Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
File: bMI2cPl4nALYO6fC5-TG6e3lL3o.mft (raw, json)
Hash identifier: 9hyy2bi1z9/tTuKBk/upSfzfwInU4++PRlsXafg7X8w=
Subject key identifier: D8:01:DF:A1:F4:8F:72:5E:A0:FE:31:A4:F0:32:DD:86:59:7C:25:19
Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Certificate serial: 0198512084BB990C478A0497D2916C67BB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
Manifest number: 079C
Signing time: Mon 28 Jul 2025 13:02:22 +0000
Manifest this update: Mon 28 Jul 2025 13:02:22 +0000
Manifest next update: Tue 29 Jul 2025 13:02:22 +0000
Files and hashes: 1: FN9RGBMyQ31Y_fViha13qkky7DI.roa (hash: gAmFRHmRCLI//ymFZDIrqygKx6kT7sxILKZQSxKuAic=)
2: Nbw4t5MC6gHkh4rPXeeWfUQIVkw.roa (hash: GCKq7nx6vmgGBar49yig7d/ID2EW6TSR2OyxNnCG15Q=)
3: bMI2cPl4nALYO6fC5-TG6e3lL3o.crl (hash: TFc4qaZYDVU+azGC+ap+8Wtszo8SBuQrxfCNAXOe024=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 13:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:20:84:bb:99:0c:47:8a:04:97:d2:91:6c:67:bb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Validity
Not Before: Jul 28 13:02:22 2025 GMT
Not After : Jul 29 13:02:22 2025 GMT
Subject: CN=d801dfa1f48f725ea0fe31a4f032dd86597c2519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:af:43:f0:bc:df:44:bf:c4:41:40:65:4f:
70:4e:2e:f4:98:73:86:dd:58:1a:c0:6f:fb:15:e3:
66:e1:21:f0:2a:b9:0c:6c:fb:44:a7:e8:77:cf:e8:
ad:c3:ab:b5:54:10:6f:e5:90:37:3e:75:0a:ba:cb:
0a:c0:1b:32:ad:9a:d8:4f:d8:95:c7:3c:29:df:cd:
48:be:78:81:fd:23:4e:05:83:e2:12:0d:cf:73:29:
ef:1e:58:d6:09:a3:aa:31:aa:b2:7a:5c:d0:9b:2c:
91:9b:14:37:d5:15:cb:ba:27:34:83:60:41:7b:6b:
e4:aa:d3:54:07:e9:00:23:fc:e8:90:de:6e:7d:69:
de:c9:26:4f:07:78:82:64:a8:f3:ca:0e:9a:10:e5:
ca:0a:b6:0f:64:4c:90:f1:46:08:02:a3:1d:9f:6a:
b5:93:27:87:75:ff:fb:3d:73:ed:f7:65:d5:a6:19:
6e:97:27:7e:71:89:1f:99:17:f8:17:15:8d:a1:10:
c5:2f:2d:44:5a:06:a4:47:a3:2b:1f:d2:61:03:01:
33:f6:e7:44:1f:a6:f3:a3:23:bc:12:bc:49:54:b5:
a1:16:1b:b8:82:42:9a:89:ee:01:38:29:76:26:09:
1a:fd:78:85:db:b1:10:be:0d:72:55:ec:54:1e:77:
a4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:01:DF:A1:F4:8F:72:5E:A0:FE:31:A4:F0:32:DD:86:59:7C:25:19
X509v3 Authority Key Identifier:
keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d6:49:bf:3c:76:6d:b2:5e:85:65:24:af:66:05:d6:02:ed:
