Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
File: B-pSPsf5N3oanl1vqGgX7T1sCoI.mft (raw, json)
Hash identifier: eEzxDkxsIjrK5y+Vt6nLKml86y3NLqaIm6UXT/EFc34=
Subject key identifier: F9:A1:57:2F:C2:04:55:B5:7C:20:02:D6:70:0E:0E:40:31:41:FB:2A
Authority key identifier: 07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
Certificate issuer: /CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Certificate serial: 01984B8A5162B809A477C64CB1EAC88DA03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 11:00:12 +0000
Manifest this update: Sun 27 Jul 2025 11:00:12 +0000
Manifest next update: Mon 28 Jul 2025 11:00:12 +0000
Files and hashes: 1: B-pSPsf5N3oanl1vqGgX7T1sCoI.crl (hash: XkPaRJ9AHgwgLiuUW4dhalj5q0b6+1of3SQ5qLzEjjs=)
2: npXHmGXZGuLcOHTCUM12CgHnXyg.roa (hash: 1gC/eDL6k6iHyWBQvbxBWaVuZWHOyh/0XMWrseRbP5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:51:62:b8:09:a4:77:c6:4c:b1:ea:c8:8d:a0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Validity
Not Before: Jul 27 11:00:12 2025 GMT
Not After : Jul 28 11:00:12 2025 GMT
Subject: CN=f9a1572fc20455b57c2002d6700e0e403141fb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:db:7c:23:4c:14:0d:4d:6a:7c:db:2d:bc:77:
a3:cf:95:13:76:a4:a7:26:42:d9:99:ce:77:d2:c4:
2c:b0:12:ea:42:7a:98:ef:94:14:d1:a0:9d:4a:26:
13:e6:ff:e9:64:11:ed:e4:6e:6e:03:85:f8:fc:8d:
fc:aa:a5:81:73:fa:c4:6f:57:63:2e:de:d5:2c:5b:
51:cb:1b:ce:1d:63:8f:26:c0:e8:7c:00:f6:27:bc:
f0:d6:47:3d:1a:f0:3d:77:1a:da:ce:fc:85:de:68:
4e:7a:89:31:88:4c:6d:8b:49:c2:be:48:e9:47:bf:
30:44:e5:92:55:8c:11:3d:02:71:e9:ef:9c:dc:3f:
7f:d5:ea:cb:67:da:6d:18:33:c2:2c:99:74:86:6a:
e9:bc:bf:01:30:ce:19:25:4c:66:a4:2a:dc:24:66:
78:2f:ce:a8:9d:c1:74:19:fc:b2:52:64:a6:f2:37:
66:14:ac:7b:7c:36:15:10:78:2a:0c:ab:7d:c6:b9:
f1:37:6a:96:18:3f:6f:7e:fd:fc:cf:f9:e9:41:f4:
78:cd:cd:3e:52:1e:1f:6f:cd:4d:b5:b0:88:50:d6:
5c:fd:7e:00:9d:5d:95:bc:dc:1e:36:33:82:7f:47:
81:0e:a0:ea:e2:94:a2:a5:bd:2b:66:93:cc:21:dc:
ac:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A1:57:2F:C2:04:55:B5:7C:20:02:D6:70:0E:0E:40:31:41:FB:2A
X509v3 Authority Key Identifier:
keyid:07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a3:b2:bb:c5:ef:d6:7e:ae:a1:45:f9:3c:15:c3:de:d7:79:
d6:c2:90:94:9c:1f:4e:b9:dc:e0:f8:a8:a0:80:fb:46:43:6c:
18:ab:57:4b:ef:af:25:3b:2b:b4:0c:70:2b:f2:49:49:85:55:
