Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
File: bZOet0q7zSInwhkqoqN-bcuJjlM.mft (raw, json)
Hash identifier: F6S+iJ9HZNYAPUrbqSBa4xC6kBecXG9/iBZ0Mgkw0dM=
Subject key identifier: B6:8C:6B:4F:3A:17:37:6D:6B:99:4E:17:D3:18:4E:B8:28:A5:B3:ED
Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
Certificate issuer: /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Certificate serial: 01984A419DEDC81A6067EA7F91F8F966C7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 05:01:10 +0000
Manifest this update: Sun 27 Jul 2025 05:01:10 +0000
Manifest next update: Mon 28 Jul 2025 05:01:10 +0000
Files and hashes: 1: O1oreHXoGfE0x_DduepnzXbv1jQ.roa (hash: YJRrGXYLhqb/8S1lAURaXg16hfYVh9EAfo6ckQiEqy0=)
2: bZOet0q7zSInwhkqoqN-bcuJjlM.crl (hash: Fw4FK5/XaKSFzRmwvQ9P0eU3E0hJkE1rSuptJzXrJ6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:9d:ed:c8:1a:60:67:ea:7f:91:f8:f9:66:c7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Validity
Not Before: Jul 27 05:01:10 2025 GMT
Not After : Jul 28 05:01:10 2025 GMT
Subject: CN=b68c6b4f3a17376d6b994e17d3184eb828a5b3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:0f:16:e1:87:5f:cf:22:ba:99:40:3f:74:
5e:39:2f:0a:56:33:78:92:11:97:e8:08:31:f4:06:
94:64:07:82:6f:23:0e:5b:72:e3:63:84:8c:6b:2d:
6c:48:8f:3c:91:43:a6:b1:ba:ad:5e:67:e6:8b:92:
5e:d2:85:61:ef:9d:77:56:b8:56:b3:c1:11:b8:0c:
4e:d1:58:b7:97:7c:94:7f:a7:30:e0:34:a3:8e:4a:
c7:9d:80:d2:76:1a:e9:5a:01:36:36:a7:9f:31:4f:
af:39:71:3d:17:f1:2e:23:46:cd:e6:f3:7e:f8:54:
80:a3:52:24:46:bb:b2:76:1f:82:44:cc:a7:eb:08:
55:4e:25:53:4d:38:69:74:9e:26:21:12:8f:94:ad:
3c:54:33:9c:ab:74:ed:34:0f:c4:be:9c:aa:03:2e:
42:40:02:8e:91:ec:d6:5c:f2:56:09:89:84:27:4a:
7b:a8:da:1b:14:ea:3d:69:4a:97:44:9d:34:9b:f5:
e2:54:31:d5:20:39:a0:3c:3c:79:63:5e:89:40:d3:
65:74:dc:b4:ab:24:2d:52:28:41:45:4c:c6:91:66:
50:58:03:ab:5e:90:3e:f2:92:6c:29:4c:49:94:14:
13:99:51:82:72:98:65:e6:4d:f1:9c:d4:5a:ad:23:
da:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8C:6B:4F:3A:17:37:6D:6B:99:4E:17:D3:18:4E:B8:28:A5:B3:ED
X509v3 Authority Key Identifier:
keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:47:45:78:49:6e:56:de:55:51:88:5b:cb:d8:31:c0:cd:64:
ed:fe:6f:72:97:6e:be:a5:2b:60:02:77:68:1e:4c:3d:5e:07:
e6:e6:ed:d0:61:39:5b:89:bb:02:74:34:98:44:de:a6:99:93:
35:5d:b5:50:72:f1:d4:ee:9d:79:12:7c:a9:3c:d3:3f:bd:45:
2f:40:61:c2:b8:9e:ba:db:19:2c:7f:4f:7f:37:76:40:11:7b:
8f:ae:55:b8:15:1d:b1:30:4c:b2:50:3f:4d:56:6d:9b:b2:8d:
6e:bc:4e:74:35:db:75:51:2a:09:0a:97:e9:7e:20:90:07:2e:
26:9e:c3:43:79:0b:30:c5:56:34:ec:90:cd:47:df:37:2a:f5:
41:17:95:c9:3f:9d:73:12:8e:a9:a7:d0:d3:9c:7f:ab:59:de:
dc:cb:1a:92:33:f4:19:86:02:fc:95:f1:e3:b4:1e:07:61:4e:
06:20:aa:b5:58:24:db:b8:f4:e3:b8:3f:10:c4:07:af:27:4e:
19:ce:8a:1f:f6:28:97:5e:2f:a0:a8:15:f8:d2:05:c2:ba:ec:
12:2a:7d:96:73:93:8d:8f:33:42:cf:63:c9:ac:1f:ef:f6:3f:
61:da:f6:19:03:2d:80:81:fc:df:ba:de:9d:6e:d8:7e:a7:8c:
ba:ed:6d:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQZ3tyBpgZ+p/kfj5ZseyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkOTM5ZWI3NGFiYmNkMjIyN2MyMTkyYWEyYTM3ZTZkY2I4
OThlNTMwHhcNMjUwNzI3MDUwMTEwWhcNMjUwNzI4MDUwMTEwWjAzMTEwLwYDVQQD
EyhiNjhjNmI0ZjNhMTczNzZkNmI5OTRlMTdkMzE4NGViODI4YTViM2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSgPFuGHX88iuplAP3ReOS8KVjN4
khGX6Agx9AaUZAeCbyMOW3LjY4SMay1sSI88kUOmsbqtXmfmi5Je0oVh7513VrhW
s8ERuAxO0Vi3l3yUf6cw4DSjjkrHnYDSdhrpWgE2NqefMU+vOXE9F/EuI0bN5vN+
+FSAo1IkRruydh+CRMyn6whVTiVTTThpdJ4mIRKPlK08VDOcq3TtNA/EvpyqAy5C
QAKOkezWXPJWCYmEJ0p7qNobFOo9aUqXRJ00m/XiVDHVIDmgPDx5Y16JQNNldNy0
qyQtUihBRUzGkWZQWAOrXpA+8pJsKUxJlBQTmVGCcphl5k3xnNRarSPadQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaMa086Fzdta5lOF9MYTrgopbPtMB8GA1UdIwQY
MBaAFG2TnrdKu80iJ8IZKqKjfm3LiY5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTIt
ZTk1ZTJkM2QyM2UwLzEvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTItZTk1ZTJkM2QyM2Uw
LzEvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUdFeElu
Vt5VUYhby9gxwM1k7f5vcpduvqUrYAJ3aB5MPV4H5ubt0GE5W4m7AnQ0mETeppmT
NV21UHLx1O6deRJ8qTzTP71FL0BhwrieutsZLH9Pfzd2QBF7j65VuBUdsTBMslA/
TVZtm7KNbrxOdDXbdVEqCQqX6X4gkAcuJp7DQ3kLMMVWNOyQzUffNyr1QReVyT+d
cxKOqafQ05x/q1ne3MsakjP0GYYC/JXx47QeB2FOBiCqtVgk27j047g/EMQHrydO
Gc6KH/Yol14voKgV+NIFwrrsEip9lnOTjY8zQs9jyawf7/Y/Ydr2GQMtgIH837re
nW7YfqeMuu1tuQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:24 2025 by rpki-client