Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
File: b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft (raw, json)
Hash identifier: 7nOXb+d8vdYRspKqQvNF+8z7ArZSL2N27NWjayk2yZk=
Subject key identifier: BB:58:71:3C:24:2B:6A:CD:96:9A:F9:44:B0:58:DA:A8:87:9B:4B:16
Authority key identifier: 6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
Certificate issuer: /CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Certificate serial: 019848532378EE056D2339FDE4FBD089B6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
Manifest number: 02A7
Signing time: Sat 26 Jul 2025 20:01:04 +0000
Manifest this update: Sat 26 Jul 2025 20:01:04 +0000
Manifest next update: Sun 27 Jul 2025 20:01:04 +0000
Files and hashes: 1: b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl (hash: kzeTJQzpRY5e/EuQwNH8lpqxMH9RFHAlfMh0pmqch+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:23:78:ee:05:6d:23:39:fd:e4:fb:d0:89:b6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Validity
Not Before: Jul 26 20:01:04 2025 GMT
Not After : Jul 27 20:01:04 2025 GMT
Subject: CN=bb58713c242b6acd969af944b058daa8879b4b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:4c:d1:15:b7:eb:99:40:ea:78:3e:fa:ed:
73:df:f0:52:8a:a9:57:f5:11:cc:7f:ec:55:ff:d6:
6b:3c:87:2b:d2:10:ee:f3:66:53:f3:89:97:53:52:
0f:cb:f1:8b:06:4d:a5:ae:f4:17:a3:35:6b:fb:9a:
8f:88:dc:dd:db:d4:33:67:8f:1b:89:1a:8e:2d:02:
e6:97:5c:20:57:c4:11:3b:42:8d:2a:6b:f8:ed:3c:
65:3b:79:cd:1f:7d:8f:d3:7b:9b:be:a0:e0:c1:34:
47:62:9f:6e:03:7a:0e:70:8f:3a:b8:85:ea:8b:b2:
5a:f1:2a:5f:65:2f:d1:8d:ac:61:b6:1b:d8:7c:d5:
c7:ba:c6:3b:c7:e7:f1:11:a6:76:70:99:98:f8:7c:
9d:a2:f3:a0:e6:c5:5d:cb:2a:7d:c9:07:42:24:f7:
38:9c:b2:13:ce:fd:94:3e:a6:6d:ef:a1:78:95:36:
d3:60:f1:01:6b:b7:a9:f5:f1:ad:59:b7:b9:38:a6:
b0:ee:d8:14:82:30:28:60:8b:7e:2e:da:c2:05:8b:
b4:79:2c:44:b8:ab:ab:34:d0:3a:ad:7e:cb:bb:1e:
91:8b:01:f7:f0:47:f2:1a:b9:cf:e3:3e:dd:5c:c9:
3e:53:7c:d3:aa:f7:a9:11:22:56:15:8f:ff:b9:df:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:58:71:3C:24:2B:6A:CD:96:9A:F9:44:B0:58:DA:A8:87:9B:4B:16
X509v3 Authority Key Identifier:
keyid:6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:33:2a:51:18:d6:31:51:86:fe:5b:8c:f2:7a:4f:c9:e4:9b:
4b:41:c8:ce:17:81:b5:b8:fd:a5:65:4a:68:34:b7:5e:49:7c:
f2:d6:e5:74:b9:80:bf:a6:4f:df:17:21:cc:ae:f5:78:4a:c6:
24:fd:a1:5f:2c:52:78:10:84:19:71:fb:fe:98:b3:28:25:a9:
40:4e:9c:06:29:98:37:cf:e4:7b:32:7b:e8:fe:a5:88:73:89:
a4:7b:4d:ba:7e:80:9f:5f:1c:e7:f0:d3:0a:c8:d6:2e:3b:0e:
8e:9e:c2:e3:a9:17:42:36:b7:95:ae:fd:29:04:14:07:f5:46:
5d:9e:ed:f8:0f:a2:aa:54:3f:89:6d:e7:98:6a:3f:9d:84:8a:
d3:d4:18:20:97:28:53:fd:a3:ea:c0:bc:07:c3:7c:71:da:90:
49:0a:a1:8a:65:1a:62:34:63:3f:fc:25:40:4b:48:55:b1:de:
0d:95:f4:48:50:f4:b2:45:0f:91:18:cd:ca:db:90:3f:d2:8b:
86:35:bf:6f:1f:c0:12:93:fc:6c:43:ed:2e:63:13:c4:02:05:
5a:05:d2:52:c1:2d:ae:f5:6f:7d:e1:ce:0b:7d:5e:31:54:66:
d4:27:eb:96:eb:86:65:22:c0:d3:49:cb:f9:6b:61:96:f3:65:
9e:09:e9:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUyN47gVtIzn95PvQibbiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNjU1NGM0ZDg1YmZkODZmMGE3NDljMWNhMGY1ZDBlOTY5
MmU2NTUwHhcNMjUwNzI2MjAwMTA0WhcNMjUwNzI3MjAwMTA0WjAzMTEwLwYDVQQD
EyhiYjU4NzEzYzI0MmI2YWNkOTY5YWY5NDRiMDU4ZGFhODg3OWI0YjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXtM0RW365lA6ng++u1z3/BSiqlX
9RHMf+xV/9ZrPIcr0hDu82ZT84mXU1IPy/GLBk2lrvQXozVr+5qPiNzd29QzZ48b
iRqOLQLml1wgV8QRO0KNKmv47TxlO3nNH32P03ubvqDgwTRHYp9uA3oOcI86uIXq
i7Ja8SpfZS/RjaxhthvYfNXHusY7x+fxEaZ2cJmY+HydovOg5sVdyyp9yQdCJPc4
nLITzv2UPqZt76F4lTbTYPEBa7ep9fGtWbe5OKaw7tgUgjAoYIt+LtrCBYu0eSxE
uKurNNA6rX7Lux6RiwH38EfyGrnP4z7dXMk+U3zTqvepESJWFY//ud/dzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtYcTwkK2rNlpr5RLBY2qiHm0sWMB8GA1UdIwQY
MBaAFG9lVMTYW/2G8KdJwcoPXQ6WkuZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjJWVXhOaGJfWWJ3cDBuQnlnOWREcGFTNWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81YmNhNjAtMTYzZi00MGY4LTg3N2Qt
ODczZGJkMTJjNmEyLzEvYjJWVXhOaGJfWWJ3cDBuQnlnOWREcGFTNWxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81YmNhNjAtMTYzZi00MGY4LTg3N2QtODczZGJkMTJjNmEy
LzEvYjJWVXhOaGJfWWJ3cDBuQnlnOWREcGFTNWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuTMqURjW
MVGG/luM8npPyeSbS0HIzheBtbj9pWVKaDS3Xkl88tbldLmAv6ZP3xchzK71eErG
JP2hXyxSeBCEGXH7/pizKCWpQE6cBimYN8/kezJ76P6liHOJpHtNun6An18c5/DT
CsjWLjsOjp7C46kXQja3la79KQQUB/VGXZ7t+A+iqlQ/iW3nmGo/nYSK09QYIJco
U/2j6sC8B8N8cdqQSQqhimUaYjRjP/wlQEtIVbHeDZX0SFD0skUPkRjNytuQP9KL
hjW/bx/AEpP8bEPtLmMTxAIFWgXSUsEtrvVvfeHOC31eMVRm1CfrluuGZSLA00nL
+WthlvNlngnpjg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:50:46 2025 by rpki-client