Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
File: BkhNH1fbDMIyb6pT06eq0mjbwmY.mft (raw, json)
Hash identifier: aFt6KHrXfAeYWvubrbbk48xKg5DH62xp0c4EX8mZKtA=
Subject key identifier: 72:61:4D:58:63:B1:CD:DF:D5:63:94:01:EC:D0:3C:F2:93:CF:B6:B5
Authority key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
Certificate issuer: /CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Certificate serial: 019933499B77193F267FF2F358222D78AC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 11:01:25 +0000
Manifest this update: Wed 10 Sep 2025 11:01:25 +0000
Manifest next update: Thu 11 Sep 2025 11:01:25 +0000
Files and hashes: 1: BkhNH1fbDMIyb6pT06eq0mjbwmY.crl (hash: rqHwNqB58Tbp/eH+yJNv7XJ+74hmGgv4hiXgCMSfYsU=)
2: wjXBOQcWQ-FZfNOvsXQ1F4lPlGw.roa (hash: E+xrzCXzCwEyErrE4D/BReffI2+8855YllSEHagiBtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:9b:77:19:3f:26:7f:f2:f3:58:22:2d:78:ac:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Validity
Not Before: Sep 10 11:01:25 2025 GMT
Not After : Sep 11 11:01:25 2025 GMT
Subject: CN=72614d5863b1cddfd5639401ecd03cf293cfb6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:36:e3:21:b5:8d:a1:25:25:af:40:0b:b7:
7f:01:6a:dc:2c:4e:07:a3:26:ae:ea:cb:f7:ed:c3:
da:f1:61:35:50:80:89:9c:59:c0:6d:4b:64:ff:07:
f5:cf:bb:52:3a:36:6e:da:86:e5:3a:bb:1a:be:93:
a9:60:5f:fb:ee:33:63:b6:0d:ef:0a:42:f2:0c:31:
aa:de:b1:64:34:62:ce:90:d7:4e:24:2a:6a:49:67:
01:3a:f2:2f:0a:7e:23:ba:4e:5f:6d:8e:8e:27:09:
6e:c3:9b:12:b7:05:d9:16:e1:7d:5a:73:91:b4:c7:
fe:c3:c8:d0:bd:58:82:9d:73:47:87:53:42:a3:e9:
73:cb:d8:7a:e9:ab:d8:b6:2e:46:3b:30:4b:ab:ba:
9d:fd:41:9b:84:9c:be:4e:c7:3d:a2:2d:44:8c:98:
17:0c:38:58:ee:37:60:40:9a:01:6e:a8:62:78:d9:
f9:eb:3b:e6:37:7a:2f:84:2b:27:08:e8:a6:36:86:
f6:5c:aa:46:93:e6:f1:05:57:aa:61:ec:73:e4:bb:
39:b7:06:bd:a3:5d:97:75:d1:cb:8a:81:56:0a:f0:
04:fc:c2:00:16:6a:5b:fb:e0:c5:58:89:db:db:60:
cb:c8:04:c3:fd:c5:6f:2e:3e:fa:f4:70:19:e0:88:
93:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:61:4D:58:63:B1:CD:DF:D5:63:94:01:EC:D0:3C:F2:93:CF:B6:B5
X509v3 Authority Key Identifier:
keyid:06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8f:41:e8:52:48:7a:26:66:da:ee:ed:d8:cd:2d:52:e7:80:
ac:44:45:9d:84:b3:52:c5:e7:c8:13:78:13:50:30:cc:99:11:
c1:9c:97:4f:18:25:e7:99:64:86:7c:1d:66:01:e2:09:99:a2:
d9:6a:d0:2b:28:af:d6:03:fa:97:bf:d8:98:34:10:87:48:af:
e4:f6:95:cf:87:e8:93:b2:3d:24:1e:e1:67:1a:19:6a:28:cc:
4e:58:ca:58:cf:ff:66:82:47:b2:52:4d:3f:3d:7d:ff:d0:64:
83:87:08:be:cd:7e:3c:0b:a0:19:8a:74:19:cc:cd:96:04:85:
97:0a:2f:c6:f9:82:ba:43:0c:25:29:a2:4f:4a:a9:ac:9f:b7:
91:5b:b0:08:8d:91:6b:cd:4d:97:60:44:74:fd:41:99:4e:fd:
39:10:5f:e4:7a:c4:e3:7c:15:b5:c9:84:27:4f:10:a5:54:d8:
37:bb:e2:4c:6d:d8:39:4c:03:6b:6b:31:b2:6c:65:97:09:01:
ee:4e:55:dd:9c:e7:9a:8b:cb:74:ff:15:c8:14:bb:28:30:c1:
5c:ae:29:ef:e9:76:63:45:02:d5:02:3a:cd:39:4b:f1:ec:a1:
85:1d:2e:a3:1d:c2:99:43:24:cd:7d:0f:a0:49:ee:54:ab:51:
a7:da:d1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:38:41 2025 by rpki-client