Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
File: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json)
Hash identifier: SqEYx9okehv35CS7QHfT3osxuym7mDUl1ci75kMTMtI=
Subject key identifier: 5E:1C:36:9D:E1:26:05:A9:DE:CE:42:9C:93:9B:BF:E4:96:D8:7E:5D
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 0198C5DB980ECB642CF3795FCF1D261C3D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
Manifest number: 09C0
Signing time: Wed 20 Aug 2025 05:02:39 +0000
Manifest this update: Wed 20 Aug 2025 05:02:39 +0000
Manifest next update: Thu 21 Aug 2025 05:02:39 +0000
Files and hashes: 1: 1uAuKLt072-ZQlDEaEvJ4cVZt0U.roa (hash: VxasM346e46c28SKyluMBsYSF6rJX7VQBKo0/PUfiM8=)
2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: gkFtny0KC7q6A8/cOyh/Ko7ggy2sA+mcxmZervPK36c=)
3: FOTPh9BPoJbjEvO_XqYw0Ecj8wo.roa (hash: Tk8RIwgbHfyEByRiqFBz9C7JpjarILl3F0YIF0cWF/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 05:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c5:db:98:0e:cb:64:2c:f3:79:5f:cf:1d:26:1c:3d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: Aug 20 05:02:39 2025 GMT
Not After : Aug 21 05:02:39 2025 GMT
Subject: CN=5e1c369de12605a9dece429c939bbfe496d87e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:c5:62:aa:b9:f1:84:a8:26:7a:1e:96:95:
d8:d1:1e:20:24:79:a1:cc:af:47:e1:80:42:34:6f:
78:5e:70:95:e8:7f:3a:8d:b5:f4:03:52:f6:2b:e1:
0d:e9:1f:6c:7c:d7:fb:0f:dd:25:d9:c1:53:c3:1a:
30:de:8a:69:3f:67:73:30:e5:0c:cd:dc:06:08:3c:
77:74:f3:a9:96:a8:5d:ae:cc:25:49:96:63:26:dc:
53:d1:8a:ca:02:17:a2:e1:cf:d8:8c:fa:e7:a4:31:
e1:d4:41:37:f9:c2:dc:9d:7b:8e:bb:2c:d8:58:11:
1d:78:fb:15:62:af:7f:b1:66:f1:61:42:27:78:61:
d3:04:41:68:fb:8c:10:c7:55:97:a4:06:f3:bc:cc:
0d:c8:8a:36:09:dc:f2:7b:5d:73:1d:e4:d1:89:7f:
cf:06:e7:cd:7f:d5:31:38:3c:98:d7:cc:05:e1:8a:
34:c7:08:a1:99:39:db:cf:d0:40:78:21:6f:0d:36:
f3:c0:15:23:35:5f:a1:79:63:c0:01:77:24:cf:ad:
ff:a7:dd:e9:a3:f0:c8:68:31:69:ee:66:fe:29:0d:
a2:02:15:b6:46:4f:1b:c5:a8:e6:f9:29:35:d9:14:
48:c3:d8:0f:38:1d:62:67:7d:6e:71:0b:11:37:78:
46:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1C:36:9D:E1:26:05:A9:DE:CE:42:9C:93:9B:BF:E4:96:D8:7E:5D
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b1:17:63:a8:ac:c5:5c:18:d2:5e:85:52:7a:b9:18:ce:a9:
f6:03:5b:d7:98:6e:cb:1c:ef:20:be:d4:26:69:f1:3a:a5:e7:
2b:a4:fe:0b:95:4c:41:33:6e:25:7f:be:57:0b:1a:d6:b1:af:
cc:30:c9:99:fa:7d:2b:e6:66:e0:af:fe:11:52:ef:8f:79:73:
bd:90:43:71:7b:fd:7f:f1:4d:34:39:a8:24:05:52:41:18:7e:
fe:34:d6:b9:3f:f2:f4:0e:33:21:3d:f8:cd:b0:46:80:23:93:
a7:38:90:7a:b1:32:25:f4:34:24:6b:49:80:93:41:d2:96:00:
c2:f6:cb:a0:a2:cc:ab:21:31:1c:73:7d:6f:65:c4:df:44:66:
97:0e:3e:e6:c3:46:3e:e6:5e:d8:8c:f0:a9:a6:5e:8c:fe:9d:
d6:bb:74:b6:25:69:0a:a0:c5:75:ae:76:ff:b0:94:27:ac:34:
51:f1:0b:cc:8f:a7:56:8a:14:28:1c:64:b4:ce:0f:d5:96:d4:
52:65:70:63:89:76:73:a5:d3:72:54:09:95:d6:5c:31:42:35:
2d:1d:cd:3b:df:37:40:fc:ea:5d:19:68:8b:b7:99:9d:e2:48:
3c:0a:86:32:e3:e1:70:57:17:4d:90:4f:35:d9:0c:39:1d:87:
2b:5a:20:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:27:07 2025 by rpki-client