Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
File: b1frSRlt0uBgbVl3wrdLEBt5vAs.mft (raw, json)
Hash identifier: IHMMnP2z/6//mzWTflMnK5bdSK+oCfO3w84KRFt5Wl4=
Subject key identifier: FD:0B:B5:58:46:C7:BF:D7:9F:9F:20:E3:5D:DE:3F:04:5A:54:DD:EA
Authority key identifier: 6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
Certificate issuer: /CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Certificate serial: 01974DB2D671812066BAB55E23BEF57B511F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
Manifest number: 080E
Signing time: Sun 08 Jun 2025 04:00:55 +0000
Manifest this update: Sun 08 Jun 2025 04:00:55 +0000
Manifest next update: Mon 09 Jun 2025 04:00:55 +0000
Files and hashes: 1: b1frSRlt0uBgbVl3wrdLEBt5vAs.crl (hash: 8OGRm+fRBmmBlEnBdAAxqB2ySaoQB9L3dmWZ0cX8rWI=)
2: qPQvBbAxayZH2DtXKePm47b3aIg.roa (hash: +EzjnlPCeBdtqBhNoYoGX7VYz3jpTXt4JQidHMxpNYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:d6:71:81:20:66:ba:b5:5e:23:be:f5:7b:51:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Validity
Not Before: Jun 8 04:00:55 2025 GMT
Not After : Jun 9 04:00:55 2025 GMT
Subject: CN=fd0bb55846c7bfd79f9f20e35dde3f045a54ddea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d2:56:f3:64:44:b3:f0:4c:51:5e:4d:d9:84:
38:3d:cc:09:61:1e:32:0b:06:c2:4e:db:a6:07:57:
61:a1:d6:96:b6:ae:12:f6:f8:60:2d:d2:62:b7:75:
9b:e6:3f:40:a9:05:22:e4:d9:c9:f3:0d:89:c0:63:
70:f2:7f:56:c6:25:ca:c6:96:d8:f6:bf:90:28:47:
7f:81:68:bc:17:b5:95:ce:49:66:e3:40:8a:f2:e8:
c0:aa:ea:ca:b9:fe:8a:20:4e:61:36:6d:94:d1:9e:
5a:2c:c8:34:d9:22:6f:3b:03:9a:91:52:d5:58:8b:
8d:62:4f:69:49:66:aa:f3:af:5d:da:bb:76:27:56:
21:7f:e1:1f:af:65:49:52:89:59:1d:88:9e:f3:70:
33:bd:8c:e5:95:7d:64:e0:9b:b4:08:32:99:2e:df:
72:70:39:33:ce:9c:72:a3:08:75:d8:7a:78:7f:98:
d3:69:be:44:d4:ec:35:e6:65:17:c1:23:ee:b1:a2:
a4:ff:b8:3a:73:64:d0:f9:49:e7:15:eb:74:a6:54:
06:ba:7d:95:b3:44:2d:5b:6b:02:f9:0e:ce:fc:11:
cc:91:64:25:e7:eb:93:d9:9a:d0:50:f0:fb:b0:d6:
34:5b:ee:01:f1:30:8b:c8:20:48:a3:6f:e3:70:d4:
1a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0B:B5:58:46:C7:BF:D7:9F:9F:20:E3:5D:DE:3F:04:5A:54:DD:EA
X509v3 Authority Key Identifier:
keyid:6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5f:7b:3b:f4:82:b9:da:22:54:7b:13:2a:32:f5:1c:b8:ad:
26:6c:45:d7:2e:e2:ec:ad:05:c0:00:d4:61:1a:d8:87:96:86:
00:80:52:54:8c:92:bf:15:10:4e:99:d6:38:15:d4:d5:7a:07:
3c:a0:3b:d8:75:f8:94:c4:f5:81:5d:12:2d:8a:f3:d0:2d:30:
f0:5d:9c:95:e0:75:60:4b:81:22:30:47:8e:f4:e1:cb:2d:e3:
20:3a:dc:47:32:da:ab:09:6d:f5:7b:b1:0e:ef:ce:4c:c4:c4:
ce:9f:0f:f6:04:eb:d1:6e:7f:6f:ec:9d:57:5a:b7:2d:9d:44:
59:24:39:ff:9e:29:f0:d5:c1:22:38:78:b8:e0:c5:ff:06:d9:
d8:7b:eb:a1:47:b6:fb:c3:dc:99:c5:49:c9:92:2e:17:e3:95:
e2:b5:99:ac:f1:5a:95:58:4d:ca:71:33:38:c2:b5:f1:06:40:
87:2f:dc:a2:46:ac:de:3b:5c:63:6a:14:a6:f6:03:76:36:b0:
30:04:e5:22:12:a0:f7:21:af:66:29:e4:21:cf:88:a7:5d:c8:
c0:87:f2:83:4d:45:a7:f2:7f:95:65:c8:71:28:ed:f8:41:54:
fd:40:64:00:80:19:4a:f6:f2:3e:c6:0c:6c:4f:1c:e8:3c:b6:
52:42:4c:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNstZxgSBmurVeI771e1EfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNTdlYjQ5MTk2ZGQyZTA2MDZkNTk3N2MyYjc0YjEwMWI3
OWJjMGIwHhcNMjUwNjA4MDQwMDU1WhcNMjUwNjA5MDQwMDU1WjAzMTEwLwYDVQQD
EyhmZDBiYjU1ODQ2YzdiZmQ3OWY5ZjIwZTM1ZGRlM2YwNDVhNTRkZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39JW82REs/BMUV5N2YQ4PcwJYR4y
CwbCTtumB1dhodaWtq4S9vhgLdJit3Wb5j9AqQUi5NnJ8w2JwGNw8n9WxiXKxpbY
9r+QKEd/gWi8F7WVzklm40CK8ujAqurKuf6KIE5hNm2U0Z5aLMg02SJvOwOakVLV
WIuNYk9pSWaq869d2rt2J1Yhf+Efr2VJUolZHYie83AzvYzllX1k4Ju0CDKZLt9y
cDkzzpxyowh12Hp4f5jTab5E1Ow15mUXwSPusaKk/7g6c2TQ+UnnFet0plQGun2V
s0QtW2sC+Q7O/BHMkWQl5+uT2ZrQUPD7sNY0W+4B8TCLyCBIo2/jcNQaowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0LtVhGx7/Xn58g413ePwRaVN3qMB8GA1UdIwQY
MBaAFG9X60kZbdLgYG1Zd8K3SxAbebwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjFmclNSbHQwdUJnYlZsM3dyZExFQnQ1dkFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jN2JmNGEtZGE5Ny00YjViLTg3MTkt
MzdiM2UyNDRjMDYzLzEvYjFmclNSbHQwdUJnYlZsM3dyZExFQnQ1dkFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9jN2JmNGEtZGE5Ny00YjViLTg3MTktMzdiM2UyNDRjMDYz
LzEvYjFmclNSbHQwdUJnYlZsM3dyZExFQnQ1dkFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk197O/SC
udoiVHsTKjL1HLitJmxF1y7i7K0FwADUYRrYh5aGAIBSVIySvxUQTpnWOBXU1XoH
PKA72HX4lMT1gV0SLYrz0C0w8F2cleB1YEuBIjBHjvThyy3jIDrcRzLaqwlt9Xux
Du/OTMTEzp8P9gTr0W5/b+ydV1q3LZ1EWSQ5/54p8NXBIjh4uODF/wbZ2HvroUe2
+8PcmcVJyZIuF+OV4rWZrPFalVhNynEzOMK18QZAhy/cokas3jtcY2oUpvYDdjaw
MATlIhKg9yGvZinkIc+Ip13IwIfyg01Fp/J/lWXIcSjt+EFU/UBkAIAZSvbyPsYM
bE8c6Dy2UkJM/w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:07:31 2025 by rpki-client