2f:13:dc:27:f8:89:2a:e3:6f:92:fc:af:f9:94:ee:df:9f:6d:
40:3b:fa:b7:6d:a5:83:4a:ee:7d:0a:4e:90:eb:26:7d:00:33:
c8:36:28:cd:f5:7a:59:b5:54:9d:bb:11:4c:e3:c6:27:c4:24:
1b:9a:5c:eb:90:08:ef:79:eb:43:d7:01:4f:5e:ac:9f:42:03:
6b:ea:22:08:40:ad:8b:fc:67:6d:2f:62:d5:51:e0:5f:28:16:
54:c9:53:6b:fb:8d:a5:0b:f6:72:15:21:98:11:f4:39:38:7f:
82:60:f0:7f:b2:ad:17:11:b1:ff:df:73:fc:f9:0b:c0:93:88:
29:f8:10:2c:6b:e0:30:06:02:52:ad:82:5b:6f:59:db:70:e0:
71:26:23:4d:fe:d6:6a:25:74:93:4b:fd:35:be:be:c9:9a:a3:
1a:76:11:58:00:a1:64:83:89:16:58:2f:3c:c0:9a:80:4e:e4:
4a:ba:eb:55:ba:7b:4b:16:09:99:6e:65:9e:0a:4b:fb:78:bd:
8b:2f:b7:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLilFiuAmkd8ZMserIjaA/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZWE1MjNlYzdmOTM3N2ExYTllNWQ2ZmE4NjgxN2VkM2Q2
YzBhODIwHhcNMjUwNzI3MTEwMDEyWhcNMjUwNzI4MTEwMDEyWjAzMTEwLwYDVQQD
EyhmOWExNTcyZmMyMDQ1NWI1N2MyMDAyZDY3MDBlMGU0MDMxNDFmYjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtt8I0wUDU1qfNstvHejz5UTdqSn
JkLZmc530sQssBLqQnqY75QU0aCdSiYT5v/pZBHt5G5uA4X4/I38qqWBc/rEb1dj
Lt7VLFtRyxvOHWOPJsDofAD2J7zw1kc9GvA9dxrazvyF3mhOeokxiExti0nCvkjp
R78wROWSVYwRPQJx6e+c3D9/1erLZ9ptGDPCLJl0hmrpvL8BMM4ZJUxmpCrcJGZ4
L86oncF0GfyyUmSm8jdmFKx7fDYVEHgqDKt9xrnxN2qWGD9vfv38z/npQfR4zc0+
Uh4fb81NtbCIUNZc/X4AnV2VvNweNjOCf0eBDqDq4pSipb0rZpPMIdysvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmhVy/CBFW1fCAC1nAODkAxQfsqMB8GA1UdIwQY
MBaAFAfqUj7H+Td6Gp5db6hoF+09bAqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi1wU1BzZjVOM29hbmwxdnFHZ1g3VDFzQ29JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ZGZjZDUtMDdkNi00YWQ4LWFkMWQt
YjYwZmQ2Nzk5N2JiLzEvQi1wU1BzZjVOM29hbmwxdnFHZ1g3VDFzQ29JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85ZGZjZDUtMDdkNi00YWQ4LWFkMWQtYjYwZmQ2Nzk5N2Ji
LzEvQi1wU1BzZjVOM29hbmwxdnFHZ1g3VDFzQ29JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKOyu8Xv
1n6uoUX5PBXD3td51sKQlJwfTrnc4PiooID7RkNsGKtXS++vJTsrtAxwK/JJSYVV
LxPcJ/iJKuNvkvyv+ZTu359tQDv6t22lg0rufQpOkOsmfQAzyDYozfV6WbVUnbsR
TOPGJ8QkG5pc65AI73nrQ9cBT16sn0IDa+oiCECti/xnbS9i1VHgXygWVMlTa/uN
pQv2chUhmBH0OTh/gmDwf7KtFxGx/99z/PkLwJOIKfgQLGvgMAYCUq2CW29Z23Dg
cSYjTf7WaiV0k0v9Nb6+yZqjGnYRWAChZIOJFlgvPMCagE7kSrrrVbp7SxYJmW5l
ngpL+3i9iy+3MA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:32:47 2025 by rpki-client