Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
File: bd2PHjjJH1sXw9GnI05JyccNwyQ.mft (raw, json)
Hash identifier: Tpz9Mfr/MBSRJPE8sGjFn8en/nLpWQykZYWG0RcXjts=
Subject key identifier: 62:88:90:44:8A:EC:79:45:38:C0:DD:F3:CB:04:F1:CD:F6:88:89:7E
Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
Certificate issuer: /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Certificate serial: 01984777332A0DB19FDC470AA77B5690077E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 16:00:50 +0000
Manifest this update: Sat 26 Jul 2025 16:00:50 +0000
Manifest next update: Sun 27 Jul 2025 16:00:50 +0000
Files and hashes: 1: BKts92Cgp762t7JNofBM7L5uftM.roa (hash: WTNLkBIvgvxJFEXIWZr47BOElViaMRJym9HooD5Dr3Q=)
2: bd2PHjjJH1sXw9GnI05JyccNwyQ.crl (hash: AtUcS8ylWP950SN5/RR5wYpR69pcR+M/ddRCvfc6Ci4=)
3: jypSqMvt2NprsB0DoEFG-cYXk3g.roa (hash: 20GE86V+BpBjF8cWsWZrxYRlzb0k0GNnTKWyu1nZsto=)
4: z53iYrx_shu0WdCaV4v6ZXfJyfA.roa (hash: ySckjx3fnBbjiCnJf7c10h+wH/jcKQr5e8Rmhk0EXE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:33:2a:0d:b1:9f:dc:47:0a:a7:7b:56:90:07:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Validity
Not Before: Jul 26 16:00:50 2025 GMT
Not After : Jul 27 16:00:50 2025 GMT
Subject: CN=628890448aec794538c0ddf3cb04f1cdf688897e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:84:27:68:a9:5f:f4:45:cb:df:7a:63:03:cd:
5a:4e:95:7e:81:cd:5a:05:8e:d9:52:b1:41:8e:f1:
ba:21:3e:9b:08:a3:13:00:5f:77:9b:11:54:4c:4a:
c2:53:3d:5c:6c:e5:86:f2:df:78:cb:83:4b:f1:31:
08:a5:33:c5:c6:12:bc:66:82:36:0b:bb:7b:e2:06:
b6:a4:ae:fe:d4:6d:5c:c9:a8:ce:83:f4:57:41:94:
3d:85:ad:59:1f:e4:63:f9:ca:cf:f6:08:d8:e3:ce:
2e:dc:3e:4c:c8:a0:00:0d:c4:04:33:7c:c5:02:5b:
dd:9a:61:9d:a5:c5:f5:39:4f:27:32:8b:da:c4:7c:
e5:25:8e:e1:d8:d0:bb:ea:3b:b5:b1:f3:e6:aa:12:
15:46:b1:78:95:4f:ba:a6:29:3a:8d:c0:4b:d3:39:
12:57:c5:e7:6b:69:53:6f:17:a8:01:dd:25:dd:a6:
f9:35:8e:cf:b5:d0:88:09:13:77:66:7f:dd:4c:5c:
02:7a:52:5e:b1:1e:9f:2e:42:0c:68:0a:c9:55:e4:
5b:2a:98:fb:1c:78:4d:0e:ab:90:59:8c:82:8d:b5:
6e:88:86:8d:62:48:63:79:45:11:3d:33:20:b1:30:
72:d1:d6:04:b2:fa:12:95:69:94:77:f8:af:4c:de:
21:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:88:90:44:8A:EC:79:45:38:C0:DD:F3:CB:04:F1:CD:F6:88:89:7E
X509v3 Authority Key Identifier:
keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2a:b9:6e:67:41:47:c5:ec:66:93:91:60:fa:d4:35:f6:1f:
