Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
File: b13p-du9RhiFe1gQXGdDcgoRvG4.mft (raw, json)
Hash identifier: iZDnoyHVhtFgUgq+snG3rRruM1jvXIkiwLcbuU5M2Ik=
Subject key identifier: EE:DE:29:7E:FB:D9:13:8E:76:C2:93:8A:FD:95:61:8B:DF:68:14:A6
Authority key identifier: 6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
Certificate issuer: /CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Certificate serial: 0198537B24D09CBB6E536B3AD47AD7F2AFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 00:00:35 +0000
Manifest this update: Tue 29 Jul 2025 00:00:35 +0000
Manifest next update: Wed 30 Jul 2025 00:00:35 +0000
Files and hashes: 1: 8DoxxFomKD_zymJ7maQao4Dgi38.roa (hash: AGu4l/EpDaIWVAApJov5+PsDhMXLA5NiuSkK6swCSP4=)
2: GgF2VUQVgZHdiRVSGdZfQ62lDlI.roa (hash: pE2Dj5yrvDRhlXyXHQIl24tLKcXekRo8xAVslPDVPZ0=)
3: b13p-du9RhiFe1gQXGdDcgoRvG4.crl (hash: 3FoSQRJ/hDXs7HxMpl+1NZUGq9JQmHvwJxkBap/+Hq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:24:d0:9c:bb:6e:53:6b:3a:d4:7a:d7:f2:af:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Validity
Not Before: Jul 29 00:00:35 2025 GMT
Not After : Jul 30 00:00:35 2025 GMT
Subject: CN=eede297efbd9138e76c2938afd95618bdf6814a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:a7:96:bd:88:af:de:07:ff:da:a1:db:1a:
1b:66:1b:81:e5:6a:ff:ac:3f:f3:7c:46:6a:ab:41:
fd:c1:ee:a4:15:32:46:eb:ae:f2:d7:e2:ef:3e:e7:
ab:a1:6e:42:8a:d3:77:3b:d5:a3:3f:c8:79:07:89:
cf:6d:dd:2f:de:01:c1:d1:5f:77:b2:28:d0:3e:3a:
2c:b0:2f:5b:9f:86:21:b5:5e:37:09:fc:77:3d:92:
81:bb:33:fd:67:a1:65:9d:1c:91:24:44:d0:72:63:
be:86:5f:e6:66:ad:58:21:a3:f4:0d:74:3c:df:d4:
a5:29:1b:e5:8b:02:2d:a2:91:fb:90:66:c1:c9:84:
61:3f:ac:33:2f:d2:03:59:ee:a3:1a:05:c8:01:bf:
58:d3:a1:fb:6a:24:87:74:42:6e:f5:8e:e4:45:53:
4b:b3:f3:42:d4:4c:66:bf:59:39:fc:ed:ba:02:b3:
de:d0:3c:fd:10:fa:4a:3c:09:04:53:2e:65:cc:f6:
81:b3:cc:61:b5:b5:7c:76:ac:63:11:32:ef:a1:29:
ed:7f:a0:79:3c:d3:70:c2:ec:5c:8e:76:f1:b0:00:
be:34:0a:f6:da:c7:51:36:ef:20:bb:56:28:ac:de:
5e:46:e1:a7:90:a6:4e:81:87:3e:5a:22:15:28:28:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DE:29:7E:FB:D9:13:8E:76:C2:93:8A:FD:95:61:8B:DF:68:14:A6
X509v3 Authority Key Identifier:
keyid:6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:88:b5:60:d7:3f:ea:e5:9f:03:12:3d:34:b3:d9:8e:fe:aa:
c5:65:37:38:15:8a:46:6b:50:36:a9:26:d0:62:6c:fb:d4:84:
1b:3a:4f:01:94:49:22:bf:0e:6b:33:8a:b1:93:e4:d7:ef:fd:
ad:28:49:cc:cd:a2:b5:dc:ce:2d:6c:45:72:82:44:58:e3:67:
57:6c:17:d6:1d:4c:4b:90:67:a6:0e:94:38:d4:d8:11:bb:cd:
81:84:d0:38:9a:aa:ce:a2:85:ec:1d:8a:7c:f6:35:a7:ae:69:
67:72:3b:44:f9:b5:0a:fb:40:10:2a:1a:2c:d5:18:73:3d:2d:
ed:23:64:2d:f8:e3:d6:3d:64:2a:d0:40:26:e9:88:73:76:df:
1d:25:d4:eb:a0:db:4d:60:a9:94:bf:ea:48:50:2b:0f:46:d7:
85:dc:5d:16:ec:a4:0f:99:39:56:fd:c0:48:bf:72:3d:54:d7:
7f:dc:3e:d5:20:2e:eb:20:7d:6a:c2:d6:01:49:40:04:65:57:
26:e3:0e:c0:74:f5:aa:91:17:c5:c4:2b:07:20:49:cc:53:bc:
aa:c7:c8:39:a6:d9:a0:20:16:ce:36:5f:09:41:f4:b0:3f:90:
db:02:5c:64:63:e7:c8:1a:e5:12:bc:7b:10:96:3c:24:e8:b3:
38:d3:33:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTeyTQnLtuU2s61HrX8q+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWRlOWY5ZGJiZDQ2MTg4NTdiNTgxMDVjNjc0MzcyMGEx
MWJjNmUwHhcNMjUwNzI5MDAwMDM1WhcNMjUwNzMwMDAwMDM1WjAzMTEwLwYDVQQD
EyhlZWRlMjk3ZWZiZDkxMzhlNzZjMjkzOGFmZDk1NjE4YmRmNjgxNGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsOnlr2Ir94H/9qh2xobZhuB5Wr/
rD/zfEZqq0H9we6kFTJG667y1+LvPueroW5CitN3O9WjP8h5B4nPbd0v3gHB0V93
sijQPjossC9bn4YhtV43Cfx3PZKBuzP9Z6FlnRyRJETQcmO+hl/mZq1YIaP0DXQ8
39SlKRvliwItopH7kGbByYRhP6wzL9IDWe6jGgXIAb9Y06H7aiSHdEJu9Y7kRVNL
s/NC1Exmv1k5/O26ArPe0Dz9EPpKPAkEUy5lzPaBs8xhtbV8dqxjETLvoSntf6B5
PNNwwuxcjnbxsAC+NAr22sdRNu8gu1YorN5eRuGnkKZOgYc+WiIVKCg0vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7eKX772ROOdsKTiv2VYYvfaBSmMB8GA1UdIwQY
MBaAFG9d6fnbvUYYhXtYEFxnQ3IKEbxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjEzcC1kdTlSaGlGZTFnUVhHZERjZ29Sdkc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82MWZjYjQtNTU3NC00ZTJlLWIyNTkt
YWUwNTc5NGM4ZTEzLzEvYjEzcC1kdTlSaGlGZTFnUVhHZERjZ29Sdkc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC82MWZjYjQtNTU3NC00ZTJlLWIyNTktYWUwNTc5NGM4ZTEz
LzEvYjEzcC1kdTlSaGlGZTFnUVhHZERjZ29Sdkc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoi1YNc/
6uWfAxI9NLPZjv6qxWU3OBWKRmtQNqkm0GJs+9SEGzpPAZRJIr8OazOKsZPk1+/9
rShJzM2itdzOLWxFcoJEWONnV2wX1h1MS5Bnpg6UONTYEbvNgYTQOJqqzqKF7B2K
fPY1p65pZ3I7RPm1CvtAECoaLNUYcz0t7SNkLfjj1j1kKtBAJumIc3bfHSXU66Db
TWCplL/qSFArD0bXhdxdFuykD5k5Vv3ASL9yPVTXf9w+1SAu6yB9asLWAUlABGVX
JuMOwHT1qpEXxcQrByBJzFO8qsfIOabZoCAWzjZfCUH0sD+Q2wJcZGPnyBrlErx7
EJY8JOizONMzXw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:02:58 2025 by rpki-client