e:14:c7:1d:6f:3b:4c:4a:5b:c3:5e:77:eb:50:7e:
bc:12:5e:a3:9e:86:dc:82:c1:ca:a2:a3:d8:7f:f9:19:e0:1c:
37:5c:f2:12:dc:ea:1d:12:db:bd:e3:ae:aa:8e:89:19:5b:a9:
1a:f9:c1:99:55:87:37:d0:17:0e:f1:c0:d1:a0:d8:6e:a1:00:
b3:a7:89:2c:91:1c:f7:7b:23:46:7a:d1:13:d9:1a:23:0a:47:
8d:de:ea:c3:13:41:b9:22:39:53:5e:03:a4:a5:c8:51:c1:d9:
c6:2c:09:ee:84:7e:f3:f8:19:cf:57:4e:95:11:60:15:8a:77:
a2:88:9c:10:4d:25:35:fc:ed:30:50:6b:c1:4b:65:45:0b:82:
25:88:35:51:7c:5e:5d:3f:47:a9:47:f1:fb:3c:08:08:e4:25:
5f:6d:ef:03:c5:8e:5c:90:73:58:65:90:b3:e9:a0:ee:9a:b0:
d6:d1:6f:15:fb:be:92:b8:8c:4d:b7:c7:ff:da:35:c5:20:69:
43:60:d1:98:1e:8b:b0:05:af:48:16:7f:39:1f:15:8d:75:89:
d7:d9:d5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:47 2025 by rpki-client