Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
File: a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft (raw, json)
Hash identifier: fRUP+4yyJ6uK9Vch6+iPD42Vd24kkK/CCzi86IuiGTU=
Subject key identifier: 93:B0:0D:DF:9C:1B:C0:15:FA:1E:20:6C:26:D2:34:1E:41:A5:F3:5B
Authority key identifier: 6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
Certificate issuer: /CN=6b60412823a0224a5d00e4963d6b23d22504997d
Certificate serial: 0198537B7B8A237D5C2C3B9A3EF18FF25792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
Manifest number: 10E1
Signing time: Tue 29 Jul 2025 00:00:58 +0000
Manifest this update: Tue 29 Jul 2025 00:00:58 +0000
Manifest next update: Wed 30 Jul 2025 00:00:58 +0000
Files and hashes: 1: a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl (hash: mLa6FDvjPG5sF8GBQtc51sNGIyz73yPlMbbYPJpD3+0=)
2: hnsA4cHOijPoNwlf0ddWoTOuP4M.roa (hash: VpkjEz6V4+QhZq7fIhlT9s7HZODrWhTnFk36Jz3+dtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:7b:8a:23:7d:5c:2c:3b:9a:3e:f1:8f:f2:57:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b60412823a0224a5d00e4963d6b23d22504997d
Validity
Not Before: Jul 29 00:00:58 2025 GMT
Not After : Jul 30 00:00:58 2025 GMT
Subject: CN=93b00ddf9c1bc015fa1e206c26d2341e41a5f35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:bd:15:06:d6:ba:5d:d8:0c:94:30:26:14:
b1:92:53:ad:56:9d:75:1b:2b:c0:79:ca:3e:e6:fe:
98:7b:be:0a:bf:a6:3d:f3:a2:12:23:40:e3:31:19:
86:2f:7d:59:ab:37:43:02:6d:de:6e:7c:d2:31:31:
ce:76:6e:b5:47:8c:6b:2a:70:e3:b9:8d:b3:43:31:
dd:63:e2:65:4b:33:19:fc:c8:29:c9:0d:fb:20:ce:
02:40:eb:17:4b:72:89:a3:ff:7c:4a:4f:0a:b6:7c:
9b:cd:e5:32:f3:6f:59:c6:94:a4:94:21:9c:f2:25:
18:bb:9f:73:3b:b6:b3:58:20:7e:19:30:62:00:e3:
37:91:0a:a2:05:7b:54:a2:1a:01:80:9c:fa:1c:41:
64:f4:f9:23:1e:f4:40:71:db:e6:95:64:12:82:83:
d0:3b:79:76:1c:6c:56:ad:19:4e:04:7f:52:a3:c8:
91:bd:48:23:d1:3e:2e:1e:7f:f9:d3:a3:cd:e0:78:
85:2c:46:a4:e5:6e:b0:88:a3:0c:a7:50:ec:b4:ab:
1a:da:52:12:fa:5b:39:20:e3:16:31:db:84:0b:fe:
56:6e:a3:1c:e8:c8:eb:5f:99:6f:dc:35:40:ed:a6:
09:6f:a7:54:0d:e2:f6:30:d8:4a:4d:f1:3f:af:5e:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B0:0D:DF:9C:1B:C0:15:FA:1E:20:6C:26:D2:34:1E:41:A5:F3:5B
X509v3 Authority Key Identifier:
keyid:6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c0:4c:5e:b8:5a:fb:e9:c5:9b:a2:31:f2:45:ac:e2:64:60:
