Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
File: bEme6h8J0BEiUo1BdU03xcqjS6c.mft (raw, json)
Hash identifier: SfSSe2Fgx8hcHrIfO4+xprs3Nip4BMzQUVO4cuWIvcI=
Subject key identifier: 32:72:11:14:30:1A:0D:9A:1D:43:AC:FD:AB:72:04:FF:3D:66:F1:FC
Authority key identifier: 6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
Certificate issuer: /CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Certificate serial: 019763CCD414BB8D60C48D1FC0DA9E1683A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
Manifest number: 0B5C
Signing time: Thu 12 Jun 2025 11:00:57 +0000
Manifest this update: Thu 12 Jun 2025 11:00:57 +0000
Manifest next update: Fri 13 Jun 2025 11:00:57 +0000
Files and hashes: 1: bEme6h8J0BEiUo1BdU03xcqjS6c.crl (hash: iexbiop4kSowMvUX3ExMYKg8Qt1imJZvezl91Y/NeDw=)
2: kqOQ78t4w6FZpmwe4_k_12IlEMA.roa (hash: HyBjAoXV0kXvavyvJersLyuqJgRnm+q7hrBZfg1KGdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:cc:d4:14:bb:8d:60:c4:8d:1f:c0:da:9e:16:83:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Validity
Not Before: Jun 12 11:00:57 2025 GMT
Not After : Jun 13 11:00:57 2025 GMT
Subject: CN=32721114301a0d9a1d43acfdab7204ff3d66f1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:3e:a6:4b:2d:2c:c7:13:12:d7:4f:4d:4b:
45:84:68:7f:e3:70:5b:eb:ff:33:cc:8e:b4:62:af:
28:62:c9:5c:47:4d:ed:a5:00:45:7e:fd:99:69:5c:
3f:f7:11:0c:35:41:5c:2f:ba:21:24:41:a9:7e:90:
5e:57:c8:5b:b9:dc:d9:0e:c7:4f:e7:4d:9a:fb:af:
cb:81:8c:97:93:c8:5f:da:18:f6:04:79:0c:e9:52:
df:b5:12:cf:d6:37:54:14:b2:06:1b:bc:d4:ef:ba:
00:8a:8c:9f:d3:db:03:04:38:b1:ca:97:f0:43:77:
db:9b:45:38:1e:17:3d:41:a7:b4:b3:82:ef:92:12:
2e:29:96:5b:9a:bc:90:10:41:ad:fc:57:96:b4:2f:
9b:80:f3:27:c2:d4:89:42:57:22:be:d0:a2:5c:f7:
d3:69:db:94:7e:25:cb:09:74:e4:1c:a9:b1:bd:95:
9d:93:1e:de:b7:69:cf:b1:fc:ac:b4:c0:e0:da:cb:
30:eb:4b:7a:64:19:00:15:09:9e:2e:06:55:f5:72:
2c:3d:a0:5c:67:7e:ef:49:a1:46:d5:eb:05:79:cc:
44:f6:35:92:86:ba:2c:87:31:59:e0:8c:ae:79:1c:
aa:19:28:a2:71:d1:20:97:5a:c7:0e:7e:6f:29:1d:
13:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:72:11:14:30:1A:0D:9A:1D:43:AC:FD:AB:72:04:FF:3D:66:F1:FC
X509v3 Authority Key Identifier:
keyid:6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6e:27:6c:20:bc:8f:2f:30:e3:15:cb:87:22:3b:fc:9d:70:
a0:8d:0f:fa:47:18:91:ec:95:95:99:11:e2:d2:0c:ca:c4:ef:
98:d3:4b:54:f7:87:33:7a:c9:76:4f:0f:cc:f4:4e:3e:a6:d1:
3a:03:24:63:bc:a5:0f:7f:d1:1e:5d:dd:9c:8f:df:37:dc:54:
7a:08:98:5c:64:13:91:5e:6e:be:24:a0:a9:75:bb:15:1a:a4:
2c:d1:dc:00:b3:b3:92:c5:98:b9:05:41:4a:53:8f:4e:32:b2:
97:63:bd:b4:8c:a8:57:2b:e8:41:07:21:f9:9b:c1:31:13:c8:
3e:29:42:22:f0:d0:2b:92:a8:55:7c:b7:4c:33:1a:21:ca:a1:
da:14:5e:59:6a:a7:01:a9:a5:83:a5:a9:b8:ea:18:6f:d7:00:
24:e8:16:cf:e0:c3:cc:ac:4d:1c:82:70:c5:9c:d3:05:1f:4b:
33:00:6c:60:0a:40:34:81:aa:18:1b:34:ad:0d:3a:d2:ff:c2:
68:09:87:59:99:c8:19:0e:cc:1e:56:fc:8f:27:13:64:7c:08:
c9:b2:a5:2f:09:74:4d:a3:90:bb:6d:78:09:65:46:dc:20:eb:
75:47:6d:6c:1c:e4:6e:b0:53:df:83:29:35:21:f4:48:2a:36:
9f:9f:6d:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdjzNQUu41gxI0fwNqeFoOpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNDk5ZWVhMWYwOWQwMTEyMjUyOGQ0MTc1NGQzN2M1Y2Fh
MzRiYTcwHhcNMjUwNjEyMTEwMDU3WhcNMjUwNjEzMTEwMDU3WjAzMTEwLwYDVQQD
EygzMjcyMTExNDMwMWEwZDlhMWQ0M2FjZmRhYjcyMDRmZjNkNjZmMWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziQ+pkstLMcTEtdPTUtFhGh/43Bb
6/8zzI60Yq8oYslcR03tpQBFfv2ZaVw/9xEMNUFcL7ohJEGpfpBeV8hbudzZDsdP
502a+6/LgYyXk8hf2hj2BHkM6VLftRLP1jdUFLIGG7zU77oAioyf09sDBDixypfw
Q3fbm0U4Hhc9Qae0s4LvkhIuKZZbmryQEEGt/FeWtC+bgPMnwtSJQlcivtCiXPfT
aduUfiXLCXTkHKmxvZWdkx7et2nPsfystMDg2ssw60t6ZBkAFQmeLgZV9XIsPaBc
Z37vSaFG1esFecxE9jWShroshzFZ4IyueRyqGSiicdEgl1rHDn5vKR0TMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJyERQwGg2aHUOs/atyBP89ZvH8MB8GA1UdIwQY
MBaAFGxJnuofCdARIlKNQXVNN8XKo0unMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkVtZTZoOEowQkVpVW8xQmRVMDN4Y3FqUzZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iZGViMjctMzQzNC00MjU0LTgyNDEt
N2ZkZGQyMjIwMmJmLzEvYkVtZTZoOEowQkVpVW8xQmRVMDN4Y3FqUzZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iZGViMjctMzQzNC00MjU0LTgyNDEtN2ZkZGQyMjIwMmJm
LzEvYkVtZTZoOEowQkVpVW8xQmRVMDN4Y3FqUzZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfG4nbCC8
jy8w4xXLhyI7/J1woI0P+kcYkeyVlZkR4tIMysTvmNNLVPeHM3rJdk8PzPROPqbR
OgMkY7ylD3/RHl3dnI/fN9xUegiYXGQTkV5uviSgqXW7FRqkLNHcALOzksWYuQVB
SlOPTjKyl2O9tIyoVyvoQQch+ZvBMRPIPilCIvDQK5KoVXy3TDMaIcqh2hReWWqn
Aamlg6WpuOoYb9cAJOgWz+DDzKxNHIJwxZzTBR9LMwBsYApANIGqGBs0rQ060v/C
aAmHWZnIGQ7MHlb8jycTZHwIybKlLwl0TaOQu214CWVG3CDrdUdtbBzkbrBT34Mp
NSH0SCo2n59tbg==
-----END CERTIFICATE-----
Generated at Thu Jun 12 19:20:19 2025 by rpki-client