Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File: bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier: KelhwsmuWrPS9vqVBiH+AcFZa8Jw2P7481S06kO3TxQ=
Subject key identifier: FA:83:91:47:12:EB:C2:9C:92:E7:3C:8A:49:4E:A3:25:73:F7:34:98
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial: 0198537BB1BBDD054A9AD0D2E6BF16151E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number: 1609
Signing time: Tue 29 Jul 2025 00:01:11 +0000
Manifest this update: Tue 29 Jul 2025 00:01:11 +0000
Manifest next update: Wed 30 Jul 2025 00:01:11 +0000
Files and hashes: 1: NEV_-oCqja9NUg4iDlmgfjuQWbE.roa (hash: ReSei0m0CMnR22mGMZi2S582O1et/LA16EgWBVKTiLE=)
2: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: nGKgU4wJxxFqXAU25gTIyU0TWJvOtB2ZGep7IYV4B2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:b1:bb:dd:05:4a:9a:d0:d2:e6:bf:16:15:1e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
Validity
Not Before: Jul 29 00:01:11 2025 GMT
Not After : Jul 30 00:01:11 2025 GMT
Subject: CN=fa83914712ebc29c92e73c8a494ea32573f73498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:d6:ec:66:7c:59:36:f2:db:54:ea:80:ca:
c9:6a:68:e1:b2:4c:0d:38:c8:c2:25:97:9d:08:f3:
e4:36:7e:a0:c8:e1:66:a9:be:e5:cd:97:1c:fc:2d:
44:17:c3:e6:0c:12:90:33:f2:b8:b3:c0:c9:c0:4d:
1f:d2:28:37:b4:a6:7b:7f:4d:6c:92:af:71:35:e4:
14:45:94:bf:74:d2:63:73:9d:b0:c5:34:4a:b6:cc:
cb:d2:1d:89:05:c2:cd:a6:4d:82:6d:cd:fb:d2:e8:
f8:73:d1:55:18:29:6e:2a:51:df:57:51:05:b2:e5:
1d:cd:ea:4f:f3:15:e3:1e:28:08:0d:5f:5e:9e:34:
45:12:20:59:96:89:46:2a:7b:39:48:71:90:32:d2:
49:e7:0e:f6:93:25:58:bb:5f:3b:10:12:c2:ef:9f:
73:92:a9:45:ab:df:29:39:59:03:73:68:4f:e7:6b:
bf:f4:a3:a7:45:d7:f2:59:18:b7:b7:95:9b:7b:1d:
66:30:06:c7:89:13:c7:1e:4e:96:41:64:18:f2:f2:
5a:b8:fc:0a:71:a2:4d:6c:11:b1:4d:72:1d:11:6d:
79:ed:bd:8a:25:4b:c3:35:41:c2:25:de:d0:3c:93:
e3:6d:e7:02:5e:2f:17:d7:b2:4f:a4:87:99:5c:09:
95:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:83:91:47:12:EB:C2:9C:92:E7:3C:8A:49:4E:A3:25:73:F7:34:98
X509v3 Authority Key Identifier:
keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f6:b9:8f:f3:1b:cb:f4:f9:fe:81:c3:00:09:92:61:68:ea:
3c:75:f1:15:86:5d:fd:c6:59:1c:e3:82:26:12:66:73:e7:14:
09:c2:4d:28:c4:19:ed:3a:4a:b3:5d:8e:1e:42:6d:a9:a8:b2:
37:07:5d:81:60:cb:be:e0:f7:e0:8b:39:1f:a7:c3:7d:32:a0:
ff:98:b4:ce:2a:09:9a:8f:a2:e4:64:32:33:80:3d:71:80:34:
05:4e:77:b9:94:be:1e:7a:73:4f:93:7e:b2:1d:c1:94:a2:9b:
e1:94:a0:80:46:d7:fb:62:e3:2f:5b:8e:e3:63:32:1c:b3:29:
78:41:85:f7:0f:94:9d:6b:cc:eb:e1:87:27:e9:7c:33:19:bc:
41:bf:89:ff:97:5b:cb:f8:b3:b6:83:11:e2:da:38:5a:66:d7:
80:de:01:65:70:5c:3d:0a:74:a7:bc:c7:0d:43:89:db:2d:f9:
36:a3:95:3f:4e:ae:88:ed:1a:69:f6:4a:66:21:e6:d8:bb:14:
7f:49:7c:2d:77:56:ad:13:93:1b:7a:56:d4:44:97:29:0d:59:
a1:49:d9:1e:eb:c4:ef:5f:b5:1f:6e:91:18:f3:13:81:77:23:
47:a1:eb:da:76:c3:6e:25:76:fa:ba:57:ed:07:e3:83:c4:ed:
1c:3d:fc:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTe7G73QVKmtDS5r8WFR6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYzU3NjkxYzE1YzllYjNhMzc5OTE3ODA2ZDI5NGZkMzkx
NzVlMDcwHhcNMjUwNzI5MDAwMTExWhcNMjUwNzMwMDAwMTExWjAzMTEwLwYDVQQD
EyhmYTgzOTE0NzEyZWJjMjljOTJlNzNjOGE0OTRlYTMyNTczZjczNDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXHW7GZ8WTby21TqgMrJamjhskwN
OMjCJZedCPPkNn6gyOFmqb7lzZcc/C1EF8PmDBKQM/K4s8DJwE0f0ig3tKZ7f01s
kq9xNeQURZS/dNJjc52wxTRKtszL0h2JBcLNpk2Cbc370uj4c9FVGCluKlHfV1EF
suUdzepP8xXjHigIDV9enjRFEiBZlolGKns5SHGQMtJJ5w72kyVYu187EBLC759z
kqlFq98pOVkDc2hP52u/9KOnRdfyWRi3t5Wbex1mMAbHiRPHHk6WQWQY8vJauPwK
caJNbBGxTXIdEW157b2KJUvDNUHCJd7QPJPjbecCXi8X17JPpIeZXAmVrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqDkUcS68Kckuc8iklOoyVz9zSYMB8GA1UdIwQY
MBaAFGzFdpHBXJ6zo3mReAbSlP05F14HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMt
ZmRkYjk2ZTZkYWQxLzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMtZmRkYjk2ZTZkYWQx
LzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARva5j/Mb
y/T5/oHDAAmSYWjqPHXxFYZd/cZZHOOCJhJmc+cUCcJNKMQZ7TpKs12OHkJtqaiy
NwddgWDLvuD34Is5H6fDfTKg/5i0zioJmo+i5GQyM4A9cYA0BU53uZS+HnpzT5N+
sh3BlKKb4ZSggEbX+2LjL1uO42MyHLMpeEGF9w+UnWvM6+GHJ+l8Mxm8Qb+J/5db
y/iztoMR4to4WmbXgN4BZXBcPQp0p7zHDUOJ2y35NqOVP06uiO0aafZKZiHm2LsU
f0l8LXdWrROTG3pW1ESXKQ1ZoUnZHuvE71+1H26RGPMTgXcjR6Hr2nbDbiV2+rpX
7Qfjg8TtHD38CQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:38:42 2025 by rpki-client