98:9e:fd:ec:0c:61:6d:6a:b6:60:eb:a1:14:d5:57:34:9a:8e:
b7:9c:5d:c4:19:ee:4e:7f:10:77:05:e4:4b:5e:14:df:07:b0:
f1:70:8e:ec:f6:64:f0:c4:70:7d:a9:08:fc:97:dc:f7:14:81:
09:2e:c7:fb:c5:73:7d:57:c9:a1:cf:a8:6f:bc:4e:ec:dc:fc:
8a:b6:66:e9:79:89:85:dd:6b:66:b6:a2:76:24:4c:3b:0f:bc:
7a:ef:92:3d:23:6e:33:ad:eb:06:82:13:06:c5:7e:a7:a0:38:
a2:7e:e8:29:d1:c5:e0:f6:7d:83:13:52:88:83:f1:26:bd:47:
04:33:50:59:6f:b2:9b:ff:97:3e:46:83:ed:bd:f9:23:da:ed:
a5:cb:ba:5c:e8:66:3a:80:18:ca:c3:f8:e6:68:bc:38:84:61:
87:79:1e:56:95:8f:46:ba:d2:ea:9f:66:7f:ff:1d:23:e8:5d:
93:a4:3e:86:64:38:3c:6b:e9:11:6e:f3:bb:66:bd:c7:10:9b:
35:d0:cb:7f:45:b7:cf:36:2a:0f:99:c5:dc:66:8d:d3:de:30:
58:be:cc:e4:da:35:15:a8:4b:c5:45:b1:95:29:65:87:9f:8d:
48:5e:eb:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdzMqDbGf3EcKp3tWkAd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGQ4ZjFlMzhjOTFmNWIxN2MzZDFhNzIzNGU0OWM5Yzcw
ZGMzMjQwHhcNMjUwNzI2MTYwMDUwWhcNMjUwNzI3MTYwMDUwWjAzMTEwLwYDVQQD
Eyg2Mjg4OTA0NDhhZWM3OTQ1MzhjMGRkZjNjYjA0ZjFjZGY2ODg4OTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoQnaKlf9EXL33pjA81aTpV+gc1a
BY7ZUrFBjvG6IT6bCKMTAF93mxFUTErCUz1cbOWG8t94y4NL8TEIpTPFxhK8ZoI2
C7t74ga2pK7+1G1cyajOg/RXQZQ9ha1ZH+Rj+crP9gjY484u3D5MyKAADcQEM3zF
AlvdmmGdpcX1OU8nMovaxHzlJY7h2NC76ju1sfPmqhIVRrF4lU+6pik6jcBL0zkS
V8Xna2lTbxeoAd0l3ab5NY7PtdCICRN3Zn/dTFwCelJesR6fLkIMaArJVeRbKpj7
HHhNDquQWYyCjbVuiIaNYkhjeUURPTMgsTBy0dYEsvoSlWmUd/ivTN4hAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKIkESK7HlFOMDd88sE8c32iIl+MB8GA1UdIwQY
MBaAFG3djx44yR9bF8PRpyNOScnHDcMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmQyUEhqakpIMXNYdzlHbkkwNUp5Y2NOd3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMTZjOGYtNWUzNi00NzFmLTk1NTUt
ZjYyOTdhNzdhMzdiLzEvYmQyUEhqakpIMXNYdzlHbkkwNUp5Y2NOd3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zMTZjOGYtNWUzNi00NzFmLTk1NTUtZjYyOTdhNzdhMzdi
LzEvYmQyUEhqakpIMXNYdzlHbkkwNUp5Y2NOd3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCq5bmdB
R8XsZpORYPrUNfYfmJ797AxhbWq2YOuhFNVXNJqOt5xdxBnuTn8QdwXkS14U3wew
8XCO7PZk8MRwfakI/Jfc9xSBCS7H+8VzfVfJoc+ob7xO7Nz8irZm6XmJhd1rZrai
diRMOw+8eu+SPSNuM63rBoITBsV+p6A4on7oKdHF4PZ9gxNSiIPxJr1HBDNQWW+y
m/+XPkaD7b35I9rtpcu6XOhmOoAYysP45mi8OIRhh3keVpWPRrrS6p9mf/8dI+hd
k6Q+hmQ4PGvpEW7zu2a9xxCbNdDLf0W3zzYqD5nF3GaN094wWL7M5No1FahLxUWx
lSllh5+NSF7rvw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 21:15:39 2025 by rpki-client