Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
File: BXEVMhUM58l6fqSMDXekLm8NX8M.mft (raw, json)
Hash identifier: FrCvB6Bj1CzD8dtYeeW36TtHk39D4AZggFy6TRzfR5k=
Subject key identifier: 1F:59:22:D2:8D:C0:49:4F:48:47:70:56:36:AA:66:2B:A0:A1:50:C2
Authority key identifier: 05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
Certificate issuer: /CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Certificate serial: 01976FD0FA74D8006F8F9FFBE0B5A2B3CE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
Manifest number: 0617
Signing time: Sat 14 Jun 2025 19:00:55 +0000
Manifest this update: Sat 14 Jun 2025 19:00:55 +0000
Manifest next update: Sun 15 Jun 2025 19:00:55 +0000
Files and hashes: 1: BXEVMhUM58l6fqSMDXekLm8NX8M.crl (hash: 4SThk9pA9cYm78L0dHkcGFiUo0WMvcdJIc2mmKRBlgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:fa:74:d8:00:6f:8f:9f:fb:e0:b5:a2:b3:ce:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Validity
Not Before: Jun 14 19:00:55 2025 GMT
Not After : Jun 15 19:00:55 2025 GMT
Subject: CN=1f5922d28dc0494f4847705636aa662ba0a150c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:d7:dc:00:5a:e6:7a:09:0f:a4:ff:6c:7e:
4e:60:d3:35:3e:78:e6:89:2a:84:e7:65:ea:ba:21:
24:56:e1:ff:a0:04:86:f3:76:7a:ac:51:cf:3a:67:
e4:59:73:43:d2:1b:fa:fc:61:92:51:f8:cd:07:97:
0e:45:70:22:f3:f1:44:59:45:11:ba:f9:3b:64:7a:
53:9c:64:c6:e7:91:6a:af:41:ae:9a:f6:d3:a9:96:
19:00:99:47:02:e8:94:e7:3d:18:69:9b:c7:4c:93:
27:f1:53:b2:39:0b:63:33:31:1b:d4:e5:48:c4:54:
b6:c1:58:e3:f7:06:54:4a:4f:91:45:fd:e0:61:68:
38:25:1a:ac:9d:d4:b8:3c:e8:6b:45:c3:5b:87:6d:
04:f7:f1:28:37:05:45:9e:8f:2d:ec:57:20:63:94:
16:a0:7d:fe:74:6b:db:00:db:1a:aa:fc:14:8a:bd:
1a:1f:25:4c:0e:b7:db:91:9a:72:e1:45:ea:51:85:
61:7a:2a:6b:f3:0d:13:97:c4:f7:f9:ac:9c:5d:ac:
23:2b:48:0c:76:2e:85:34:79:1c:bc:6a:21:6d:3b:
f1:da:98:bf:f4:7c:e6:15:70:93:89:68:b2:b1:56:
98:b1:a1:ba:40:f7:c5:39:e5:a1:15:29:57:dd:f6:
e1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:59:22:D2:8D:C0:49:4F:48:47:70:56:36:AA:66:2B:A0:A1:50:C2
X509v3 Authority Key Identifier:
keyid:05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a5:2b:b1:e0:9c:e5:c9:a7:74:0b:89:8a:26:8c:4f:65:a9:
55:df:4b:d1:60:4a:35:20:de:98:8d:9f:ce:70:1a:c6:26:88:
38:2b:7a:21:e9:3a:d6:26:99:70:35:0c:74:54:08:84:45:8f:
ec:0d:e8:21:c0:b0:0e:dc:9a:76:12:23:dd:53:34:e2:c6:59:
fe:79:90:00:37:15:4b:d9:da:f3:7d:fb:6c:d9:8e:34:99:4d:
01:49:e3:e4:23:a3:c7:51:bb:df:d4:ea:75:8c:55:5d:a1:21:
93:d7:fb:22:e6:22:2c:5e:f4:90:70:38:79:8a:3f:43:84:c6:
05:b4:b9:29:32:48:4f:d4:17:87:fe:94:93:cd:19:1c:c0:61:
e2:7b:28:fc:cc:62:b2:a4:25:71:76:26:48:aa:10:94:43:1b:
ee:5a:a4:e5:ed:e6:8f:45:46:f6:02:3a:0d:d4:aa:a0:ca:b4:
c3:83:e9:1d:f5:b9:29:25:50:35:af:ff:34:34:e4:c9:2f:a8:
46:44:cc:71:cc:db:bf:87:6c:32:f0:ff:b9:b0:a4:82:7b:05:
22:04:d3:96:27:2a:7a:27:38:89:a9:4c:b8:e8:50:04:29:98:
52:e8:30:80:1c:74:db:56:a2:da:cf:02:31:a6:25:97:ac:61:
ad:2d:3a:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0Pp02ABvj5/74LWis85xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzExNTMyMTUwY2U3Yzk3YTdlYTQ4YzBkNzdhNDJlNmYw
ZDVmYzMwHhcNMjUwNjE0MTkwMDU1WhcNMjUwNjE1MTkwMDU1WjAzMTEwLwYDVQQD
EygxZjU5MjJkMjhkYzA0OTRmNDg0NzcwNTYzNmFhNjYyYmEwYTE1MGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/LX3ABa5noJD6T/bH5OYNM1Pnjm
iSqE52XquiEkVuH/oASG83Z6rFHPOmfkWXND0hv6/GGSUfjNB5cORXAi8/FEWUUR
uvk7ZHpTnGTG55Fqr0GumvbTqZYZAJlHAuiU5z0YaZvHTJMn8VOyOQtjMzEb1OVI
xFS2wVjj9wZUSk+RRf3gYWg4JRqsndS4POhrRcNbh20E9/EoNwVFno8t7FcgY5QW
oH3+dGvbANsaqvwUir0aHyVMDrfbkZpy4UXqUYVheipr8w0Tl8T3+aycXawjK0gM
di6FNHkcvGohbTvx2pi/9HzmFXCTiWiysVaYsaG6QPfFOeWhFSlX3fbhZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9ZItKNwElPSEdwVjaqZiugoVDCMB8GA1UdIwQY
MBaAFAVxFTIVDOfJen6kjA13pC5vDV/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80ZDg5ZDYtNDQ2NS00MzIxLTkyODIt
N2JjZmQ2NGUwMjg4LzEvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80ZDg5ZDYtNDQ2NS00MzIxLTkyODItN2JjZmQ2NGUwMjg4
LzEvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6UrseCc
5cmndAuJiiaMT2WpVd9L0WBKNSDemI2fznAaxiaIOCt6Iek61iaZcDUMdFQIhEWP
7A3oIcCwDtyadhIj3VM04sZZ/nmQADcVS9na8337bNmONJlNAUnj5COjx1G739Tq
dYxVXaEhk9f7IuYiLF70kHA4eYo/Q4TGBbS5KTJIT9QXh/6Uk80ZHMBh4nso/Mxi
sqQlcXYmSKoQlEMb7lqk5e3mj0VG9gI6DdSqoMq0w4PpHfW5KSVQNa//NDTkyS+o
RkTMcczbv4dsMvD/ubCkgnsFIgTTlicqeic4ialMuOhQBCmYUugwgBx021ai2s8C
MaYll6xhrS069Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:02:49 2025 by rpki-client