Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
File: bVbe-EWP2Osu11SsLpDTUFoyqoI.mft (raw, json)
Hash identifier: yScgD5Be9LgKW2OOH1zitlRdoQmr1+KGAnJp429RhzA=
Subject key identifier: 09:E8:49:63:3D:0F:87:30:2D:3C:17:A7:29:81:EE:C3:06:52:B2:DB
Authority key identifier: 6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
Certificate issuer: /CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Certificate serial: 0198481BC11BFD7AC1E2AAE2D641F9CD697F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
Manifest number: 05C2
Signing time: Sat 26 Jul 2025 19:00:35 +0000
Manifest this update: Sat 26 Jul 2025 19:00:35 +0000
Manifest next update: Sun 27 Jul 2025 19:00:35 +0000
Files and hashes: 1: SBebfO-JEiTLVku7wA-Q7NJY9QI.roa (hash: iiLUe1+ewBfgZMamdKFXLL2gnvfWWm7luTyA1wiqfW4=)
2: bVbe-EWP2Osu11SsLpDTUFoyqoI.crl (hash: dFsBK6mZiGSV/3JtgoTelPCp49TCoL+oq2mbhTPxd3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:c1:1b:fd:7a:c1:e2:aa:e2:d6:41:f9:cd:69:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Validity
Not Before: Jul 26 19:00:35 2025 GMT
Not After : Jul 27 19:00:35 2025 GMT
Subject: CN=09e849633d0f87302d3c17a72981eec30652b2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:26:5b:6c:96:c6:76:c9:65:67:3f:ed:56:
5a:df:39:84:5e:a5:60:50:a7:bb:8d:ac:e6:72:9f:
00:ec:59:e5:e1:e1:d6:64:38:c1:94:2f:0c:eb:e0:
8b:cc:d7:44:05:37:9e:56:49:d9:c2:82:ae:cc:b7:
dd:5d:ec:00:2e:a7:ec:f2:f3:d2:89:11:c9:b5:16:
5d:60:49:bc:f3:4d:85:98:68:df:d3:a1:38:92:07:
8e:2f:20:9b:10:ff:6c:48:17:43:ca:8c:69:6d:a1:
b4:9a:1a:e0:9e:6b:b4:a9:81:3b:13:d6:cb:f8:e0:
f0:34:da:64:c8:1d:60:05:42:7a:41:fd:48:7d:5d:
2a:c0:a4:d6:09:a9:f4:5a:88:ab:d0:13:1d:34:59:
d0:88:7a:45:25:80:8e:bd:73:7c:ab:1a:7f:de:70:
f9:ce:8d:f2:10:72:dc:75:68:4e:8c:49:53:3c:fc:
be:73:77:d8:26:9e:75:7a:f6:29:8a:cf:f7:a4:f2:
60:8c:1f:8b:d9:c0:80:e9:ea:bb:20:74:ef:3a:2c:
99:59:c9:df:7f:98:89:69:43:2a:d6:08:e3:de:7f:
9d:33:e9:d4:b1:31:64:42:6a:74:71:b1:2d:d8:b0:
8c:e9:03:99:a1:00:66:05:c8:df:b9:c4:80:ca:48:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E8:49:63:3D:0F:87:30:2D:3C:17:A7:29:81:EE:C3:06:52:B2:DB
X509v3 Authority Key Identifier:
keyid:6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f1:2b:19:0e:cd:a3:8c:8c:39:82:45:fe:2d:07:41:ae:8f:
c8:91:fe:53:2e:00:3c:55:98:03:39:6e:d5:a8:82:05:5d:70:
d0:a2:a1:de:d9:52:4b:9a:32:76:ca:82:b3:a1:56:90:c3:d0:
a4:0f:cb:46:7b:10:ea:07:40:9e:aa:d2:1e:d0:88:cb:93:97:
9e:00:86:9f:9b:53:65:ba:57:ad:51:02:a9:1f:98:9c:ee:e9:
02:1b:29:a9:26:43:23:be:97:21:09:ae:d9:e7:8b:e4:9b:3e:
8e:23:66:8e:34:74:1e:c4:2d:f4:ae:be:43:6f:dc:a6:93:0e:
4b:1d:71:d8:8f:4a:8c:dd:b7:ac:65:bc:83:60:db:3d:33:9f:
50:01:80:87:f7:bc:f7:05:bd:a4:88:fb:26:97:33:52:4c:a3:
39:2f:55:d4:d0:02:48:9d:cb:1e:42:3b:e7:59:8b:67:c5:86:
a8:ea:3e:fc:47:4b:b7:c4:cd:b6:09:4b:06:ce:ad:05:b6:0a:
ef:2f:0d:97:52:28:c3:d9:a1:45:9a:38:1a:3c:b7:d7:a7:55:
18:0e:0c:40:b9:4d:5c:ad:55:a7:cd:a4:8e:ad:45:95:cf:87:
4c:70:e3:2f:c2:a2:86:ef:0b:f7:e0:2a:84:dc:48:5a:88:fb:
87:14:8a:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIG8Eb/XrB4qri1kH5zWl/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNTZkZWY4NDU4ZmQ4ZWIyZWQ3NTRhYzJlOTBkMzUwNWEz
MmFhODIwHhcNMjUwNzI2MTkwMDM1WhcNMjUwNzI3MTkwMDM1WjAzMTEwLwYDVQQD
EygwOWU4NDk2MzNkMGY4NzMwMmQzYzE3YTcyOTgxZWVjMzA2NTJiMmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmksmW2yWxnbJZWc/7VZa3zmEXqVg
UKe7jazmcp8A7Fnl4eHWZDjBlC8M6+CLzNdEBTeeVknZwoKuzLfdXewALqfs8vPS
iRHJtRZdYEm8802FmGjf06E4kgeOLyCbEP9sSBdDyoxpbaG0mhrgnmu0qYE7E9bL
+ODwNNpkyB1gBUJ6Qf1IfV0qwKTWCan0Woir0BMdNFnQiHpFJYCOvXN8qxp/3nD5
zo3yEHLcdWhOjElTPPy+c3fYJp51evYpis/3pPJgjB+L2cCA6eq7IHTvOiyZWcnf
f5iJaUMq1gjj3n+dM+nUsTFkQmp0cbEt2LCM6QOZoQBmBcjfucSAykgr5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnoSWM9D4cwLTwXpymB7sMGUrLbMB8GA1UdIwQY
MBaAFG1W3vhFj9jrLtdUrC6Q01BaMqqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlZiZS1FV1AyT3N1MTFTc0xwRFRVRm95cW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zNmU3OWMtODQ3Mi00NjdiLTljMTQt
ODI4MWY3N2ViZDIyLzEvYlZiZS1FV1AyT3N1MTFTc0xwRFRVRm95cW9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8zNmU3OWMtODQ3Mi00NjdiLTljMTQtODI4MWY3N2ViZDIy
LzEvYlZiZS1FV1AyT3N1MTFTc0xwRFRVRm95cW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/ErGQ7N
o4yMOYJF/i0HQa6PyJH+Uy4APFWYAzlu1aiCBV1w0KKh3tlSS5oydsqCs6FWkMPQ
pA/LRnsQ6gdAnqrSHtCIy5OXngCGn5tTZbpXrVECqR+YnO7pAhspqSZDI76XIQmu
2eeL5Js+jiNmjjR0HsQt9K6+Q2/cppMOSx1x2I9KjN23rGW8g2DbPTOfUAGAh/e8
9wW9pIj7JpczUkyjOS9V1NACSJ3LHkI751mLZ8WGqOo+/EdLt8TNtglLBs6tBbYK
7y8Nl1Iow9mhRZo4Gjy316dVGA4MQLlNXK1Vp82kjq1Flc+HTHDjL8Kihu8L9+Aq
hNxIWoj7hxSKzg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 02:07:35 2025 by rpki-client