Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File: BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier: PqV5hArwT75YHuadXRO2f1UHDxi8Bia9PQTNvJVuw9E=
Subject key identifier: 90:59:7E:72:58:F0:0B:49:59:86:44:AE:8C:72:9C:D8:00:8D:DD:B3
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 01984AAEC44A76A1EAB0449B6DB7AA35EA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 07:00:24 +0000
Manifest this update: Sun 27 Jul 2025 07:00:24 +0000
Manifest next update: Mon 28 Jul 2025 07:00:24 +0000
Files and hashes: 1: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: 1KIyRL/rMchK17rLqwB/Fla+V1QMltSrF7so/sMPWkU=)
2: CZQw40ubgHVu1Jof03ClaqRzNO0.roa (hash: ryau3A+d+gfpE7i1EIyrHi9oMGq0/6OLOcTA/JPeZzo=)
3: MR_mra2KXDxOhSmirjUVkdnLe2A.roa (hash: XKtS3itRVqfOpu81ikpDBZ+IyS8k+qng+AJNKrqJmHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:c4:4a:76:a1:ea:b0:44:9b:6d:b7:aa:35:ea:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: Jul 27 07:00:24 2025 GMT
Not After : Jul 28 07:00:24 2025 GMT
Subject: CN=90597e7258f00b49598644ae8c729cd8008dddb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:3c:0d:9e:d1:b4:9f:86:d9:91:0b:79:c7:
c5:f4:82:dc:8c:f6:42:19:4f:57:f9:c3:49:80:c0:
06:25:85:01:1c:ee:2d:72:d6:ff:2a:60:6f:d0:bc:
36:6e:76:6a:f7:a4:7a:07:4a:48:25:fe:87:c9:ae:
2b:ae:25:21:44:2f:fa:bc:d7:c5:40:67:cd:e7:2d:
e2:0f:e0:66:fa:65:f8:0c:15:84:85:21:a8:e8:29:
a1:72:75:2b:08:2c:6a:81:fa:45:15:2b:ed:95:63:
3d:4a:01:c3:b4:eb:39:97:fe:41:29:55:64:39:52:
e1:da:c4:ac:57:fc:2a:e7:c5:e2:bf:78:11:04:ca:
d8:c1:75:1e:4f:7f:26:43:63:17:63:0e:34:6b:b7:
f4:45:61:07:c8:dc:f1:52:80:66:70:dd:f0:54:b7:
62:39:a8:bc:7e:47:8b:6c:70:26:02:0f:66:3e:9c:
03:e1:8d:4b:9b:69:56:d8:f6:82:82:f2:49:d4:e0:
35:21:59:91:88:4d:e4:d1:ea:b8:f5:8e:e2:b6:49:
7f:67:8f:da:e6:cb:a3:4a:27:5d:3f:20:50:27:f5:
23:7e:ec:88:01:03:3c:90:0c:0a:b4:d2:85:71:b8:
99:f9:e0:c7:63:40:5d:19:3b:14:e9:91:b6:81:9e:
91:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:59:7E:72:58:F0:0B:49:59:86:44:AE:8C:72:9C:D8:00:8D:DD:B3
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:83:36:a2:19:08:1b:f3:d4:c7:31:e1:27:61:69:94:5e:85:
04:74:bf:b8:31:dc:f4:89:a4:7e:f6:31:60:90:51:64:36:5c:
12:05:6c:e3:5e:22:75:36:d9:6a:87:07:8c:f4:e5:cb:3a:d6:
0a:a1:24:04:79:51:7b:7e:22:e5:15:9e:b3:83:cf:12:10:d8:
50:6b:3d:d7:38:c2:e0:16:74:e7:4f:97:b6:ea:94:9f:ce:7b:
c5:ea:9c:79:96:69:22:9d:9d:88:fd:2a:c3:b7:98:d8:76:63:
6d:24:e1:45:aa:e2:69:32:7f:aa:b5:9b:c6:5d:d5:28:a4:a7:
c2:ef:24:b8:f4:1d:6c:02:f5:ce:6f:25:87:cc:c3:03:13:36:
df:32:f1:bc:b4:63:14:1b:e2:fe:7c:89:a8:65:91:69:39:8a:
d5:fa:25:d5:3b:72:0c:0d:9a:8d:67:96:dd:25:94:c8:8e:ac:
d5:31:8a:1d:36:d9:e7:94:9d:a7:26:30:c2:26:f6:f8:4b:ea:
44:16:07:5a:bd:ca:a1:94:92:46:75:8a:56:92:11:94:d9:d8:
e2:39:36:12:5f:40:c7:94:8a:37:b3:64:b1:cc:a3:6a:35:a6:
52:20:77:05:d1:bc:64:73:34:19:be:57:3b:74:67:77:20:29:
ab:b0:d6:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrsRKdqHqsESbbbeqNeqMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MGRkM2QzYzUyZDRjNmZhNTFiN2E4MzM1NzhjZWZiM2Fi
MjY2NDkwHhcNMjUwNzI3MDcwMDI0WhcNMjUwNzI4MDcwMDI0WjAzMTEwLwYDVQQD
Eyg5MDU5N2U3MjU4ZjAwYjQ5NTk4NjQ0YWU4YzcyOWNkODAwOGRkZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3U8DZ7RtJ+G2ZELecfF9ILcjPZC
GU9X+cNJgMAGJYUBHO4tctb/KmBv0Lw2bnZq96R6B0pIJf6Hya4rriUhRC/6vNfF
QGfN5y3iD+Bm+mX4DBWEhSGo6CmhcnUrCCxqgfpFFSvtlWM9SgHDtOs5l/5BKVVk
OVLh2sSsV/wq58Xiv3gRBMrYwXUeT38mQ2MXYw40a7f0RWEHyNzxUoBmcN3wVLdi
Oai8fkeLbHAmAg9mPpwD4Y1Lm2lW2PaCgvJJ1OA1IVmRiE3k0eq49Y7itkl/Z4/a
5sujSiddPyBQJ/UjfuyIAQM8kAwKtNKFcbiZ+eDHY0BdGTsU6ZG2gZ6REwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBZfnJY8AtJWYZEroxynNgAjd2zMB8GA1UdIwQY
MBaAFAQN09PFLUxvpRt6gzV4zvs6smZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkEzVDA4VXRURy1sRzNxRE5Yak8tenF5WmtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mZmMzNDktZjMyNi00MDk2LWJjYjMt
YzJjMmFjYjkwOGJjLzEvQkEzVDA4VXRURy1sRzNxRE5Yak8tenF5WmtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mZmMzNDktZjMyNi00MDk2LWJjYjMtYzJjMmFjYjkwOGJj
LzEvQkEzVDA4VXRURy1sRzNxRE5Yak8tenF5WmtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIM2ohkI
G/PUxzHhJ2FplF6FBHS/uDHc9ImkfvYxYJBRZDZcEgVs414idTbZaocHjPTlyzrW
CqEkBHlRe34i5RWes4PPEhDYUGs91zjC4BZ050+XtuqUn857xeqceZZpIp2diP0q
w7eY2HZjbSThRariaTJ/qrWbxl3VKKSnwu8kuPQdbAL1zm8lh8zDAxM23zLxvLRj
FBvi/nyJqGWRaTmK1fol1TtyDA2ajWeW3SWUyI6s1TGKHTbZ55SdpyYwwib2+Evq
RBYHWr3KoZSSRnWKVpIRlNnY4jk2El9Ax5SKN7NkscyjajWmUiB3BdG8ZHM0Gb5X
O3RndyApq7DW8g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:43 2025 by rpki-client