c1:1f:d4:e1:85:fb:c7:52:1c:e0:79:de:53:23:c9:f1:44:f0:
96:dd:1b:ed:1d:07:b8:8c:0c:ba:eb:e1:af:46:5a:10:af:a9:
6f:60:07:c5:9c:21:6a:30:b0:24:4c:6a:5b:2d:56:8f:61:df:
2a:b4:0a:4a:7c:a9:de:68:e9:2f:40:18:f9:08:c2:18:72:19:
58:a8:38:99:56:42:60:f8:06:fe:86:61:e3:4e:37:b1:b5:a8:
bb:c5:16:61:d2:9f:b9:b9:f9:68:f8:62:d8:76:b8:3f:f4:c7:
cb:91:89:a3:cb:c9:97:94:26:dc:83:10:20:32:51:e7:cf:5d:
a3:2a:14:4c:93:cf:b5:fe:16:64:59:05:b1:57:96:69:bf:15:
b0:0e:8f:3c:25:9b:08:69:64:11:e2:60:f7:3f:b9:5c:0b:e2:
ad:1c:8d:ec:6e:70:9f:ad:87:d2:99:69:ef:b8:b1:e7:73:64:
a0:ea:06:38:51:5d:40:dc:f3:97:8e:b6:57:d7:36:25:14:d7:
57:5b:24:8c:ee:21:9d:3a:45:b2:cc:52:45:0d:59:b7:00:72:
e4:89:d8:76:57:98:d7:02:5e:30:65:85:93:27:48:40:aa:c8:
18:c8:21:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTe3uKI31cLDuaPvGP8leSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNjA0MTI4MjNhMDIyNGE1ZDAwZTQ5NjNkNmIyM2QyMjUw
NDk5N2QwHhcNMjUwNzI5MDAwMDU4WhcNMjUwNzMwMDAwMDU4WjAzMTEwLwYDVQQD
Eyg5M2IwMGRkZjljMWJjMDE1ZmExZTIwNmMyNmQyMzQxZTQxYTVmMzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrC9FQbWul3YDJQwJhSxklOtVp11
GyvAeco+5v6Ye74Kv6Y986ISI0DjMRmGL31ZqzdDAm3ebnzSMTHOdm61R4xrKnDj
uY2zQzHdY+JlSzMZ/MgpyQ37IM4CQOsXS3KJo/98Sk8KtnybzeUy829ZxpSklCGc
8iUYu59zO7azWCB+GTBiAOM3kQqiBXtUohoBgJz6HEFk9PkjHvRAcdvmlWQSgoPQ
O3l2HGxWrRlOBH9So8iRvUgj0T4uHn/506PN4HiFLEak5W6wiKMMp1DstKsa2lIS
+ls5IOMWMduEC/5WbqMc6MjrX5lv3DVA7aYJb6dUDeL2MNhKTfE/r17EjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOwDd+cG8AV+h4gbCbSNB5BpfNbMB8GA1UdIwQY
MBaAFGtgQSgjoCJKXQDklj1rI9IlBJl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJCQktDT2dJa3BkQU9TV1BXc2owaVVFbVgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yNzVhNzQtYjNlZi00NGNmLTgyMjAt
NmEzMzQyYjk1YWYxLzEvYTJCQktDT2dJa3BkQU9TV1BXc2owaVVFbVgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yNzVhNzQtYjNlZi00NGNmLTgyMjAtNmEzMzQyYjk1YWYx
LzEvYTJCQktDT2dJa3BkQU9TV1BXc2owaVVFbVgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMBMXrha
++nFm6Ix8kWs4mRgwR/U4YX7x1Ic4HneUyPJ8UTwlt0b7R0HuIwMuuvhr0ZaEK+p
b2AHxZwhajCwJExqWy1Wj2HfKrQKSnyp3mjpL0AY+QjCGHIZWKg4mVZCYPgG/oZh
4043sbWou8UWYdKfubn5aPhi2Ha4P/THy5GJo8vJl5Qm3IMQIDJR589doyoUTJPP
tf4WZFkFsVeWab8VsA6PPCWbCGlkEeJg9z+5XAvirRyN7G5wn62H0plp77ix53Nk
oOoGOFFdQNzzl462V9c2JRTXV1skjO4hnTpFssxSRQ1ZtwBy5InYdleY1wJeMGWF
kydIQKrIGMghqg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:32 2025 by rpki-client