Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
File: bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft (raw, json)
Hash identifier: dG/q9Vy9WLAkewytTip8wSPT9L++ah6XJXOcqxvzyJc=
Subject key identifier: 1A:D2:E0:D3:9A:E4:ED:1E:A4:76:62:D7:50:FF:92:BE:C0:7B:6F:6C
Authority key identifier: 6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
Certificate issuer: /CN=6ce3fb867861daafd781279897fe25a8eb371468
Certificate serial: 01974A0C8B6F04AEE92B1BB265F594F83865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
Manifest number: 01D0
Signing time: Sat 07 Jun 2025 11:00:25 +0000
Manifest this update: Sat 07 Jun 2025 11:00:25 +0000
Manifest next update: Sun 08 Jun 2025 11:00:25 +0000
Files and hashes: 1: EH31K6AeAlTxuZgsWC0CP6nqgCw.roa (hash: 5F10SKVR7MZweS+vgHdYbBmQMLKWeQTvpJE6zRYHQ8A=)
2: bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl (hash: l81m/zHz35uWn7fpalZNiuw9EOOCf2yHaOiIoWWIb00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:8b:6f:04:ae:e9:2b:1b:b2:65:f5:94:f8:38:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce3fb867861daafd781279897fe25a8eb371468
Validity
Not Before: Jun 7 11:00:25 2025 GMT
Not After : Jun 8 11:00:25 2025 GMT
Subject: CN=1ad2e0d39ae4ed1ea47662d750ff92bec07b6f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:87:d6:92:a3:4b:d0:df:cc:30:fe:aa:cd:7a:
c9:fb:b1:b3:5c:11:5e:5b:e6:95:e9:f5:e6:19:95:
4a:ac:ec:bd:58:ff:0e:63:21:f0:b3:2c:4d:a5:aa:
90:ae:94:d8:5e:a4:be:f4:59:9c:0b:86:a9:ee:a6:
95:0f:bc:37:7c:fc:c1:bb:82:67:94:27:95:92:bc:
f4:a4:ac:92:3d:5b:90:53:8c:e2:1d:54:7c:7c:ec:
7f:0e:e9:f3:48:0d:dc:26:33:b8:e7:f2:90:a5:3f:
2d:08:88:4a:f4:06:b6:9a:16:26:a4:79:30:bd:3d:
3a:80:cf:c3:b0:c1:85:f3:a4:6e:60:ee:0b:45:0c:
0e:a1:fc:0d:4b:66:c2:11:5b:27:98:e0:3c:99:8b:
75:78:7a:2c:e2:0a:9c:61:bc:02:2a:71:d4:f3:0b:
96:aa:63:75:2f:eb:02:cb:0b:5e:75:d7:c3:47:ed:
68:f7:ca:53:b4:c5:ab:cb:58:48:ba:7f:72:75:75:
87:98:a7:45:e1:a9:53:78:f5:ad:da:ba:96:52:77:
bd:cf:bc:40:e9:80:7d:31:72:0e:25:ee:9e:af:99:
9a:f9:03:ee:f8:e4:7b:cd:1c:0d:7b:2d:50:20:cb:
90:50:95:a9:3c:e4:3e:49:fe:05:d7:3f:34:39:b6:
24:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D2:E0:D3:9A:E4:ED:1E:A4:76:62:D7:50:FF:92:BE:C0:7B:6F:6C
X509v3 Authority Key Identifier:
keyid:6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a2:77:d2:43:78:10:72:0c:0c:08:df:ee:de:91:b9:50:66:
15:d7:a0:23:4e:91:79:d5:20:b1:70:91:be:c4:d1:d9:e5:a7:
06:6a:dc:0e:f2:22:21:a2:31:a4:d3:c6:b9:2d:a9:42:49:65:
aa:89:df:8d:c5:8a:6d:9c:01:c6:b3:4b:bb:63:3b:ed:fa:38:
af:4b:c3:cb:0e:f0:80:ab:09:d1:2f:d1:95:e2:d7:93:e2:44:
55:64:77:93:98:c2:f6:34:65:2a:fc:20:aa:57:1e:05:bc:d1:
ec:fe:bc:9e:bb:e0:74:8b:74:8f:6f:95:a1:6e:4e:ff:e2:1b:
67:f7:95:4f:ca:05:6b:70:06:0a:da:18:c2:41:2a:19:7f:5e:
a1:83:3e:ff:87:1a:01:15:ad:80:88:b8:2f:3e:ac:b4:b5:06:
1f:14:4c:c5:61:b7:50:a8:a0:2b:a9:a9:99:85:71:15:43:8f:
cf:b3:87:c3:bd:fa:a6:d6:86:41:59:ea:b8:f0:7e:cf:ba:1b:
49:1b:b8:14:89:1d:67:18:db:fd:d0:92:c8:c7:1b:cd:24:c9:
07:d9:37:ae:89:2c:9a:c6:36:11:d5:2d:b2:21:82:01:eb:d7:
c6:57:bc:bf:e5:29:78:52:31:ba:36:63:13:40:81:32:83:aa:
74:94:37:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDItvBK7pKxuyZfWU+DhlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZTNmYjg2Nzg2MWRhYWZkNzgxMjc5ODk3ZmUyNWE4ZWIz
NzE0NjgwHhcNMjUwNjA3MTEwMDI1WhcNMjUwNjA4MTEwMDI1WjAzMTEwLwYDVQQD
EygxYWQyZTBkMzlhZTRlZDFlYTQ3NjYyZDc1MGZmOTJiZWMwN2I2ZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjofWkqNL0N/MMP6qzXrJ+7GzXBFe
W+aV6fXmGZVKrOy9WP8OYyHwsyxNpaqQrpTYXqS+9FmcC4ap7qaVD7w3fPzBu4Jn
lCeVkrz0pKySPVuQU4ziHVR8fOx/DunzSA3cJjO45/KQpT8tCIhK9Aa2mhYmpHkw
vT06gM/DsMGF86RuYO4LRQwOofwNS2bCEVsnmOA8mYt1eHos4gqcYbwCKnHU8wuW
qmN1L+sCywteddfDR+1o98pTtMWry1hIun9ydXWHmKdF4alTePWt2rqWUne9z7xA
6YB9MXIOJe6er5ma+QPu+OR7zRwNey1QIMuQUJWpPOQ+Sf4F1z80ObYkUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrS4NOa5O0epHZi11D/kr7Ae29sMB8GA1UdIwQY
MBaAFGzj+4Z4Ydqv14EnmJf+JajrNxRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk9QN2huaGgycV9YZ1NlWWxfNGxxT3MzRkdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jM2Y5OTUtODZlZi00YTY3LWFjYWMt
ZTQzOTFmYmNhZjE0LzEvYk9QN2huaGgycV9YZ1NlWWxfNGxxT3MzRkdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jM2Y5OTUtODZlZi00YTY3LWFjYWMtZTQzOTFmYmNhZjE0
LzEvYk9QN2huaGgycV9YZ1NlWWxfNGxxT3MzRkdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqJ30kN4
EHIMDAjf7t6RuVBmFdegI06RedUgsXCRvsTR2eWnBmrcDvIiIaIxpNPGuS2pQkll
qonfjcWKbZwBxrNLu2M77fo4r0vDyw7wgKsJ0S/RleLXk+JEVWR3k5jC9jRlKvwg
qlceBbzR7P68nrvgdIt0j2+VoW5O/+IbZ/eVT8oFa3AGCtoYwkEqGX9eoYM+/4ca
ARWtgIi4Lz6stLUGHxRMxWG3UKigK6mpmYVxFUOPz7OHw736ptaGQVnquPB+z7ob
SRu4FIkdZxjb/dCSyMcbzSTJB9k3roksmsY2EdUtsiGCAevXxle8v+UpeFIxujZj
E0CBMoOqdJQ3dA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:51:33 2025 by rpki-client