Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: 4aF+7hDmu86HDS/+iUVs0nrgF6ybU7A1MeJYHLuPdlc=
Subject key identifier: 94:84:14:7C:A1:BA:5D:48:45:6D:DE:E5:07:30:7D:FD:56:86:6A:BE
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 019849D3BFBAB1AE0F7C2B39B49D33CB13D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 076F
Signing time: Sun 27 Jul 2025 03:01:10 +0000
Manifest this update: Sun 27 Jul 2025 03:01:10 +0000
Manifest next update: Mon 28 Jul 2025 03:01:10 +0000
Files and hashes: 1: 02ZPMrkxrv9TSRNG7JSudAlDYd8.roa (hash: 1pjHbb+bmeJiA9CJ5xGCBjxXea42uVA7wH4sLUyonyA=)
2: 3L6JAHHrLKqNS5i1HV40c9xyyEM.roa (hash: qyyZT9D9IGcDrviVnxZxLdBd6LOM1Me+aqwZJ6D1tPM=)
3: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: Z3YL7szaYRDeHp+kmBhDWxYwxtY+LH1DjCNRv3dcXBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:bf:ba:b1:ae:0f:7c:2b:39:b4:9d:33:cb:13:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Jul 27 03:01:10 2025 GMT
Not After : Jul 28 03:01:10 2025 GMT
Subject: CN=9484147ca1ba5d48456ddee507307dfd56866abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:58:0b:57:42:ca:b0:b2:ce:0b:98:cb:41:a3:
8b:e5:ac:f1:fe:06:aa:b1:12:fd:71:e6:59:33:51:
03:3f:61:74:c0:7d:29:d6:04:c7:01:45:7a:98:8b:
df:82:82:b7:61:c3:d8:a9:fd:28:f5:86:89:52:1a:
aa:d0:01:2d:15:c5:5b:e4:80:49:03:6a:a7:b9:e4:
af:d9:71:74:8d:0d:0a:22:9b:2b:96:29:20:50:1d:
bd:33:98:58:f4:07:c7:44:13:f6:d5:2e:9d:ad:b5:
a0:33:3b:a2:c0:3d:c6:01:e9:cc:a4:38:4e:0b:a0:
29:d7:4f:16:c4:55:c1:41:34:bd:bf:53:99:f4:11:
c5:26:f8:5f:5c:69:14:b7:d5:52:1b:66:ed:03:15:
97:aa:ed:85:74:f4:a9:17:6b:44:40:1c:c2:aa:5d:
7b:a2:5a:cf:ba:83:a0:7d:1a:77:b2:45:29:20:0d:
a2:33:05:fe:1c:bb:ee:56:5d:59:81:89:15:58:d8:
9a:76:49:62:85:85:f7:c3:8f:f2:85:6d:7c:cb:ad:
d2:8c:1e:3f:cf:fd:a4:a8:8a:29:48:a4:3a:b9:c8:
48:35:82:89:5a:4f:1a:f4:e6:3c:31:64:ce:db:57:
b8:75:c4:fe:90:07:ec:ae:57:67:f3:00:2f:82:96:
da:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:84:14:7C:A1:BA:5D:48:45:6D:DE:E5:07:30:7D:FD:56:86:6A:BE
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f3:47:c7:36:02:d6:3a:6d:c4:4e:a7:62:4a:88:9e:56:bb:8e:
d4:00:1f:3a:80:4e:a7:62:91:b3:c6:0e:eb:e9:0e:47:4e:96:
71:0b:b2:62:3c:47:0a:8a:45:8f:86:cf:6e:c4:c6:9f:ac:b8:
46:d1:3c:bc:55:e0:3f:e0:f6:83:65:16:72:92:5f:b7:46:14:
0c:fc:7f:7e:0a:63:74:98:84:31:b3:be:34:bf:56:a5:ab:68:
3a:8d:9a:eb:f4:58:04:5b:a5:02:8d:da:f7:bf:48:74:41:fe:
e1:03:c7:67:57:88:c9:2e:23:23:41:4e:ce:4d:80:68:2c:a3:
b4:e0:1e:d0:d8:ff:ff:4a:e1:e7:c2:9c:dc:b8:2d:7f:76:66:
b8:2f:1f:b2:2b:0a:e2:cd:f6:2b:e4:95:00:29:a2:ff:f7:8e:
91:db:7a:66:9a:aa:62:2e:5f:c7:fb:90:55:26:8b:e9:56:a4:
90:9a:44:b3:d8:8b:b1:87:13:57:c1:46:65:81:2f:38:69:22:
de:27:63:ed:1a:a8:4a:f9:a2:e8:05:3f:84:01:58:c7:62:30:
4c:e7:b3:23:b4:cf:69:a0:76:5a:97:0c:9d:54:bf:1b:49:08:
d3:2b:8d:80:80:fe:b9:1c:6c:a6:65:b6:d8:73:19:ea:a5:5e:
4b:24:a4:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ07+6sa4PfCs5tJ0zyxPXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNTM3N2JiOWRhNDFjYWExMTc2ZjQzMjI2MmRjYWE5OWM0
NzZmOWEwHhcNMjUwNzI3MDMwMTEwWhcNMjUwNzI4MDMwMTEwWjAzMTEwLwYDVQQD
Eyg5NDg0MTQ3Y2ExYmE1ZDQ4NDU2ZGRlZTUwNzMwN2RmZDU2ODY2YWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FgLV0LKsLLOC5jLQaOL5azx/gaq
sRL9ceZZM1EDP2F0wH0p1gTHAUV6mIvfgoK3YcPYqf0o9YaJUhqq0AEtFcVb5IBJ
A2qnueSv2XF0jQ0KIpsrlikgUB29M5hY9AfHRBP21S6drbWgMzuiwD3GAenMpDhO
C6Ap108WxFXBQTS9v1OZ9BHFJvhfXGkUt9VSG2btAxWXqu2FdPSpF2tEQBzCql17
olrPuoOgfRp3skUpIA2iMwX+HLvuVl1ZgYkVWNiadklihYX3w4/yhW18y63SjB4/
z/2kqIopSKQ6uchINYKJWk8a9OY8MWTO21e4dcT+kAfsrldn8wAvgpba5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSEFHyhul1IRW3e5Qcwff1Whmq+MB8GA1UdIwQY
MBaAFGxTd7udpByqEXb0MiYtyqmcR2+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2It
NmVkMTBlYmI5MzNmLzEvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2ItNmVkMTBlYmI5MzNm
LzEvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA80fHNgLW
Om3ETqdiSoieVruO1AAfOoBOp2KRs8YO6+kOR06WcQuyYjxHCopFj4bPbsTGn6y4
RtE8vFXgP+D2g2UWcpJft0YUDPx/fgpjdJiEMbO+NL9WpatoOo2a6/RYBFulAo3a
979IdEH+4QPHZ1eIyS4jI0FOzk2AaCyjtOAe0Nj//0rh58Kc3Lgtf3ZmuC8fsisK
4s32K+SVACmi//eOkdt6ZpqqYi5fx/uQVSaL6VakkJpEs9iLsYcTV8FGZYEvOGki
3idj7RqoSvmi6AU/hAFYx2IwTOezI7TPaaB2WpcMnVS/G0kI0yuNgID+uRxspmW2
2HMZ6qVeSySk2w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:32:38 2025 by rpki-client