Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
File: b2oouFuReYIHK59PQG1-sJmROjE.mft (raw, json)
Hash identifier: f6Jcj/mAfa4IEaLGUSmnWckODPgd5f8G+MfxyrqXCBo=
Subject key identifier: 13:8B:E1:8F:5C:17:5E:0D:ED:E4:B3:67:90:4F:50:C5:68:E1:C8:5C
Authority key identifier: 6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31
Certificate issuer: /CN=6f6a28b85b917982072b9f4f406d7eb099913a31
Certificate serial: 019849D38F4BF471489436E01B16A6DB3CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
Manifest number: 0632
Signing time: Sun 27 Jul 2025 03:00:58 +0000
Manifest this update: Sun 27 Jul 2025 03:00:58 +0000
Manifest next update: Mon 28 Jul 2025 03:00:58 +0000
Files and hashes: 1: ZwdlOhTaB9mfI0Lixy338yhL9bw.roa (hash: JhlKbHsGhRiWUq0ABUz1j/K5IY2i4ZC4XvyEDFpDUMk=)
2: b2oouFuReYIHK59PQG1-sJmROjE.crl (hash: vE/c7NVBYJ0mwLmqEFjXkvUkfWN4+riKwt9ikaxhnpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:8f:4b:f4:71:48:94:36:e0:1b:16:a6:db:3c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6a28b85b917982072b9f4f406d7eb099913a31
Validity
Not Before: Jul 27 03:00:58 2025 GMT
Not After : Jul 28 03:00:58 2025 GMT
Subject: CN=138be18f5c175e0dede4b367904f50c568e1c85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:e5:1a:5e:dd:b0:03:08:df:01:0e:85:fa:
de:cc:02:97:a7:98:11:81:c0:69:0a:a4:1d:dc:77:
80:c8:1d:e1:00:88:90:3b:ef:ae:3a:9d:c9:61:b7:
5a:27:ce:bd:2a:56:79:98:8e:02:c9:5b:b6:41:38:
b2:69:95:c2:65:7a:d6:10:37:da:d2:cf:80:4d:ce:
a1:0d:c3:6d:bb:d6:18:a5:14:77:33:01:5e:f0:69:
15:59:4a:ce:2d:24:83:e8:03:8e:08:8a:41:50:a8:
d6:18:81:57:02:eb:8f:90:59:62:f8:c7:c5:0d:2a:
67:f4:15:af:3d:30:b3:ba:88:5f:56:97:76:5b:70:
22:8b:b1:c4:76:ee:c8:e9:66:b8:68:a7:83:4e:03:
da:35:df:27:c4:07:b5:5c:18:78:f5:74:3d:83:b6:
89:da:70:22:eb:91:b1:ae:00:bd:c8:f6:65:80:53:
42:9d:7d:1d:62:64:1a:43:8c:73:9b:96:8e:83:70:
51:bf:dd:d1:2e:35:79:a5:a9:7c:d8:cf:a7:4e:7a:
16:f0:7c:9f:13:37:0a:b6:ab:9b:fe:27:68:c5:9f:
41:db:d8:00:b7:60:62:b7:39:b7:03:29:56:32:c6:
bb:b0:aa:4b:62:1a:34:29:5a:e7:29:51:85:c3:c1:
60:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8B:E1:8F:5C:17:5E:0D:ED:E4:B3:67:90:4F:50:C5:68:E1:C8:5C
X509v3 Authority Key Identifier:
keyid:6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:74:2f:21:63:d2:8e:ef:1d:5a:6a:6d:56:c8:35:70:79:92:
40:39:89:80:59:83:7a:5c:c1:bd:54:06:9a:e0:8d:78:88:19:
bf:15:1a:65:a4:61:c4:74:07:e5:c1:70:90:82:34:2f:c6:86:
3e:de:0f:04:b5:df:b7:b9:4c:6c:b9:10:59:df:27:21:b6:5a:
82:02:d7:e9:3b:02:75:e8:66:86:d7:cd:bf:11:53:6e:90:b9:
f9:83:df:51:c0:84:58:a9:61:03:7f:36:76:77:3f:10:f7:d6:
6d:b6:27:d0:9c:d9:46:1c:f9:0f:e0:1b:d5:3c:a0:55:b6:15:
f6:98:0e:3a:8e:ed:1b:b1:e3:91:06:98:b9:51:99:a2:df:23:
bc:c6:e2:c6:01:2e:62:59:65:b0:55:7c:44:41:f6:04:5c:1c:
9f:82:7e:21:01:b1:e4:a4:c1:3b:a2:aa:9e:50:39:2a:04:63:
75:da:3d:38:7e:b7:8c:61:52:48:c0:5c:f0:66:65:e9:6f:27:
af:c9:a4:ed:f2:d2:3c:b4:84:b1:ea:ba:5d:f1:67:38:9b:0e:
89:29:b6:fa:66:5d:c1:1e:36:28:11:b1:6d:dd:ff:ec:5c:75:
a1:66:05:b4:26:b9:8c:9e:78:ae:7c:9b:a2:d0:d8:3c:a2:f1:
bb:00:91:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ049L9HFIlDbgGxam2zysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNmEyOGI4NWI5MTc5ODIwNzJiOWY0ZjQwNmQ3ZWIwOTk5
MTNhMzEwHhcNMjUwNzI3MDMwMDU4WhcNMjUwNzI4MDMwMDU4WjAzMTEwLwYDVQQD
EygxMzhiZTE4ZjVjMTc1ZTBkZWRlNGIzNjc5MDRmNTBjNTY4ZTFjODVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpblGl7dsAMI3wEOhfrezAKXp5gR
gcBpCqQd3HeAyB3hAIiQO++uOp3JYbdaJ869KlZ5mI4CyVu2QTiyaZXCZXrWEDfa
0s+ATc6hDcNtu9YYpRR3MwFe8GkVWUrOLSSD6AOOCIpBUKjWGIFXAuuPkFli+MfF
DSpn9BWvPTCzuohfVpd2W3Aii7HEdu7I6Wa4aKeDTgPaNd8nxAe1XBh49XQ9g7aJ
2nAi65GxrgC9yPZlgFNCnX0dYmQaQ4xzm5aOg3BRv93RLjV5pal82M+nTnoW8Hyf
EzcKtqub/idoxZ9B29gAt2Bitzm3AylWMsa7sKpLYho0KVrnKVGFw8Fg+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOL4Y9cF14N7eSzZ5BPUMVo4chcMB8GA1UdIwQY
MBaAFG9qKLhbkXmCByufT0BtfrCZkToxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjJvb3VGdVJlWUlISzU5UFFHMS1zSm1ST2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81MjU1NGMtMzg5ZC00YWVhLWEwMGMt
NzQxZDA4OThkYTRlLzEvYjJvb3VGdVJlWUlISzU5UFFHMS1zSm1ST2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC81MjU1NGMtMzg5ZC00YWVhLWEwMGMtNzQxZDA4OThkYTRl
LzEvYjJvb3VGdVJlWUlISzU5UFFHMS1zSm1ST2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXQvIWPS
ju8dWmptVsg1cHmSQDmJgFmDelzBvVQGmuCNeIgZvxUaZaRhxHQH5cFwkII0L8aG
Pt4PBLXft7lMbLkQWd8nIbZaggLX6TsCdehmhtfNvxFTbpC5+YPfUcCEWKlhA382
dnc/EPfWbbYn0JzZRhz5D+Ab1TygVbYV9pgOOo7tG7HjkQaYuVGZot8jvMbixgEu
YlllsFV8REH2BFwcn4J+IQGx5KTBO6KqnlA5KgRjddo9OH63jGFSSMBc8GZl6W8n
r8mk7fLSPLSEseq6XfFnOJsOiSm2+mZdwR42KBGxbd3/7Fx1oWYFtCa5jJ54rnyb
otDYPKLxuwCRzg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:46:11 2025 by rpki-client