Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier: YipiR9cI9ipjpp2uQO+CGNAl8h2D2i8Jl7u2pfgdKis=
Subject key identifier: E1:FD:54:7C:F8:4E:DE:BD:49:A0:A8:41:28:CD:C7:6F:93:96:7A:9B
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 019845F66CCC575E2573FDAB6C6FE18AEBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number: 0F0D
Signing time: Sat 26 Jul 2025 09:00:34 +0000
Manifest this update: Sat 26 Jul 2025 09:00:34 +0000
Manifest next update: Sun 27 Jul 2025 09:00:34 +0000
Files and hashes: 1: SeGdw-NsjMC3xa1HTxnhlgnRFG0.roa (hash: 2DoSSeAY7zRuUc6N/EdrEbSmCJqRqnoNYJZ5rPcfON4=)
2: TlEgVdPwV6Gl0yxcaSKSOXS8BDk.roa (hash: rOzs3FdYqLMRuICzpdxO1YhRALyW7K6gs5XgNJ8pgZU=)
3: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: KRP2bCDMDPPypn+IoYutft/ss0OfyMm/YQrYPHQtrww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:6c:cc:57:5e:25:73:fd:ab:6c:6f:e1:8a:eb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Jul 26 09:00:34 2025 GMT
Not After : Jul 27 09:00:34 2025 GMT
Subject: CN=e1fd547cf84edebd49a0a84128cdc76f93967a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:a5:a5:02:46:14:06:3a:5b:2e:c3:0d:fa:
30:4b:53:4f:af:05:b0:47:7e:87:88:04:0f:1b:d0:
7f:76:69:cc:59:d1:ba:dc:f6:2e:36:15:2b:ad:6a:
31:2a:0f:27:f6:d2:2f:b8:91:9b:5d:02:fa:e2:01:
2b:39:15:24:82:51:f8:96:5f:47:cc:60:2a:ce:d4:
03:17:f4:d1:56:84:80:7b:24:88:8b:3f:6c:26:35:
13:98:9d:00:b4:43:26:e5:9e:db:7a:ff:1a:39:1d:
cc:5b:8b:eb:e6:cf:14:de:12:a4:f1:aa:87:7a:53:
36:b6:4f:e7:6c:dd:d3:39:bb:3e:58:9d:e7:8b:44:
ea:f2:3f:36:06:d2:11:09:ae:13:71:82:df:77:85:
7c:53:4c:7c:a9:4d:f7:d9:97:61:1c:9e:bd:de:0a:
d8:e2:da:50:a1:08:3c:a0:f1:5f:a8:45:64:2e:ab:
72:14:23:66:cd:8b:48:a7:a4:81:9b:a3:bb:57:39:
45:59:6e:1c:49:84:a6:7e:0e:df:10:f0:df:32:f2:
00:1a:a5:a9:0c:38:b4:de:f9:ff:c7:a8:e1:f9:be:
12:42:09:0a:15:a0:02:59:ab:8d:8f:da:20:85:e2:
cc:ce:99:b5:2a:57:9e:0a:c6:39:1f:6d:0b:b7:41:
b8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FD:54:7C:F8:4E:DE:BD:49:A0:A8:41:28:CD:C7:6F:93:96:7A:9B
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:44:b0:5d:29:fa:25:53:6b:d9:8b:ce:ed:f9:1b:59:82:a8:
96:f0:4f:b7:c0:93:9c:45:be:96:7c:cf:ff:42:4f:a5:a2:c6:
83:61:82:34:d6:23:e0:00:38:40:01:f7:92:49:3e:c0:35:72:
0d:40:c4:95:16:99:da:10:6d:24:e7:11:29:fc:76:79:0a:44:
41:c0:44:22:ee:fa:ba:c9:01:1b:ad:5e:12:5d:f0:75:37:c3:
42:17:f0:03:8f:ae:16:c7:56:c2:4f:e8:84:85:3c:8c:c9:35:
d4:f4:ea:07:34:c7:e9:80:c6:93:71:fc:4d:31:78:66:dd:db:
93:e3:e1:e5:70:dc:bc:29:a3:78:78:cc:3a:3e:be:ce:f6:34:
33:e4:a7:bc:95:b5:4f:5e:2d:1f:70:7e:ab:5d:c0:06:43:e2:
32:64:0c:a2:81:d5:f2:31:a0:dd:20:a7:1b:f7:ab:2a:a1:07:
75:18:53:d6:d5:dc:d0:16:a1:c0:d2:30:45:e4:fd:9a:d9:d6:
f5:ea:f2:ba:e5:57:0e:39:49:3c:b6:af:97:9b:88:b4:05:36:
d9:13:15:aa:00:ea:e0:37:fb:f3:43:bc:08:54:96:f7:a7:2b:
ce:20:b0:7e:24:dc:2c:96:36:10:f5:29:fa:36:fd:5d:62:93:
61:d8:9a:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhF9mzMV14lc/2rbG/hiuuvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYmQ1Y2IyOTk0MGFjMmE4NTUzYjZlYzBhOGNlYzdjMjA5
ZjdjZTcwHhcNMjUwNzI2MDkwMDM0WhcNMjUwNzI3MDkwMDM0WjAzMTEwLwYDVQQD
EyhlMWZkNTQ3Y2Y4NGVkZWJkNDlhMGE4NDEyOGNkYzc2ZjkzOTY3YTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs32lpQJGFAY6Wy7DDfowS1NPrwWw
R36HiAQPG9B/dmnMWdG63PYuNhUrrWoxKg8n9tIvuJGbXQL64gErORUkglH4ll9H
zGAqztQDF/TRVoSAeySIiz9sJjUTmJ0AtEMm5Z7bev8aOR3MW4vr5s8U3hKk8aqH
elM2tk/nbN3TObs+WJ3ni0Tq8j82BtIRCa4TcYLfd4V8U0x8qU332ZdhHJ693grY
4tpQoQg8oPFfqEVkLqtyFCNmzYtIp6SBm6O7VzlFWW4cSYSmfg7fEPDfMvIAGqWp
DDi03vn/x6jh+b4SQgkKFaACWauNj9ogheLMzpm1KleeCsY5H20Lt0G4wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOH9VHz4Tt69SaCoQSjNx2+TlnqbMB8GA1UdIwQY
MBaAFG29XLKZQKwqhVO27AqM7Hwgn3znMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEt
MmZkZTgwNDM1ZjRkLzEvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEtMmZkZTgwNDM1ZjRk
LzEvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUESwXSn6
JVNr2YvO7fkbWYKolvBPt8CTnEW+lnzP/0JPpaLGg2GCNNYj4AA4QAH3kkk+wDVy
DUDElRaZ2hBtJOcRKfx2eQpEQcBEIu76uskBG61eEl3wdTfDQhfwA4+uFsdWwk/o
hIU8jMk11PTqBzTH6YDGk3H8TTF4Zt3bk+Ph5XDcvCmjeHjMOj6+zvY0M+SnvJW1
T14tH3B+q13ABkPiMmQMooHV8jGg3SCnG/erKqEHdRhT1tXc0BahwNIwReT9mtnW
9eryuuVXDjlJPLavl5uItAU22RMVqgDq4Df780O8CFSW96crziCwfiTcLJY2EPUp
+jb9XWKTYdia0g==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:27:52 2025 by rpki-client