Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
File: 1-BogUgUmddRTm4f1-5xpTb9DJh4.mft (raw, json)
Hash identifier: hGg9womWGg3htVMqoDtsNZ1aP95Yo845mwbCKGwXkFg=
Subject key identifier: B4:86:23:25:67:07:A5:D2:C4:A8:C6:C3:0B:A0:A5:95:BF:8B:05:95
Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Certificate issuer: /CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Certificate serial: 0199221F3CB9BFC79A3E2AD3462572BFE29D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
Manifest number: 0CC3
Signing time: Sun 07 Sep 2025 03:01:36 +0000
Manifest this update: Sun 07 Sep 2025 03:01:36 +0000
Manifest next update: Mon 08 Sep 2025 03:01:36 +0000
Files and hashes: 1: 1-BogUgUmddRTm4f1-5xpTb9DJh4.crl (hash: 2V1F253fFCk22saFrzYyP3yyd2k16+hg5ZVj036zJrM=)
2: FAKXs32RTJhJGvnWYSpaYh74Joo.roa (hash: GNLsP2LR6gKVvZU85Er+QUF1ICOlY9gVJmojhgR/T8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:3c:b9:bf:c7:9a:3e:2a:d3:46:25:72:bf:e2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Validity
Not Before: Sep 7 03:01:36 2025 GMT
Not After : Sep 8 03:01:36 2025 GMT
Subject: CN=b48623256707a5d2c4a8c6c30ba0a595bf8b0595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:bb:9b:2d:dc:6a:59:01:8e:57:02:6f:28:82:
f6:16:98:2c:1f:03:13:12:2b:5e:56:94:ba:bd:fb:
46:12:d6:fe:65:ed:c7:ee:53:cd:a5:a3:31:37:1a:
1d:18:1c:6d:e4:68:e4:82:fd:b5:64:61:c1:ac:dd:
1f:1b:2e:59:2d:94:54:51:5d:cc:52:a0:f7:33:4c:
05:b3:84:63:65:6a:f9:fa:bd:b5:99:9f:5f:3e:59:
a6:2a:22:25:c4:e3:a9:b4:09:f8:18:d8:42:d4:33:
52:d5:76:66:7d:ca:88:b2:ef:ef:f6:cb:dd:e3:f5:
3a:3d:c7:7e:77:20:81:76:8c:72:5d:31:51:a4:3b:
87:2c:5a:d7:8b:23:10:b0:1c:34:f9:96:0d:85:a7:
84:67:84:83:c1:b0:92:b2:e3:f7:0f:74:56:5b:5f:
53:35:ef:07:c5:9a:6e:65:e4:80:09:a7:45:22:e4:
89:3d:b7:cc:23:d1:9b:cb:f9:01:e0:75:4e:f6:58:
6e:eb:2b:25:3a:2e:8e:12:0f:09:36:83:85:77:14:
6f:d4:1f:d3:9b:55:98:6c:de:dd:38:7c:d5:4d:7a:
c0:7b:76:aa:03:bc:a5:14:cb:f7:17:af:6f:72:d0:
53:bd:b0:96:29:bc:e0:1c:63:1f:cc:76:bf:07:c7:
b7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:86:23:25:67:07:A5:D2:C4:A8:C6:C3:0B:A0:A5:95:BF:8B:05:95
X509v3 Authority Key Identifier:
keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:aa:43:ea:68:ae:b0:9a:0a:fe:cd:b7:1f:51:e2:74:2c:d4:
f1:f6:6d:ad:11:68:5c:85:e5:8d:c6:d4:16:0d:3f:0e:92:ad:
07:51:22:f9:dd:31:89:8d:10:70:fa:b8:ff:e5:73:0e:c0:27:
db:e8:a3:a7:0c:e4:ff:e2:d7:4d:7c:4c:df:d0:4b:4c:fe:4d:
c1:df:09:bf:09:55:b1:4c:33:1f:9b:9b:c3:f5:0b:bb:f9:87:
1f:4d:f8:89:58:6f:05:dd:f5:6c:0e:84:bf:b0:70:66:82:b6:
65:76:c8:ca:88:69:22:45:d7:3f:10:32:f6:8d:59:19:41:42:
7c:27:c1:8d:01:cc:d9:59:1e:81:e7:3e:37:20:9c:50:82:2f:
94:a7:41:9b:c0:0c:ca:3b:38:b0:81:05:f4:95:05:7e:f9:58:
2e:dd:ab:bc:dd:ce:4e:1e:5d:ea:f2:1c:1f:b9:67:ec:18:08:
b4:ed:b1:88:33:18:3b:7c:1b:ee:b7:12:8a:ee:af:6a:16:e1:
71:77:80:ec:41:b4:f0:57:25:42:ab:e1:33:f1:e0:4f:2f:f6:
2c:8e:4c:25:4b:77:6c:54:d8:9a:a7:29:45:27:78:5d:d8:a8:
94:24:97:5a:b6:dd:f2:4f:bb:37:7a:c6:66:49:74:87:fa:85:
9a:85:5f:e2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZkiHzy5v8eaPirTRiVyv+KdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MWEyMDUyMDUyNjc1ZDQ1MzliODdmNWZiOWM2OTRkYmY0
MzI2MWUwHhcNMjUwOTA3MDMwMTM2WhcNMjUwOTA4MDMwMTM2WjAzMTEwLwYDVQQD
EyhiNDg2MjMyNTY3MDdhNWQyYzRhOGM2YzMwYmEwYTU5NWJmOGIwNTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LubLdxqWQGOVwJvKIL2FpgsHwMT
EiteVpS6vftGEtb+Ze3H7lPNpaMxNxodGBxt5Gjkgv21ZGHBrN0fGy5ZLZRUUV3M
UqD3M0wFs4RjZWr5+r21mZ9fPlmmKiIlxOOptAn4GNhC1DNS1XZmfcqIsu/v9svd
4/U6Pcd+dyCBdoxyXTFRpDuHLFrXiyMQsBw0+ZYNhaeEZ4SDwbCSsuP3D3RWW19T
Ne8HxZpuZeSACadFIuSJPbfMI9Gby/kB4HVO9lhu6yslOi6OEg8JNoOFdxRv1B/T
m1WYbN7dOHzVTXrAe3aqA7ylFMv3F69vctBTvbCWKbzgHGMfzHa/B8e3owIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLSGIyVnB6XSxKjGwwugpZW/iwWVMB8GA1UdIwQY
MBaAFPgaIFIFJnXUU5uH9fucaU2/QyYeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Cb2dVZ1VtZGRSVG00ZjEtNXhwVGI5REpoNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvMGRmMmVmLWZmYzktNDQ1Ny05ZjRh
LTc3MTJmYmYxNjFjMS8xLzEtQm9nVWdVbWRkUlRtNGYxLTV4cFRiOURKaDQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQ5LzBkZjJlZi1mZmM5LTQ0NTctOWY0YS03NzEyZmJmMTYx
YzEvMS8xLUJvZ1VnVW1kZFJUbTRmMS01eHBUYjlESmg0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAapD
6miusJoK/s23H1HidCzU8fZtrRFoXIXljcbUFg0/DpKtB1Ei+d0xiY0QcPq4/+Vz
DsAn2+ijpwzk/+LXTXxM39BLTP5Nwd8JvwlVsUwzH5ubw/ULu/mHH034iVhvBd31
bA6Ev7BwZoK2ZXbIyohpIkXXPxAy9o1ZGUFCfCfBjQHM2Vkegec+NyCcUIIvlKdB
m8AMyjs4sIEF9JUFfvlYLt2rvN3OTh5d6vIcH7ln7BgItO2xiDMYO3wb7rcSiu6v
ahbhcXeA7EG08FclQqvhM/HgTy/2LI5MJUt3bFTYmqcpRSd4XdiolCSXWrbd8k+7
N3rGZkl0h/qFmoVf4g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:15 2025 by rpki-client