Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
File: BkhNH1fbDMIyb6pT06eq0mjbwmY.mft (raw, json)
Hash identifier: /L9jTkytMbFc0KQvYXTS0Efa5TxL8O6GTcWeWNcwh6I=
Subject key identifier: B9:AB:F7:8C:8C:10:9C:5D:C3:9C:E0:9C:A7:18:5E:A2:6A:1F:A9:9C
Authority key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
Certificate issuer: /CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Certificate serial: 019A288BD1C003B9C1A586E007A302E7A118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
Manifest number: 16F8
Signing time: Tue 28 Oct 2025 02:00:43 +0000
Manifest this update: Tue 28 Oct 2025 02:00:43 +0000
Manifest next update: Wed 29 Oct 2025 02:00:43 +0000
Files and hashes: 1: BkhNH1fbDMIyb6pT06eq0mjbwmY.crl (hash: AUERBSh8glQu0xOJK4uQZfl0xBG3c+l/nudR/4ehMu8=)
2: wjXBOQcWQ-FZfNOvsXQ1F4lPlGw.roa (hash: E+xrzCXzCwEyErrE4D/BReffI2+8855YllSEHagiBtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:8b:d1:c0:03:b9:c1:a5:86:e0:07:a3:02:e7:a1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Validity
Not Before: Oct 28 02:00:43 2025 GMT
Not After : Oct 29 02:00:43 2025 GMT
Subject: CN=b9abf78c8c109c5dc39ce09ca7185ea26a1fa99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:f9:49:77:9c:9d:5b:d7:fe:0f:28:11:6e:
65:01:bb:f9:f2:af:5d:4f:21:a9:99:f7:d5:b6:bd:
0d:a4:52:f7:0a:89:d5:fe:8e:f9:a1:1a:87:c4:9b:
6a:30:e4:c7:d7:32:5b:90:a9:46:9a:50:5a:f8:9f:
0b:ad:65:99:64:d2:a6:1b:17:29:07:26:e6:8f:50:
91:d2:4c:40:54:9f:11:1b:a0:39:11:cb:f7:86:9b:
48:ac:82:06:f1:68:9e:c5:81:1d:bf:41:1c:a8:e1:
1f:06:dd:6a:e8:57:d8:8c:c3:4d:6f:1d:96:4f:8e:
83:d5:f1:ad:f3:d3:ab:4f:db:4d:fb:2d:e6:45:cf:
d4:c9:1a:b1:90:a9:33:43:5f:f2:56:ad:78:09:0d:
a1:fc:65:ee:47:3f:61:f8:9c:55:b8:1f:b9:81:90:
f1:bb:4c:3d:b8:60:af:b4:bd:7a:1a:7f:5e:01:e5:
94:4b:75:4e:07:9a:16:b2:6a:7f:e6:be:a2:f2:ea:
58:b3:8e:cc:8a:df:af:fb:8c:c4:66:74:e0:45:32:
7e:9a:a1:9b:81:5f:91:9b:e4:4a:9d:e1:e2:27:f2:
30:34:57:c4:fe:06:8f:06:a2:0b:74:c8:de:37:d4:
52:13:e0:34:c4:5c:6f:31:9c:e3:73:19:21:d5:98:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AB:F7:8C:8C:10:9C:5D:C3:9C:E0:9C:A7:18:5E:A2:6A:1F:A9:9C
X509v3 Authority Key Identifier:
keyid:06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:29:f6:e2:5a:a0:88:5c:31:ca:7b:c4:2e:1a:95:96:cd:77:
05:41:86:60:36:83:75:7a:6a:61:b5:61:94:35:83:d5:ec:88:
51:29:fa:ea:d5:5c:e7:19:b7:e7:af:4d:77:01:c7:3c:26:a6:
da:ba:d2:87:df:95:79:9c:eb:64:41:17:7e:b1:05:9e:57:dc:
f2:37:5c:2b:64:3d:5f:96:6e:2e:30:45:00:9e:08:c7:04:96:
3a:c1:13:d5:ff:e7:ab:ef:35:c9:a3:fe:78:37:8c:e6:21:9a:
27:3e:b1:00:01:ed:a7:75:a1:1f:91:a6:c8:3d:dd:2c:37:3c:
4d:82:29:77:b8:66:66:3a:8a:7c:cb:3b:95:fc:95:dd:62:87:
1d:ff:e6:ed:13:4d:fc:f8:d3:2b:9a:5b:d0:f6:29:be:b9:1c:
61:68:dd:29:13:6a:cb:c2:47:18:0a:66:b5:e8:54:de:db:c5:
ce:d1:f7:36:df:10:a6:d8:a5:a6:fa:16:91:4d:2a:f7:51:76:
30:44:fe:26:11:3f:2b:6f:36:64:06:60:8a:24:1b:24:95:a4:
c0:9b:46:0b:fa:f4:74:f0:e6:07:0b:f5:b0:94:41:3d:7d:0c:
52:11:51:7c:98:ee:b8:27:d6:8a:ee:86:95:53:db:9b:41:52:
da:3c:15:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:52:20 2025 by rpki-client