67:97:fc:fd:aa:de:a6:e2:39:ee:3b:ea:9d:6e:62:cc:9a:a3:
46:8c:e0:97:45:55:18:ee:41:50:8f:d3:b0:53:40:d4:29:ee:
80:64:80:20:91:25:67:51:d8:a6:74:48:ea:3b:18:d3:fd:06:
69:95:ef:48:87:27:28:41:1a:05:2e:fd:8d:58:d1:94:95:4b:
31:05:af:ba:65:e2:af:f0:e2:3b:7b:91:30:b5:39:24:6b:67:
91:54:f4:f3:f5:69:9b:aa:e9:48:b0:b5:79:53:05:e7:49:83:
e5:b8:8d:50:1c:41:62:19:6e:13:ff:42:94:5a:76:42:75:57:
8f:7e:b3:c5:90:2d:b6:49:29:56:93:47:4a:89:06:cd:2e:15:
90:2c:70:8f:6f:2c:4c:b6:2f:09:b6:e5:32:15:60:7d:0c:d2:
e3:49:e8:3a:11:cf:11:e0:0e:c5:d6:17:23:9d:f1:43:fa:7c:
05:9d:a1:e2:71:eb:f3:db:8a:4e:c9:6e:58:e2:cf:66:d7:df:
48:77:12:5e:92:4f:ff:27:f3:6c:fc:bc:55:15:e9:40:8c:42:
2c:17:54:79:0e:a1:00:0d:52:26:63:0b:0b:56:4c:81:b2:59:
25:78:f5:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhRIIS7mQxHigSX0pFsZ7uHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYzIzNjcwZjk3ODljMDJkODNiYTdjMmU3ZTRjNmU5ZWRl
NTJmN2EwHhcNMjUwNzI4MTMwMjIyWhcNMjUwNzI5MTMwMjIyWjAzMTEwLwYDVQQD
EyhkODAxZGZhMWY0OGY3MjVlYTBmZTMxYTRmMDMyZGQ4NjU5N2MyNTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys6vQ/C830S/xEFAZU9wTi70mHOG
3VgawG/7FeNm4SHwKrkMbPtEp+h3z+itw6u1VBBv5ZA3PnUKussKwBsyrZrYT9iV
xzwp381IvniB/SNOBYPiEg3PcynvHljWCaOqMaqyelzQmyyRmxQ31RXLuic0g2BB
e2vkqtNUB+kAI/zokN5ufWneySZPB3iCZKjzyg6aEOXKCrYPZEyQ8UYIAqMdn2q1
kyeHdf/7PXPt92XVphlulyd+cYkfmRf4FxWNoRDFLy1EWgakR6MrH9JhAwEz9udE
H6bzoyO8ErxJVLWhFhu4gkKaie4BOCl2Jgka/XiF27EQvg1yVexUHnekOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgB36H0j3JeoP4xpPAy3YZZfCUZMB8GA1UdIwQY
MBaAFGzCNnD5eJwC2Dunwufkxunt5S96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85ZmQyMGUtMzRkNy00OTQ5LWEzMDct
OTA4N2UwZmYzZDM2LzEvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85ZmQyMGUtMzRkNy00OTQ5LWEzMDctOTA4N2UwZmYzZDM2
LzEvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsdZJvzx2
bbJehWUkr2YF1gLtZ5f8/arepuI57jvqnW5izJqjRozgl0VVGO5BUI/TsFNA1Cnu
gGSAIJElZ1HYpnRI6jsY0/0GaZXvSIcnKEEaBS79jVjRlJVLMQWvumXir/DiO3uR
MLU5JGtnkVT08/Vpm6rpSLC1eVMF50mD5biNUBxBYhluE/9ClFp2QnVXj36zxZAt
tkkpVpNHSokGzS4VkCxwj28sTLYvCbblMhVgfQzS40noOhHPEeAOxdYXI53xQ/p8
BZ2h4nHr89uKTsluWOLPZtffSHcSXpJP/yfzbPy8VRXpQIxCLBdUeQ6hAA1SJmML
C1ZMgbJZJXj1Pg==
-----END CERTIFICATE-----
Generated at Mon Jul 28 20:03:36 2025 by rpki-client