Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
File: bIkO9qiKsz-logZ2B2jdMlHCOK8.mft (raw, json)
Hash identifier: 1NTY8QpNFqXYhsCnmoL7tNw57qgMebBD1cUKzfImjyk=
Subject key identifier: 75:8C:5D:90:14:EE:8F:73:2C:47:B9:A3:84:4E:0F:78:4D:A2:39:D4
Authority key identifier: 6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
Certificate issuer: /CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Certificate serial: 01984A77DE1FAA299718AB8C83B41DD81489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 06:00:26 +0000
Manifest this update: Sun 27 Jul 2025 06:00:26 +0000
Manifest next update: Mon 28 Jul 2025 06:00:26 +0000
Files and hashes: 1: Jg3tAly607eUyr5ul8qsb9iYCbk.roa (hash: E+on8KClaRu9XGuipMYBlTB9A2oc11upYWwt1aQCGuI=)
2: bIkO9qiKsz-logZ2B2jdMlHCOK8.crl (hash: Uq/p6ShYKzdxuvPeSjn+dU1TgXL7cjtJJKVZhw9gIDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:de:1f:aa:29:97:18:ab:8c:83:b4:1d:d8:14:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Validity
Not Before: Jul 27 06:00:26 2025 GMT
Not After : Jul 28 06:00:26 2025 GMT
Subject: CN=758c5d9014ee8f732c47b9a3844e0f784da239d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:81:e6:bc:f8:d4:1b:9d:4a:6b:14:6e:9a:1a:
84:05:9c:6e:e8:2b:e4:79:f0:65:ab:88:43:96:18:
ee:b1:2e:92:9a:14:14:84:1b:ed:e8:f0:44:3a:af:
33:fe:08:e1:d1:af:f2:e1:c9:c6:c9:9f:c1:24:88:
7f:e4:f3:73:b1:49:f1:19:f3:2b:d5:ce:05:37:aa:
2d:43:7c:53:cb:7e:c1:e5:0d:69:3c:8a:d6:8e:88:
ae:ee:c8:05:83:a8:f8:ae:9c:2e:a6:03:ce:c0:dc:
98:a7:9e:9d:2b:20:7d:40:c5:58:be:f3:e2:1a:f6:
5c:03:d9:a2:3c:3d:35:d6:a3:07:e4:90:81:48:6d:
67:25:21:d9:25:8d:0f:56:7a:f6:5b:73:32:17:48:
6b:d5:66:4f:42:b5:08:f0:31:c7:62:ab:68:06:22:
28:11:1e:c6:22:7a:b0:77:1c:8e:9c:f9:f5:b7:2c:
07:55:e9:8a:c6:c4:e7:9e:01:16:b4:25:c8:13:6b:
20:e5:f1:3a:93:d2:05:53:9c:19:41:cd:0f:49:19:
3b:60:c5:34:5f:42:44:99:38:46:d2:b4:37:ce:01:
56:da:0b:35:18:50:31:e3:5a:13:80:43:ce:f5:be:
fb:96:73:4c:b1:2c:0d:bb:24:4b:2e:83:cf:9d:58:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8C:5D:90:14:EE:8F:73:2C:47:B9:A3:84:4E:0F:78:4D:A2:39:D4
X509v3 Authority Key Identifier:
keyid:6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:14:09:80:d0:80:21:ca:6d:6a:00:42:13:35:5a:a4:c3:75:
a8:b2:00:d3:f9:9d:f4:39:dc:7a:7f:40:7d:99:63:d1:df:73:
8f:bd:d1:f2:8b:19:93:86:ad:87:07:ff:40:d6:26:a1:b9:aa:
f4:7b:79:97:6e:89:6a:8c:b1:14:51:52:5b:15:8c:f9:b5:03:
16:4b:55:33:15:41:a5:25:24:6d:d8:68:55:b3:5b:cc:52:47:
23:8d:14:0d:ce:2b:ca:fe:00:7f:83:93:fd:2b:a9:7a:58:0f:
94:c9:19:ac:a1:eb:f8:8e:63:f5:a3:c3:c8:52:e0:8c:af:9a:
b7:aa:53:cc:1f:3c:39:4b:8a:32:e6:e3:a1:14:a8:e1:f4:4d:
b3:fe:43:77:9c:48:53:ac:30:5e:e7:e2:c1:d6:e3:85:5b:f1:
9a:c6:9d:c9:7d:05:3b:cc:7e:bf:95:97:54:5c:8a:c9:1f:ca:
9a:0c:f6:0d:c8:fd:66:53:d3:cc:a7:5b:0e:d6:5c:e1:c0:4c:
46:39:90:3e:af:f1:22:d8:17:94:bd:9e:c6:0a:3a:3b:60:46:
36:cb:a2:85:88:fd:85:f7:27:54:a8:ff:1a:17:f6:38:42:8e:
1e:38:f2:9a:87:7c:7e:46:cc:6d:61:6b:a4:ba:f5:57:a8:b9:
5e:d7:79:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKd94fqimXGKuMg7Qd2BSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjODkwZWY2YTg4YWIzM2ZhNWEyMDY3NjA3NjhkZDMyNTFj
MjM4YWYwHhcNMjUwNzI3MDYwMDI2WhcNMjUwNzI4MDYwMDI2WjAzMTEwLwYDVQQD
Eyg3NThjNWQ5MDE0ZWU4ZjczMmM0N2I5YTM4NDRlMGY3ODRkYTIzOWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YHmvPjUG51KaxRumhqEBZxu6Cvk
efBlq4hDlhjusS6SmhQUhBvt6PBEOq8z/gjh0a/y4cnGyZ/BJIh/5PNzsUnxGfMr
1c4FN6otQ3xTy37B5Q1pPIrWjoiu7sgFg6j4rpwupgPOwNyYp56dKyB9QMVYvvPi
GvZcA9miPD011qMH5JCBSG1nJSHZJY0PVnr2W3MyF0hr1WZPQrUI8DHHYqtoBiIo
ER7GInqwdxyOnPn1tywHVemKxsTnngEWtCXIE2sg5fE6k9IFU5wZQc0PSRk7YMU0
X0JEmThG0rQ3zgFW2gs1GFAx41oTgEPO9b77lnNMsSwNuyRLLoPPnVhYkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWMXZAU7o9zLEe5o4ROD3hNojnUMB8GA1UdIwQY
MBaAFGyJDvaoirM/paIGdgdo3TJRwjivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklrTzlxaUtzei1sb2daMkIyamRNbEhDT0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yYjdjZDEtNDliNi00OTIxLWE1ZTEt
NjFmOTFlZGVkZjBhLzEvYklrTzlxaUtzei1sb2daMkIyamRNbEhDT0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8yYjdjZDEtNDliNi00OTIxLWE1ZTEtNjFmOTFlZGVkZjBh
LzEvYklrTzlxaUtzei1sb2daMkIyamRNbEhDT0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxQJgNCA
IcptagBCEzVapMN1qLIA0/md9Dncen9AfZlj0d9zj73R8osZk4athwf/QNYmobmq
9Ht5l26JaoyxFFFSWxWM+bUDFktVMxVBpSUkbdhoVbNbzFJHI40UDc4ryv4Af4OT
/SupelgPlMkZrKHr+I5j9aPDyFLgjK+at6pTzB88OUuKMubjoRSo4fRNs/5Dd5xI
U6wwXufiwdbjhVvxmsadyX0FO8x+v5WXVFyKyR/Kmgz2Dcj9ZlPTzKdbDtZc4cBM
RjmQPq/xItgXlL2exgo6O2BGNsuihYj9hfcnVKj/Ghf2OEKOHjjymod8fkbMbWFr
pLr1V6i5Xtd5sA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:52 2025 by rpki-client