Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: 4qLxPU5YfTkg3gaq+PjsFIRPHKv4StK0uEd+waHcfSc=
Subject key identifier: 8B:CF:EE:10:16:BD:2D:43:5B:62:1C:B1:06:C0:EB:E4:39:27:FA:10
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 019759EEA81F198E81012FC6776FDD62C47D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 1584
Signing time: Tue 10 Jun 2025 13:01:42 +0000
Manifest this update: Tue 10 Jun 2025 13:01:42 +0000
Manifest next update: Wed 11 Jun 2025 13:01:42 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: rjq7sw5NNn2tfLkRHC/A1q11GYTQrX7jzpkVLeVPAbw=)
2: Kli1CIfvUzezQEeZgfmrCqdQM_I.roa (hash: 78hmVW1qiWAvpebiM5hdAQNsJHKvS7UWJOLOAC6eO10=)
3: yilBdRRmJ9mIX_a1TabLEV03EEk.roa (hash: 4eslmC4MgTLkKxmkhr2W/5XHOeBZOMOpeHMJJDH3k34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ee:a8:1f:19:8e:81:01:2f:c6:77:6f:dd:62:c4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Jun 10 13:01:42 2025 GMT
Not After : Jun 11 13:01:42 2025 GMT
Subject: CN=8bcfee1016bd2d435b621cb106c0ebe43927fa10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:82:7e:42:08:e5:18:4a:41:7a:a1:ce:44:94:
6a:42:90:f6:66:7e:31:32:ee:6b:a4:73:49:14:53:
4a:ca:ce:e7:57:c5:d6:cd:28:a1:94:98:64:d5:e2:
3c:15:5d:08:ef:8f:aa:86:5b:89:04:04:19:03:ee:
22:7d:3a:76:17:96:8f:5f:2f:75:d4:43:c1:09:22:
af:c9:a3:c5:f1:da:20:35:6c:09:85:4b:8e:77:24:
48:6d:02:96:93:2e:af:2b:de:36:d2:27:53:cf:ad:
55:e9:69:c4:90:4f:07:d8:0f:04:e7:cb:02:19:73:
2b:e5:f2:e9:3b:d4:49:e1:59:51:db:88:a1:c6:20:
91:4a:59:f4:ce:c9:41:0b:4c:1b:99:41:2a:55:eb:
db:db:9b:5d:a7:66:57:a7:fd:42:9b:a5:f3:33:e0:
19:55:5d:9d:0e:69:46:ec:8a:d8:dc:69:db:d6:a6:
74:b0:ba:2a:8c:78:b8:a9:f8:30:aa:27:00:63:7d:
83:6f:7f:92:7c:82:90:a3:24:7e:a3:7a:ae:51:d6:
ef:c1:6e:ee:8c:89:7b:c9:1b:7e:24:8e:9a:94:fa:
42:0c:be:4f:37:75:5b:af:84:61:88:c9:51:c0:af:
d4:d9:d9:58:5b:e6:9e:79:ac:51:c2:d2:1d:fb:ba:
01:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CF:EE:10:16:BD:2D:43:5B:62:1C:B1:06:C0:EB:E4:39:27:FA:10
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:28:10:74:54:8a:d8:43:3e:1d:a1:4d:e7:c9:9b:bf:b8:b8:
f5:53:30:98:25:b0:15:68:54:ca:30:7e:6f:00:23:4e:c6:b0:
52:2c:6a:9a:18:f9:4d:f9:20:0d:71:b4:4f:06:b2:19:cf:b2:
8f:2a:8c:4b:d4:61:9d:02:0f:c7:41:59:14:95:e1:ba:6a:df:
4b:2f:2d:2d:93:9e:62:8e:5d:59:b0:01:86:94:fc:85:5b:6c:
f9:bd:4b:77:14:e2:11:c2:aa:39:2b:f5:77:99:59:f8:00:76:
cb:82:0b:c8:70:13:10:1b:fb:08:08:e7:e3:1d:77:98:ac:db:
ab:dc:a8:2a:77:75:cb:90:52:91:cb:ef:88:cf:1f:1a:46:37:
63:5b:8d:c3:dd:50:5b:82:4b:1f:ed:09:ca:d0:93:f7:a0:a1:
cf:2a:95:87:a8:de:d9:6d:e0:b3:5b:46:23:90:94:ca:b8:84:
23:1e:3c:41:41:b5:dd:2b:da:9d:0f:a4:62:19:85:d2:22:da:
9b:aa:18:2a:e7:62:ee:61:97:93:0a:75:8b:57:4f:20:3e:4f:
0b:f7:c1:4e:a7:01:f4:6c:46:70:8a:e6:a8:77:34:80:1d:23:
a5:9b:47:c7:88:b5:d0:23:0f:33:af:4d:9c:fc:98:78:92:e9:
47:32:c3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:54:17 2025 by rpki-client