Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
File: bkBn13v-qZ3yXOXgipIT0RKAFM8.mft (raw, json)
Hash identifier: lZZLMJaZGjpiIFtM094kTnzNifSds7l1GcN9ShvlIkI=
Subject key identifier: DE:FE:EC:84:50:2F:5F:E5:84:64:4D:AE:C4:3C:02:E0:D1:90:59:2A
Authority key identifier: 6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
Certificate issuer: /CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Certificate serial: 01984AAF476653C13DA11DFE4BD3677A7908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
Manifest number: 1608
Signing time: Sun 27 Jul 2025 07:00:57 +0000
Manifest this update: Sun 27 Jul 2025 07:00:57 +0000
Manifest next update: Mon 28 Jul 2025 07:00:57 +0000
Files and hashes: 1: adNDLvUmYkNZRHIO-8EvQkOny3U.roa (hash: JFJ+lodVDeHLySNvitcsYBxq8cfuImJHPxEA0H+DjjY=)
2: bkBn13v-qZ3yXOXgipIT0RKAFM8.crl (hash: /RWgmGzvwYcbw95BBLcxyzKG0d+sevtzyVusbkwLEYA=)
3: iktdBTw9X8o6AOOEkLAyuZNK_gg.roa (hash: 2nzjnmBtk5vklJiWyvmO30xEFTmYF5gvtQ11fyrTZUE=)
4: mQ9zePbKKPrER63rktmN5-Z8AoQ.roa (hash: qfFxiv4hVcYLNON7vIi9UIknKo4icjwq21EoSvpzScg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:47:66:53:c1:3d:a1:1d:fe:4b:d3:67:7a:79:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Validity
Not Before: Jul 27 07:00:57 2025 GMT
Not After : Jul 28 07:00:57 2025 GMT
Subject: CN=defeec84502f5fe584644daec43c02e0d190592a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:0e:14:b5:19:b3:76:6d:08:8d:14:26:63:
68:01:16:f8:08:c5:2e:a5:34:2c:36:a0:33:6c:f4:
10:39:09:24:92:30:9e:71:43:52:4c:0b:fe:d2:b4:
57:15:49:4a:d8:f1:dd:4e:da:70:92:69:4b:77:71:
d0:af:80:4a:04:4a:56:db:cb:9d:56:9f:25:4f:fe:
65:da:64:e9:0e:3e:f6:b2:80:ca:6e:74:ba:ae:04:
b3:a8:f7:f7:37:2a:2e:45:9b:6f:ac:a9:9c:8f:80:
fe:41:17:48:9f:76:33:19:2e:3b:bd:7e:d1:ca:54:
02:ee:58:f0:cc:5c:da:43:c5:ab:32:b5:89:23:b7:
aa:0f:ca:6a:6a:7e:fa:47:3c:e2:80:fe:78:c5:50:
5b:8e:c7:c1:e5:95:b5:93:0d:80:d8:50:85:67:1f:
b7:4f:17:58:d7:63:db:ef:7d:96:62:46:ec:b0:2b:
d7:33:f8:98:82:aa:1a:29:bd:e4:f6:f9:1f:1f:e4:
9f:42:73:f4:aa:e3:16:6e:22:37:5b:c2:39:b5:f4:
8f:3f:7f:e2:65:b5:d6:02:8a:c1:e6:6e:cc:b1:e7:
14:85:3a:0b:cf:98:a8:7b:07:42:ef:1f:6f:f2:32:
72:32:3e:ca:7c:1d:b2:fa:73:60:b4:16:21:7f:5c:
e8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FE:EC:84:50:2F:5F:E5:84:64:4D:AE:C4:3C:02:E0:D1:90:59:2A
X509v3 Authority Key Identifier:
keyid:6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:dc:bd:e3:6a:e4:c3:78:4a:da:b9:33:17:de:3d:9a:7f:d1:
3b:23:74:8b:d8:a1:5f:57:0c:6a:95:cd:28:c5:e8:bf:02:6b:
69:c2:1e:4c:fb:66:67:8b:45:52:cd:05:b2:42:fd:ff:2a:a9:
fc:29:d0:50:d0:e9:e0:00:9c:0e:6f:0d:4c:dc:83:f1:b6:bd:
c3:e7:3d:03:ab:2c:ed:c4:8c:46:3c:95:e0:31:8a:f2:e3:8c:
91:08:11:ff:93:83:c3:55:0e:12:f0:a2:d7:81:c7:af:40:c9:
32:a9:cf:66:fb:11:71:3e:36:28:d7:60:60:2c:cb:a6:6b:1d:
7b:19:75:e5:d9:0e:65:26:6b:b2:4a:12:c1:97:b1:78:89:f1:
ec:f7:b0:2d:43:0d:65:56:fa:fe:9b:ab:bb:d9:7f:1a:8d:b0:
d3:d2:d6:f0:c9:69:30:6b:c8:20:12:9c:da:29:f7:77:a0:3e:
8b:4a:74:ec:cd:4c:4d:51:b1:ac:f6:93:f3:e2:59:84:c0:66:
c5:7b:b1:d6:1f:aa:5a:62:b4:31:61:35:f5:7c:40:18:72:ed:
48:60:b3:f5:8b:4f:72:c3:b2:1f:4a:bf:2c:7e:fc:cd:46:2a:
ea:8b:fc:68:a4:34:a4:8f:30:37:c9:46:6d:a8:6a:a2:8e:e3:
b9:59:46:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKr0dmU8E9oR3+S9NnenkIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNDA2N2Q3N2JmZWE5OWRmMjVjZTVlMDhhOTIxM2QxMTI4
MDE0Y2YwHhcNMjUwNzI3MDcwMDU3WhcNMjUwNzI4MDcwMDU3WjAzMTEwLwYDVQQD
EyhkZWZlZWM4NDUwMmY1ZmU1ODQ2NDRkYWVjNDNjMDJlMGQxOTA1OTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmIOFLUZs3ZtCI0UJmNoARb4CMUu
pTQsNqAzbPQQOQkkkjCecUNSTAv+0rRXFUlK2PHdTtpwkmlLd3HQr4BKBEpW28ud
Vp8lT/5l2mTpDj72soDKbnS6rgSzqPf3NyouRZtvrKmcj4D+QRdIn3YzGS47vX7R
ylQC7ljwzFzaQ8WrMrWJI7eqD8pqan76RzzigP54xVBbjsfB5ZW1kw2A2FCFZx+3
TxdY12Pb732WYkbssCvXM/iYgqoaKb3k9vkfH+SfQnP0quMWbiI3W8I5tfSPP3/i
ZbXWAorB5m7MsecUhToLz5ioewdC7x9v8jJyMj7KfB2y+nNgtBYhf1zowwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7+7IRQL1/lhGRNrsQ8AuDRkFkqMB8GA1UdIwQY
MBaAFG5AZ9d7/qmd8lzl4IqSE9ESgBTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmtCbjEzdi1xWjN5WE9YZ2lwSVQwUktBRk04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81ODllY2EtM2YxOS00ZTIzLWEzZmIt
MzMwM2Y3MTYyMmY5LzEvYmtCbjEzdi1xWjN5WE9YZ2lwSVQwUktBRk04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81ODllY2EtM2YxOS00ZTIzLWEzZmItMzMwM2Y3MTYyMmY5
LzEvYmtCbjEzdi1xWjN5WE9YZ2lwSVQwUktBRk04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNy942rk
w3hK2rkzF949mn/ROyN0i9ihX1cMapXNKMXovwJracIeTPtmZ4tFUs0FskL9/yqp
/CnQUNDp4ACcDm8NTNyD8ba9w+c9A6ss7cSMRjyV4DGK8uOMkQgR/5ODw1UOEvCi
14HHr0DJMqnPZvsRcT42KNdgYCzLpmsdexl15dkOZSZrskoSwZexeInx7PewLUMN
ZVb6/puru9l/Go2w09LW8MlpMGvIIBKc2in3d6A+i0p07M1MTVGxrPaT8+JZhMBm
xXux1h+qWmK0MWE19XxAGHLtSGCz9YtPcsOyH0q/LH78zUYq6ov8aKQ0pI8wN8lG
bahqoo7juVlGKA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:11:55 2025 by rpki-client