Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: OlHGsUQo+Ta8HwH8YCuc5bNDe/LzmLv0qu18u7hCvXs=
Subject key identifier: 48:15:A6:B3:62:AD:8C:F0:FB:44:DD:DF:F1:59:26:2A:95:7D:90:DC
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 01976396A16B58988DCFCFD53E68CBFC09BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 1589
Signing time: Thu 12 Jun 2025 10:01:45 +0000
Manifest this update: Thu 12 Jun 2025 10:01:45 +0000
Manifest next update: Fri 13 Jun 2025 10:01:45 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: WBdwhpRmPKIv+fSZfJr87QiswtrEeYTf/omtqveAie8=)
2: Kli1CIfvUzezQEeZgfmrCqdQM_I.roa (hash: 78hmVW1qiWAvpebiM5hdAQNsJHKvS7UWJOLOAC6eO10=)
3: yilBdRRmJ9mIX_a1TabLEV03EEk.roa (hash: 4eslmC4MgTLkKxmkhr2W/5XHOeBZOMOpeHMJJDH3k34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:96:a1:6b:58:98:8d:cf:cf:d5:3e:68:cb:fc:09:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Jun 12 10:01:45 2025 GMT
Not After : Jun 13 10:01:45 2025 GMT
Subject: CN=4815a6b362ad8cf0fb44dddff159262a957d90dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:9a:c1:e3:65:4a:88:ec:3d:33:5f:8b:31:
09:74:84:92:c2:32:03:f3:6b:fc:9f:23:f1:a2:c6:
4c:72:d9:61:b5:ce:fe:ca:5a:9c:06:1b:5a:a3:24:
3e:af:78:6a:dd:ea:57:11:ab:7f:12:63:1f:00:fc:
2e:07:c7:5a:db:d8:b8:ef:05:f3:01:3c:97:aa:f7:
6e:ee:9c:b8:11:d9:4d:49:a6:01:38:42:57:b8:51:
2b:1f:3e:9f:6b:c9:e3:c0:95:c1:00:fe:9b:ca:88:
50:e8:fb:4f:b1:8c:eb:96:9f:64:c5:16:7d:01:56:
20:42:38:da:09:ca:eb:25:5c:d7:c2:29:66:6e:38:
50:da:d9:44:96:8c:fa:af:1d:ce:73:4a:79:db:25:
8e:e9:a6:22:de:ed:bb:13:e5:10:ca:c4:05:99:ad:
6b:92:f4:3f:0f:c1:54:0d:bf:81:e9:76:6f:ed:d0:
12:6d:74:e9:0a:3d:76:15:02:16:cb:5e:36:c4:19:
71:fe:bd:a5:d3:7d:27:25:4b:fe:0e:04:fa:fc:8d:
70:f3:01:af:39:b6:bc:d2:81:0c:48:b7:39:04:26:
ac:75:24:19:7b:72:af:a3:31:69:6f:6a:af:7f:63:
23:41:b9:cd:6f:08:e0:39:b2:92:e2:51:7f:21:d8:
af:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:15:A6:B3:62:AD:8C:F0:FB:44:DD:DF:F1:59:26:2A:95:7D:90:DC
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c3:a1:c2:61:f7:d5:db:89:0b:c9:7d:73:c4:e3:99:c6:1d:
07:84:ad:b3:ca:d2:e0:82:14:c2:1c:f7:ac:11:1b:06:f1:5e:
d0:1c:9c:2f:4d:98:99:97:40:1d:4a:a8:0d:3a:5e:d8:73:be:
3d:f1:24:fc:20:ea:57:26:6a:a0:5b:ed:fb:85:c5:d7:ec:f7:
fe:25:f4:7e:b7:b4:28:1c:96:92:27:e9:aa:9a:e0:0b:9c:04:
66:00:d4:78:20:9d:07:c3:b7:e1:00:ed:21:ed:25:ae:b2:b4:
93:58:4a:e3:ee:1a:98:1f:40:f3:ef:8e:b6:c3:34:db:86:22:
0b:46:78:a6:89:08:64:b2:ad:85:b7:f5:d5:b5:07:d4:aa:eb:
10:34:9b:68:d3:16:06:1f:31:08:91:e4:14:6e:43:f4:9d:18:
15:9f:67:17:5b:79:05:2c:55:3e:9a:53:af:1d:cd:d7:dc:34:
b3:2a:fb:84:48:19:7b:46:57:75:7b:2a:0a:64:00:61:2f:0f:
db:c2:79:96:85:25:63:66:3b:56:04:af:aa:2a:77:89:74:c2:
ff:a5:0d:6b:1e:3c:52:78:9c:e5:68:36:d0:e1:6a:5d:9a:4e:
29:ab:57:7d:fb:ce:87:4f:74:e6:fa:69:fd:32:08:68:b4:3c:
37:f2:b8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:25:43 2025 by rpki-client