Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
File: bn8ivutSxuUaJCKxORQu6gP7XU0.mft (raw, json)
Hash identifier: /FN+PLiwcFyS7t1EqCjFeORwoLbF6gGnZYQG/WuR3Y4=
Subject key identifier: FB:9D:96:41:C6:C0:7D:F1:E3:8D:57:3C:06:6C:3B:CF:55:AD:DE:11
Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
Certificate issuer: /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Certificate serial: 01984A09BCCE88745FF8419BCADEE0AFB864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 04:00:08 +0000
Manifest this update: Sun 27 Jul 2025 04:00:08 +0000
Manifest next update: Mon 28 Jul 2025 04:00:08 +0000
Files and hashes: 1: bn8ivutSxuUaJCKxORQu6gP7XU0.crl (hash: apqeOaw2qZROYsjGdbEgEqpop8KNevxa5y8U08BzteM=)
2: z4IVFfra9dO93PZl7xdhmVhqzoE.roa (hash: 90ivV2dV0BSclFTId5ah7Fo9mKfLvO9taEvtncU7b/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:bc:ce:88:74:5f:f8:41:9b:ca:de:e0:af:b8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Validity
Not Before: Jul 27 04:00:08 2025 GMT
Not After : Jul 28 04:00:08 2025 GMT
Subject: CN=fb9d9641c6c07df1e38d573c066c3bcf55adde11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:9b:d8:b8:a3:b6:38:8b:19:ac:18:17:5e:
95:16:42:11:ba:84:f3:9b:f7:19:0c:bb:3e:3c:57:
48:c3:b3:16:93:99:84:51:1b:f5:d5:99:83:43:ec:
d6:3e:bc:be:e6:e3:93:26:59:d2:2b:22:eb:9b:cb:
08:93:94:c7:ab:0a:b1:b2:89:dd:db:f2:db:76:22:
15:74:b1:20:66:ed:08:da:bf:19:4e:b7:77:39:c0:
66:d9:6f:8e:21:0b:5b:18:c0:26:8d:7f:c5:81:93:
09:c1:74:ad:d0:df:5e:20:10:ff:f9:2e:dc:1d:79:
d3:e4:83:35:9e:b8:52:75:87:5e:75:72:00:9b:26:
8e:9f:63:cc:c1:ce:57:41:d9:dc:66:40:0b:76:df:
9d:8a:98:76:c1:32:e7:a1:33:19:c7:42:f0:4f:ff:
b2:31:c5:8d:4b:27:79:4b:cc:3a:f4:45:0b:4f:fd:
20:2d:43:ea:1d:ef:ef:a6:30:73:de:c7:18:e0:0b:
f4:66:66:ed:68:b7:de:17:f7:2e:c9:00:45:ef:87:
9e:de:69:d9:ee:b5:e7:41:29:ad:2f:b5:48:3f:11:
09:83:ce:4a:08:e7:e3:52:9e:1b:85:a1:41:2b:61:
4c:f9:75:a1:b9:4f:01:d8:35:4f:e2:38:23:59:8b:
5a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9D:96:41:C6:C0:7D:F1:E3:8D:57:3C:06:6C:3B:CF:55:AD:DE:11
X509v3 Authority Key Identifier:
keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5a:e9:28:51:2b:ed:84:59:f5:cb:b8:70:0a:6c:3d:a7:6b:
b8:ed:e8:be:46:b1:e5:f4:0b:15:2e:91:4b:45:be:2d:f1:8e:
e6:7d:14:0b:34:1a:59:dd:d8:dc:b3:bc:3a:e4:fc:7f:a2:bb:
1e:48:0f:ec:fe:cc:57:44:d0:9a:d1:27:a0:61:f8:ed:c3:d8:
f1:ca:41:9b:22:15:ca:ac:2e:d1:8e:d4:b0:14:63:c7:0a:60:
8b:44:ce:ca:eb:e3:66:05:78:93:0d:6b:42:f0:97:ac:c0:11:
d1:a8:d0:e8:24:00:f2:ea:0a:c3:9f:cf:1a:76:43:12:a8:c8:
5e:42:d1:11:66:64:31:d5:8d:84:b0:78:3f:d6:ab:e7:79:95:
00:c3:72:81:91:e1:7a:63:f1:b4:b7:86:2a:d4:42:ce:b9:f9:
5d:01:60:bf:46:3b:2a:f0:c7:f9:6e:17:02:48:02:61:32:05:
be:43:ec:6f:8e:16:65:bf:2b:61:6c:c9:80:b9:88:01:d8:0f:
63:5b:26:c6:3f:86:dd:8f:24:91:f9:1b:f8:a0:ed:ec:bb:1f:
24:ec:6b:10:67:5b:c4:d1:3f:e8:ba:5e:06:81:f4:07:21:58:
56:e5:80:13:54:b2:b4:bd:9a:ab:1e:fc:e9:e0:08:5f:00:10:
35:03:13:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCbzOiHRf+EGbyt7gr7hkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlN2YyMmJlZWI1MmM2ZTUxYTI0MjJiMTM5MTQyZWVhMDNm
YjVkNGQwHhcNMjUwNzI3MDQwMDA4WhcNMjUwNzI4MDQwMDA4WjAzMTEwLwYDVQQD
EyhmYjlkOTY0MWM2YzA3ZGYxZTM4ZDU3M2MwNjZjM2JjZjU1YWRkZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEKb2LijtjiLGawYF16VFkIRuoTz
m/cZDLs+PFdIw7MWk5mEURv11ZmDQ+zWPry+5uOTJlnSKyLrm8sIk5THqwqxsond
2/LbdiIVdLEgZu0I2r8ZTrd3OcBm2W+OIQtbGMAmjX/FgZMJwXSt0N9eIBD/+S7c
HXnT5IM1nrhSdYdedXIAmyaOn2PMwc5XQdncZkALdt+diph2wTLnoTMZx0LwT/+y
McWNSyd5S8w69EULT/0gLUPqHe/vpjBz3scY4Av0ZmbtaLfeF/cuyQBF74ee3mnZ
7rXnQSmtL7VIPxEJg85KCOfjUp4bhaFBK2FM+XWhuU8B2DVP4jgjWYtaYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPudlkHGwH3x441XPAZsO89Vrd4RMB8GA1UdIwQY
MBaAFG5/Ir7rUsblGiQisTkULuoD+11NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80MmY1NGItNTdjMC00MjRhLWFjZjUt
NGRkNGQwZjUzODQ5LzEvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80MmY1NGItNTdjMC00MjRhLWFjZjUtNGRkNGQwZjUzODQ5
LzEvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVrpKFEr
7YRZ9cu4cApsPadruO3ovkax5fQLFS6RS0W+LfGO5n0UCzQaWd3Y3LO8OuT8f6K7
HkgP7P7MV0TQmtEnoGH47cPY8cpBmyIVyqwu0Y7UsBRjxwpgi0TOyuvjZgV4kw1r
QvCXrMAR0ajQ6CQA8uoKw5/PGnZDEqjIXkLREWZkMdWNhLB4P9ar53mVAMNygZHh
emPxtLeGKtRCzrn5XQFgv0Y7KvDH+W4XAkgCYTIFvkPsb44WZb8rYWzJgLmIAdgP
Y1smxj+G3Y8kkfkb+KDt7LsfJOxrEGdbxNE/6LpeBoH0ByFYVuWAE1SytL2aqx78
6eAIXwAQNQMTcw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:06:18 2025 by rpki-client