Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
File: b95EDBTZdmUDy1yRuVC4EGLRECk.mft (raw, json)
Hash identifier: isGwNIaKTf67hwvMymLAOu12R59JZtTS4c3c0xwjAwE=
Subject key identifier: A0:7F:BB:C0:A6:21:F7:CF:AE:0A:7B:05:47:B7:95:B8:FB:D8:51:C2
Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
Certificate issuer: /CN=6fde440c14d9766503cb5c91b950b81062d11029
Certificate serial: 0197499EDAA06537AF02E79777F3E40761E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
Manifest number: 098A
Signing time: Sat 07 Jun 2025 09:00:36 +0000
Manifest this update: Sat 07 Jun 2025 09:00:36 +0000
Manifest next update: Sun 08 Jun 2025 09:00:36 +0000
Files and hashes: 1: 8dQ0OiRLtZPhu3GEjEb_mugx5KE.roa (hash: 89OURcYF/hYXZlt3wuPoB9EB6Vna11HJsZwd0rNl1Eo=)
2: b95EDBTZdmUDy1yRuVC4EGLRECk.crl (hash: L8IcIVfnS6A3/zw6KkBgA+VysoxYL/7rJ0Fc92HXBmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:da:a0:65:37:af:02:e7:97:77:f3:e4:07:61:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029
Validity
Not Before: Jun 7 09:00:36 2025 GMT
Not After : Jun 8 09:00:36 2025 GMT
Subject: CN=a07fbbc0a621f7cfae0a7b0547b795b8fbd851c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:a9:f3:a4:16:47:0a:72:a2:db:64:df:85:
27:79:1b:7f:1c:f8:d2:8f:73:fb:97:b8:b5:3f:3f:
9d:f9:53:cf:a3:aa:55:2e:54:52:2b:1f:b8:5d:ca:
7e:8e:36:c0:77:93:a7:99:e2:9a:f8:7a:2c:40:06:
e6:19:4c:13:be:30:08:ce:40:4d:c1:6c:1d:4e:95:
4e:5e:17:31:c7:2f:7b:34:13:27:a0:f8:aa:5a:aa:
af:83:f3:bf:96:10:56:87:22:08:41:77:2f:8e:87:
8d:f7:30:aa:c3:25:7c:07:51:4e:16:54:cd:d7:98:
ba:49:2a:aa:cf:a4:43:f4:f7:87:b4:0f:8f:4e:b9:
b6:c7:ad:d9:0d:b7:2e:7e:e6:1c:a4:25:a2:44:4c:
39:c5:bd:3b:5e:50:91:5c:b9:8d:c3:ee:a8:2d:cc:
74:ce:5e:af:f4:8a:6b:9a:0b:b5:02:01:9b:38:ff:
28:76:27:27:1e:38:19:92:11:81:4f:6e:77:97:07:
eb:f7:08:24:f1:7f:ca:1f:47:20:0c:f7:8d:bf:99:
ef:b0:64:e9:5b:69:98:8e:2a:b7:be:a9:05:c7:ba:
73:15:fd:e0:d7:f8:94:55:55:04:af:50:03:73:3d:
94:d8:95:f4:91:68:15:1f:24:0e:7c:64:32:75:40:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7F:BB:C0:A6:21:F7:CF:AE:0A:7B:05:47:B7:95:B8:FB:D8:51:C2
X509v3 Authority Key Identifier:
keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1c:39:f4:9b:d5:54:e5:bc:e9:de:85:73:b4:63:8e:c2:5f:
b0:45:a9:71:ea:2a:f8:cd:ca:87:09:0f:79:c7:53:9d:9d:11:
4c:f0:f0:0f:ba:e2:2d:1f:1b:93:9b:25:12:ce:70:95:c9:8d:
4d:d7:0a:3b:2e:69:75:02:ef:17:eb:7f:5f:6d:dd:24:38:ac:
ef:0c:27:a5:49:32:28:fd:ef:e8:2b:cb:fd:3e:b6:95:bb:61:
88:2d:02:20:69:f4:d9:a0:90:ac:4f:61:2e:b7:56:b0:17:f5:
2f:d6:50:96:f6:36:9c:ea:fa:bd:ec:16:9e:65:cb:60:64:30:
db:95:b5:3b:e2:0b:ad:dd:57:b3:88:f6:49:c2:a7:2b:fa:8b:
a1:00:46:81:1f:5d:5d:e7:90:0b:0a:8c:ef:8a:ae:eb:4f:76:
29:6d:c9:cd:1b:68:11:b4:3a:88:84:d9:ca:f1:40:fe:97:d9:
2b:b9:c4:6f:5d:8e:11:ad:f7:d4:36:89:ac:06:e4:4f:8d:77:
60:fd:2d:b0:a6:b0:61:ce:b6:79:f0:7f:6d:da:ae:f3:89:34:
0f:99:ba:ce:a1:52:65:58:78:58:5c:23:d4:1d:ae:4d:07:b5:
83:1a:11:9d:1f:11:12:cb:51:3b:0b:61:85:e7:a9:f6:b3:29:
b4:32:c0:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJntqgZTevAueXd/PkB2HlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZGU0NDBjMTRkOTc2NjUwM2NiNWM5MWI5NTBiODEwNjJk
MTEwMjkwHhcNMjUwNjA3MDkwMDM2WhcNMjUwNjA4MDkwMDM2WjAzMTEwLwYDVQQD
EyhhMDdmYmJjMGE2MjFmN2NmYWUwYTdiMDU0N2I3OTViOGZiZDg1MWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHyp86QWRwpyottk34UneRt/HPjS
j3P7l7i1Pz+d+VPPo6pVLlRSKx+4Xcp+jjbAd5OnmeKa+HosQAbmGUwTvjAIzkBN
wWwdTpVOXhcxxy97NBMnoPiqWqqvg/O/lhBWhyIIQXcvjoeN9zCqwyV8B1FOFlTN
15i6SSqqz6RD9PeHtA+PTrm2x63ZDbcufuYcpCWiREw5xb07XlCRXLmNw+6oLcx0
zl6v9Iprmgu1AgGbOP8odicnHjgZkhGBT253lwfr9wgk8X/KH0cgDPeNv5nvsGTp
W2mYjiq3vqkFx7pzFf3g1/iUVVUEr1ADcz2U2JX0kWgVHyQOfGQydUCrfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKB/u8CmIffPrgp7BUe3lbj72FHCMB8GA1UdIwQY
MBaAFG/eRAwU2XZlA8tckblQuBBi0RApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjk1RURCVFpkbVVEeTF5UnVWQzRFR0xSRUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xMTk5NTEtMDk1OS00YzEzLTlhMGUt
OTgxMjhlZWEzYTY1LzEvYjk1RURCVFpkbVVEeTF5UnVWQzRFR0xSRUNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xMTk5NTEtMDk1OS00YzEzLTlhMGUtOTgxMjhlZWEzYTY1
LzEvYjk1RURCVFpkbVVEeTF5UnVWQzRFR0xSRUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBw59JvV
VOW86d6Fc7RjjsJfsEWpceoq+M3KhwkPecdTnZ0RTPDwD7riLR8bk5slEs5wlcmN
TdcKOy5pdQLvF+t/X23dJDis7wwnpUkyKP3v6CvL/T62lbthiC0CIGn02aCQrE9h
LrdWsBf1L9ZQlvY2nOr6vewWnmXLYGQw25W1O+ILrd1Xs4j2ScKnK/qLoQBGgR9d
XeeQCwqM74qu6092KW3JzRtoEbQ6iITZyvFA/pfZK7nEb12OEa331DaJrAbkT413
YP0tsKawYc62efB/bdqu84k0D5m6zqFSZVh4WFwj1B2uTQe1gxoRnR8REstROwth
heep9rMptDLAFw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:40:05 2025 by rpki-client