Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.mft
File: B16ZPnb51_pATWmmy2DUv5jyuh4.mft (raw, json)
Hash identifier: ILUMRMEiwP/u6e/eAJMYieMQo331rdLRMHyXVKxOtKM=
Subject key identifier: 26:18:E6:9B:20:06:CD:EF:50:A5:48:8C:01:A5:95:86:A4:53:F1:04
Authority key identifier: 07:5E:99:3E:76:F9:D7:FA:40:4D:69:A6:CB:60:D4:BF:98:F2:BA:1E
Certificate issuer: /CN=075e993e76f9d7fa404d69a6cb60d4bf98f2ba1e
Certificate serial: 0198496568BDB496972768A3FB0AF11F3D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B16ZPnb51_pATWmmy2DUv5jyuh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.mft
Manifest number: 0CE3
Signing time: Sun 27 Jul 2025 01:00:39 +0000
Manifest this update: Sun 27 Jul 2025 01:00:39 +0000
Manifest next update: Mon 28 Jul 2025 01:00:39 +0000
Files and hashes: 1: B16ZPnb51_pATWmmy2DUv5jyuh4.crl (hash: K6196E7XKjiX6lkjlbOg/Et2+zKn3HrmyEaA7MV62h4=)
2: eQ-gR06b4zJqKEnaNnRmGDj0gZU.roa (hash: JTu+VCZve4g7YJ7lEl3E5gK1lzKHcSO10n13jSXvJvE=)
3: s_4M0Xn3RWdVl5Ee5amLr_m-SKI.roa (hash: PZMtSOH/plvjDd02CCjFt0ICQDy0I1QjX54XMQBvGFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B16ZPnb51_pATWmmy2DUv5jyuh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:68:bd:b4:96:97:27:68:a3:fb:0a:f1:1f:3d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075e993e76f9d7fa404d69a6cb60d4bf98f2ba1e
Validity
Not Before: Jul 27 01:00:39 2025 GMT
Not After : Jul 28 01:00:39 2025 GMT
Subject: CN=2618e69b2006cdef50a5488c01a59586a453f104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:51:62:79:58:2f:bf:b2:e7:59:eb:15:23:
ec:77:0e:33:d8:42:52:e8:b8:a0:35:24:26:c8:0c:
d8:9d:63:d7:3f:7c:f5:b8:fc:94:ee:f4:2e:fa:44:
a4:03:f2:d1:db:54:53:fb:61:51:40:9d:81:10:8c:
c1:1c:e2:07:3f:20:d0:6d:8a:36:f1:c7:b2:c8:e0:
f2:16:37:3e:9d:46:9a:f0:05:6c:3d:2c:ba:db:0c:
f8:f9:e6:07:74:99:b2:d3:ab:16:76:4e:07:0d:c3:
a9:48:c1:aa:26:9c:33:36:e6:b1:2d:91:bc:db:61:
39:91:81:09:db:77:04:5c:b8:11:ce:3c:86:fd:0b:
c3:56:5e:f1:01:74:f1:c1:c3:8b:55:30:13:b8:a2:
56:e5:d4:1b:37:31:1c:c1:6a:ad:d9:4f:15:e1:0d:
20:cf:ff:61:c8:22:3b:0b:dc:10:b9:3b:df:f1:2c:
f0:63:26:0c:c3:91:4e:8a:b1:d9:6b:34:2a:9e:16:
7f:a5:61:65:fe:07:24:d7:43:87:2e:2b:25:47:b3:
10:33:a2:9d:65:08:d1:8c:93:e9:b8:00:dd:49:a2:
11:d3:84:1b:e7:ac:3a:c8:c2:4d:cd:e0:ac:7c:88:
df:d4:36:72:02:aa:f6:e0:82:bb:cb:33:68:83:95:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:18:E6:9B:20:06:CD:EF:50:A5:48:8C:01:A5:95:86:A4:53:F1:04
X509v3 Authority Key Identifier:
keyid:07:5E:99:3E:76:F9:D7:FA:40:4D:69:A6:CB:60:D4:BF:98:F2:BA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B16ZPnb51_pATWmmy2DUv5jyuh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:10:46:79:ab:36:12:ef:f0:f4:fa:d8:4c:81:fb:31:5e:60:
9f:af:4e:d8:94:fe:de:a6:68:96:26:c2:08:de:c5:50:39:29:
dc:9d:32:04:1f:43:c3:77:b3:98:d1:11:9e:5a:5b:92:be:ac:
85:ba:0e:3f:18:37:b0:ac:d9:aa:c9:16:55:ea:68:71:9c:af:
4a:42:6d:01:88:e0:b1:5b:7e:b1:af:ed:89:4a:00:7a:23:e0:
a2:ef:57:12:5b:84:3a:0c:fa:ae:e2:50:64:3f:16:26:44:a6:
b2:f3:af:fa:bb:ab:1f:bf:94:75:b6:4d:ce:be:26:52:8e:7a:
0b:e7:b9:2e:5e:7b:4d:47:df:02:2f:1e:86:e4:02:fe:b3:10:
4a:b0:b2:e9:72:97:b0:d4:36:e0:2f:79:35:e2:7d:49:26:16:
93:8d:88:b5:5b:b8:a1:f1:9d:a0:9a:40:54:37:80:ad:1f:1b:
42:55:ed:f9:d7:e7:73:13:84:60:41:44:27:f4:e9:1b:1b:0f:
7a:57:46:7a:44:f3:44:ad:b9:f9:e5:e0:5e:9c:c5:89:8f:5a:
d4:81:c7:04:37:bd:9f:43:73:52:3e:41:f0:e7:4a:5c:f2:02:
fc:95:0a:7b:69:aa:a6:92:69:0f:06:62:e5:38:e6:c0:f7:e1:
bd:0a:e2:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZWi9tJaXJ2ij+wrxHz0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NWU5OTNlNzZmOWQ3ZmE0MDRkNjlhNmNiNjBkNGJmOThm
MmJhMWUwHhcNMjUwNzI3MDEwMDM5WhcNMjUwNzI4MDEwMDM5WjAzMTEwLwYDVQQD
EygyNjE4ZTY5YjIwMDZjZGVmNTBhNTQ4OGMwMWE1OTU4NmE0NTNmMTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLRRYnlYL7+y51nrFSPsdw4z2EJS
6LigNSQmyAzYnWPXP3z1uPyU7vQu+kSkA/LR21RT+2FRQJ2BEIzBHOIHPyDQbYo2
8ceyyODyFjc+nUaa8AVsPSy62wz4+eYHdJmy06sWdk4HDcOpSMGqJpwzNuaxLZG8
22E5kYEJ23cEXLgRzjyG/QvDVl7xAXTxwcOLVTATuKJW5dQbNzEcwWqt2U8V4Q0g
z/9hyCI7C9wQuTvf8SzwYyYMw5FOirHZazQqnhZ/pWFl/gck10OHLislR7MQM6Kd
ZQjRjJPpuADdSaIR04Qb56w6yMJNzeCsfIjf1DZyAqr24IK7yzNog5Vp5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYY5psgBs3vUKVIjAGllYakU/EEMB8GA1UdIwQY
MBaAFAdemT52+df6QE1ppstg1L+Y8roeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjE2WlBuYjUxX3BBVFdtbXkyRFV2NWp5dWg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iNDU2NmItYmNjOC00ZGY1LWJhMmYt
ZTE1ZTY2NmFkNmMyLzEvQjE2WlBuYjUxX3BBVFdtbXkyRFV2NWp5dWg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iNDU2NmItYmNjOC00ZGY1LWJhMmYtZTE1ZTY2NmFkNmMy
LzEvQjE2WlBuYjUxX3BBVFdtbXkyRFV2NWp5dWg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRBGeas2
Eu/w9PrYTIH7MV5gn69O2JT+3qZolibCCN7FUDkp3J0yBB9Dw3ezmNERnlpbkr6s
hboOPxg3sKzZqskWVepocZyvSkJtAYjgsVt+sa/tiUoAeiPgou9XEluEOgz6ruJQ
ZD8WJkSmsvOv+rurH7+UdbZNzr4mUo56C+e5Ll57TUffAi8ehuQC/rMQSrCy6XKX
sNQ24C95NeJ9SSYWk42ItVu4ofGdoJpAVDeArR8bQlXt+dfncxOEYEFEJ/TpGxsP
eldGekTzRK25+eXgXpzFiY9a1IHHBDe9n0NzUj5B8OdKXPIC/JUKe2mqppJpDwZi
5TjmwPfhvQriRQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:00:18 2025 by rpki-client