Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: HYSZSa753KLrZ2Yx4satMeMWt1YpXsQGDwA3lzwlr24=
Subject key identifier: 2B:47:E2:E1:5E:0F:09:A9:06:5E:80:C9:CA:D7:C6:40:4E:8A:C8:6F
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 019A270B22137775398004D69DBCD11F7264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 16FB
Signing time: Mon 27 Oct 2025 19:00:32 +0000
Manifest this update: Mon 27 Oct 2025 19:00:32 +0000
Manifest next update: Tue 28 Oct 2025 19:00:32 +0000
Files and hashes: 1: 2GrFuxyxyHkqumdayYRyftHOCCA.roa (hash: 58WfiupeF7jv1/JuV3+ZtSw5ZmglbAvhKCWRK1cfUPw=)
2: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: jFQgL3LxtPEb7hZ77uLEWUOjqJ3IkrMSo2ClfC1pO4U=)
3: EFrmvdYAVAISDnJyY9LHHEwKIkE.roa (hash: VVoG4KmLy8MCQlXZBg6STGy/fzjISq/IYVzwvcg57xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:0b:22:13:77:75:39:80:04:d6:9d:bc:d1:1f:72:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Oct 27 19:00:32 2025 GMT
Not After : Oct 28 19:00:32 2025 GMT
Subject: CN=2b47e2e15e0f09a9065e80c9cad7c6404e8ac86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c8:57:b5:4a:a1:68:d5:3a:25:f1:0e:37:46:
14:74:d0:10:a5:7b:82:9e:f1:bf:e2:b1:98:3f:ce:
2c:81:49:90:25:48:3e:53:18:af:ce:f0:50:8c:2c:
1a:6e:87:7c:83:66:f7:ee:19:e8:77:fa:62:20:53:
4a:4b:b8:51:3e:a9:2f:a9:12:af:ae:c8:ab:c7:b8:
5e:50:6b:9e:3e:24:f3:a6:c2:af:a9:f1:c7:5d:54:
53:04:8f:96:1c:33:c3:78:8b:14:38:46:ad:59:9f:
25:1d:1a:6e:b8:83:ca:18:ac:e9:d6:89:04:63:d3:
22:0e:f8:37:46:c3:44:8a:bd:a5:b8:59:85:72:4c:
6b:ab:f3:1b:14:6d:d3:c0:30:cb:ab:14:6d:a5:16:
c7:b7:57:7a:ae:04:aa:d1:9b:cd:fd:9e:7b:f7:2f:
24:81:42:d0:c0:8b:55:82:f1:e2:28:35:53:c0:19:
2e:e8:fa:5c:cc:2c:39:c3:62:a3:da:fc:4f:d7:34:
a4:d6:67:3a:2b:cc:d6:8d:0b:c9:45:d9:ed:66:02:
44:70:08:11:17:83:b6:75:f1:e6:31:7f:b7:91:e5:
ef:67:99:90:da:6f:cd:5f:03:ec:35:cd:b1:d0:b7:
c8:b3:5e:7b:66:80:02:2c:1d:8e:2d:dd:10:a5:39:
aa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:47:E2:E1:5E:0F:09:A9:06:5E:80:C9:CA:D7:C6:40:4E:8A:C8:6F
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f4:11:a8:2b:43:65:92:72:b1:36:66:70:82:33:05:a9:e3:
4e:ee:1f:cf:b9:38:49:90:fd:91:b9:73:f0:9c:1b:a3:dd:ad:
b8:5f:76:52:c8:6b:83:e6:4a:8b:e1:de:17:36:b6:70:97:d5:
c1:f8:33:4e:97:de:39:bf:f8:bb:95:c0:da:a8:a6:25:ad:9d:
2d:04:ec:25:0c:d8:a2:81:3f:1f:51:97:5a:67:d9:bc:14:48:
d7:10:31:9c:92:34:9a:9c:3b:e6:76:09:6f:ad:76:7a:87:f7:
13:18:45:90:fd:15:70:56:13:0d:18:f8:3f:8b:f1:e2:2f:98:
4e:10:fc:b5:75:be:50:f4:46:fa:64:ed:d4:ca:73:94:b2:9d:
e6:3a:54:74:9d:a8:f7:25:48:83:b1:ce:a2:11:c1:7b:ce:0a:
7d:e8:e3:f8:c0:92:58:c7:d7:9c:9a:aa:b2:65:08:44:e6:42:
e9:2b:a5:80:30:eb:30:3b:04:1a:1b:59:8f:e0:be:94:6f:ee:
b0:01:21:29:1b:35:a6:58:ea:b3:05:96:83:e8:08:e5:62:a2:
36:e1:01:ca:95:f3:86:67:a6:a6:dc:59:51:b8:df:f8:12:c0:
14:3e:ca:10:28:d4:da:2a:19:9a:83:b2:36:3f:fc:a9:9c:eb:
82:f5:35:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:48:33 2025 by rpki-client