Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
File: b_sPm9w6L65HtH5wIYmTyRnxD7A.mft (raw, json)
Hash identifier: j55YLZZucuVgCVtPST37NO9g/spHI7WR0Ec1qGz2prI=
Subject key identifier: 87:98:65:6B:2B:85:BB:A3:A9:D8:6F:B2:4C:E3:FA:E1:6A:FA:C5:39
Authority key identifier: 6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
Certificate issuer: /CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Certificate serial: 019846643F1F6140CF29B0949B0C5A992D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 11:00:31 +0000
Manifest this update: Sat 26 Jul 2025 11:00:31 +0000
Manifest next update: Sun 27 Jul 2025 11:00:31 +0000
Files and hashes: 1: b_sPm9w6L65HtH5wIYmTyRnxD7A.crl (hash: GRmiXIZnljxypV7hzpPLWZuNw/TZYknjKJjk/fQ7EQ4=)
2: wKMrC-xvOnFI7StFVvvRQEu7XxA.roa (hash: PBE7WQbLaJ84O/pVhEjH0Fx39vOaxblOyGFRqpjhYW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:3f:1f:61:40:cf:29:b0:94:9b:0c:5a:99:2d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Validity
Not Before: Jul 26 11:00:31 2025 GMT
Not After : Jul 27 11:00:31 2025 GMT
Subject: CN=8798656b2b85bba3a9d86fb24ce3fae16afac539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:fe:21:d2:c5:4f:01:7f:87:d0:29:dd:c7:
88:ed:62:97:a2:ba:e7:85:ba:4a:a3:1d:0d:52:44:
2a:65:2f:37:65:60:96:2d:de:27:ed:af:69:ac:20:
1d:d4:13:02:23:2e:3c:dd:d9:ce:e0:76:07:86:02:
cd:59:10:9c:aa:8f:f2:60:f6:c8:d1:c2:c5:16:86:
1e:eb:ff:c4:6e:91:b1:00:f0:3a:fe:c1:54:73:cc:
b5:96:f3:6a:8e:2b:79:68:68:da:61:e2:5a:b2:19:
60:bd:6f:35:ae:0d:9d:88:cd:d7:93:ec:fe:ad:2c:
65:93:b8:ae:de:f7:6a:58:f8:1c:1e:24:28:92:2d:
f2:da:17:4a:e0:2f:c8:14:00:7e:28:cd:a6:48:25:
26:91:22:ee:2b:e4:6d:ca:f8:f5:6e:b4:e7:3f:bd:
49:d5:8b:75:ed:d2:26:fe:1d:07:36:0f:cb:be:83:
76:00:6c:8b:72:fa:2d:a5:4d:f0:3c:0a:ed:b1:7b:
1c:34:91:f1:7f:26:53:cf:02:fd:66:1b:e1:10:95:
e3:54:3b:eb:4c:9d:2f:dc:4d:d5:9c:b0:b9:cb:2c:
f1:8c:af:85:d2:4c:12:f7:29:c0:64:42:b4:e1:ae:
9e:c8:16:ef:cc:bd:18:57:1b:c5:4f:5d:c1:63:52:
64:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:98:65:6B:2B:85:BB:A3:A9:D8:6F:B2:4C:E3:FA:E1:6A:FA:C5:39
X509v3 Authority Key Identifier:
keyid:6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ab:7c:74:29:7a:13:9b:bb:61:cd:bd:42:49:54:a4:3d:cd:
0f:42:3e:bb:9e:eb:0e:3e:22:5e:09:33:36:ff:23:83:5b:81:
88:9d:40:b8:45:bd:bd:14:44:4d:44:25:88:59:7a:e1:f5:f4:
93:e8:e1:35:e7:ca:f6:a0:a2:d7:56:f6:56:23:0d:8a:4d:1e:
86:f7:94:0f:81:38:30:2a:62:b5:35:a3:09:7b:49:2f:c3:29:
0a:84:d4:f3:d2:30:a9:d7:22:0e:4a:86:c5:4c:f6:bc:a3:1b:
80:ce:e1:d0:2a:97:7b:c4:42:67:8a:68:9b:17:dd:58:ee:62:
56:22:c7:c0:09:e1:b9:70:be:16:14:2c:2f:d3:03:29:35:3c:
6a:93:0e:a1:4f:60:d9:18:5b:d6:af:06:62:26:1d:c5:f6:d8:
47:b2:ce:e1:c5:fe:85:2a:cc:5c:d5:f1:cb:7f:22:02:8b:86:
8f:3a:a6:90:8b:fc:df:75:0d:df:12:6a:e7:5f:c7:f1:e1:f7:
fc:1f:66:f7:70:69:4e:8f:36:6b:40:04:a4:83:34:92:43:d7:
e3:24:8f:ee:bc:d1:f0:27:6f:f5:a4:31:da:ab:24:91:ad:1b:
37:82:dd:3a:53:8e:c0:ec:7b:d7:15:cb:b6:ab:3c:92:3f:4f:
03:e1:cc:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGZD8fYUDPKbCUmwxamS1jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZmIwZjliZGMzYTJmYWU0N2I0N2U3MDIxODk5M2M5MTlm
MTBmYjAwHhcNMjUwNzI2MTEwMDMxWhcNMjUwNzI3MTEwMDMxWjAzMTEwLwYDVQQD
Eyg4Nzk4NjU2YjJiODViYmEzYTlkODZmYjI0Y2UzZmFlMTZhZmFjNTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWn+IdLFTwF/h9Ap3ceI7WKXorrn
hbpKox0NUkQqZS83ZWCWLd4n7a9prCAd1BMCIy483dnO4HYHhgLNWRCcqo/yYPbI
0cLFFoYe6//EbpGxAPA6/sFUc8y1lvNqjit5aGjaYeJashlgvW81rg2diM3Xk+z+
rSxlk7iu3vdqWPgcHiQoki3y2hdK4C/IFAB+KM2mSCUmkSLuK+Rtyvj1brTnP71J
1Yt17dIm/h0HNg/LvoN2AGyLcvotpU3wPArtsXscNJHxfyZTzwL9ZhvhEJXjVDvr
TJ0v3E3VnLC5yyzxjK+F0kwS9ynAZEK04a6eyBbvzL0YVxvFT13BY1JkiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeYZWsrhbujqdhvskzj+uFq+sU5MB8GA1UdIwQY
MBaAFG/7D5vcOi+uR7R+cCGJk8kZ8Q+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl9zUG05dzZMNjVIdEg1d0lZbVR5Um54RDdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84NGFjZGYtYmE4NS00YTgxLWEzMDYt
ZjlhYjNiMDUyMzQ5LzEvYl9zUG05dzZMNjVIdEg1d0lZbVR5Um54RDdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi84NGFjZGYtYmE4NS00YTgxLWEzMDYtZjlhYjNiMDUyMzQ5
LzEvYl9zUG05dzZMNjVIdEg1d0lZbVR5Um54RDdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6t8dCl6
E5u7Yc29QklUpD3ND0I+u57rDj4iXgkzNv8jg1uBiJ1AuEW9vRRETUQliFl64fX0
k+jhNefK9qCi11b2ViMNik0ehveUD4E4MCpitTWjCXtJL8MpCoTU89IwqdciDkqG
xUz2vKMbgM7h0CqXe8RCZ4pomxfdWO5iViLHwAnhuXC+FhQsL9MDKTU8apMOoU9g
2Rhb1q8GYiYdxfbYR7LO4cX+hSrMXNXxy38iAouGjzqmkIv833UN3xJq51/H8eH3
/B9m93BpTo82a0AEpIM0kkPX4ySP7rzR8Cdv9aQx2qskka0bN4LdOlOOwOx71xXL
tqs8kj9PA+HMUg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:08:35 2025 by rpki-client