Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: 4CR6pFc5FbV4RDdjLpL6YCiv8Nx+XjF5wFCHBdcPDvo=
Subject key identifier: B8:15:88:A4:AA:CC:85:B1:9E:76:80:FB:4F:89:63:63:24:F3:1D:FF
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 0198542009B1EFA2E901154E88E1D7B4B6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 076F
Signing time: Tue 29 Jul 2025 03:00:42 +0000
Manifest this update: Tue 29 Jul 2025 03:00:42 +0000
Manifest next update: Wed 30 Jul 2025 03:00:42 +0000
Files and hashes: 1: JztZZ5jdsYiJwH6r3ruJ841yjPA.roa (hash: fWtXOGVQeuynraDkbnyZnR91bHF3bELX/gnfpid099o=)
2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: GvDmXCCWXk31bpGyqxOlnHLI6jcCU5HQk29sjMqfL6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:20:09:b1:ef:a2:e9:01:15:4e:88:e1:d7:b4:b6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Jul 29 03:00:42 2025 GMT
Not After : Jul 30 03:00:42 2025 GMT
Subject: CN=b81588a4aacc85b19e7680fb4f89636324f31dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:62:06:e7:54:6f:ad:82:80:29:3a:ff:48:
fa:77:81:b6:85:ad:5f:c0:fe:df:b2:99:38:fa:45:
18:51:bf:64:55:de:15:73:6e:9d:6f:71:24:36:4c:
c2:cc:ee:a2:2f:4d:3a:dd:9e:cd:e8:dc:e9:ce:57:
c4:f7:97:82:06:c7:8d:7a:12:93:87:be:0e:e1:b7:
3c:59:f6:9d:33:62:71:f8:01:93:e3:cd:c4:f7:48:
f0:2a:70:20:66:e3:6a:0c:a4:01:d4:70:0c:1e:42:
1b:20:4a:3a:83:e4:b9:be:92:a9:6d:78:49:59:e4:
96:d8:f8:c6:40:d6:ed:50:fe:f4:d8:0f:03:0f:5a:
d5:41:3b:aa:9a:e4:2e:15:12:56:57:2b:62:d7:df:
61:34:df:96:b6:e1:ef:1e:a4:cf:42:9b:5c:c8:64:
47:c6:73:dc:3c:73:6b:86:76:48:b6:20:cb:79:3d:
aa:d8:39:28:f2:51:db:45:a4:64:04:6a:2e:9c:ad:
f6:fe:18:60:bb:83:19:6a:78:71:c3:f2:27:2e:1d:
ef:90:8c:8a:1e:7c:bc:2b:7e:b3:ff:e3:75:31:6a:
f1:c5:0e:9c:12:0a:a1:66:20:db:61:be:00:af:db:
ad:d9:16:45:32:14:94:20:74:9c:d0:b2:2d:78:9a:
dc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:15:88:A4:AA:CC:85:B1:9E:76:80:FB:4F:89:63:63:24:F3:1D:FF
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:00:7b:b6:77:ca:0f:fd:58:ca:fb:3a:5c:03:db:d5:2f:c9:
6f:03:73:0d:5c:41:db:93:38:37:15:f2:0c:b4:ba:b5:5e:42:
20:81:a4:44:7c:25:f0:d2:13:0f:9c:1c:c9:dc:f7:f8:c3:1b:
50:52:3d:52:06:55:c5:0a:74:49:19:39:f7:b1:65:5d:49:1a:
d6:97:26:87:10:aa:47:1f:2d:9c:14:b4:c4:ef:73:a7:df:94:
d5:45:ca:83:ab:34:fa:1b:a3:dc:6e:dd:2b:56:4e:40:b8:cb:
19:24:51:8d:ba:3c:f8:fd:fb:b5:4b:6e:20:de:da:b6:c7:f3:
b2:95:28:4a:69:b8:90:13:e1:6d:a0:a3:b1:65:37:db:09:c0:
90:3a:76:0b:9e:89:fc:43:c2:9c:5c:10:40:37:e8:44:d0:9e:
e0:77:cd:ff:f6:5c:e2:61:1a:c6:34:13:2c:c9:f3:82:9d:78:
e4:22:76:62:98:ea:08:40:5e:1c:fe:30:0a:46:30:ff:98:90:
ae:90:fb:3b:f2:6f:b7:73:13:fc:7e:50:d1:63:05:5d:e4:96:
e4:6b:40:a9:78:92:f0:63:ea:72:f5:47:5e:c9:91:4f:04:55:
5d:be:9a:1a:5e:51:83:77:70:a3:7a:15:eb:e8:30:8e:86:cf:
54:b1:1a:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUIAmx76LpARVOiOHXtLbVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYzI0ZTJhYzljZDUzMzk5NjUxNTkwY2YzOTFhZDZiYmYx
YjNlMjYwHhcNMjUwNzI5MDMwMDQyWhcNMjUwNzMwMDMwMDQyWjAzMTEwLwYDVQQD
EyhiODE1ODhhNGFhY2M4NWIxOWU3NjgwZmI0Zjg5NjM2MzI0ZjMxZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyliBudUb62CgCk6/0j6d4G2ha1f
wP7fspk4+kUYUb9kVd4Vc26db3EkNkzCzO6iL0063Z7N6NzpzlfE95eCBseNehKT
h74O4bc8WfadM2Jx+AGT483E90jwKnAgZuNqDKQB1HAMHkIbIEo6g+S5vpKpbXhJ
WeSW2PjGQNbtUP702A8DD1rVQTuqmuQuFRJWVyti199hNN+WtuHvHqTPQptcyGRH
xnPcPHNrhnZItiDLeT2q2Dko8lHbRaRkBGounK32/hhgu4MZanhxw/InLh3vkIyK
Hny8K36z/+N1MWrxxQ6cEgqhZiDbYb4Ar9ut2RZFMhSUIHSc0LIteJrcNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgViKSqzIWxnnaA+0+JY2Mk8x3/MB8GA1UdIwQY
MBaAFG7CTirJzVM5llFZDPORrWu/Gz4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMt
N2E3NDczYzU0NWIxLzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMtN2E3NDczYzU0NWIx
LzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgB7tnfK
D/1Yyvs6XAPb1S/JbwNzDVxB25M4NxXyDLS6tV5CIIGkRHwl8NITD5wcydz3+MMb
UFI9UgZVxQp0SRk597FlXUka1pcmhxCqRx8tnBS0xO9zp9+U1UXKg6s0+huj3G7d
K1ZOQLjLGSRRjbo8+P37tUtuIN7atsfzspUoSmm4kBPhbaCjsWU32wnAkDp2C56J
/EPCnFwQQDfoRNCe4HfN//Zc4mEaxjQTLMnzgp145CJ2YpjqCEBeHP4wCkYw/5iQ
rpD7O/Jvt3MT/H5Q0WMFXeSW5GtAqXiS8GPqcvVHXsmRTwRVXb6aGl5Rg3dwo3oV
6+gwjobPVLEajg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:36:31 2025 by rpki-client