Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
File: b1xXEvu82DJBnUxYhK47w8Shbns.mft (raw, json)
Hash identifier: ek/ER6fgvdZzHON4jeBgbiC5gSvwCpsRipt1VcmZ3ps=
Subject key identifier: BB:DD:4C:15:CB:06:2A:34:BD:F8:40:77:41:B3:20:01:3D:4B:00:5A
Authority key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Certificate issuer: /CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Certificate serial: 01974FA10F10EB77F109768BEDF0DC3FEE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
Manifest number: 1587
Signing time: Sun 08 Jun 2025 13:00:44 +0000
Manifest this update: Sun 08 Jun 2025 13:00:44 +0000
Manifest next update: Mon 09 Jun 2025 13:00:44 +0000
Files and hashes: 1: 383xruHS9gjuKR0YjGqV2ugUrGs.roa (hash: yHlfc6+ACf2WRV0TaB1YAv4EeJOrblQempkg7RUI1mU=)
2: ZNc2R38IFzIz7kBedhBa4EVwaEk.roa (hash: EpA69Eq6Q+KV+gO/Q6uVQrzX/PppOsS4DI+GMDk1VRA=)
3: b1xXEvu82DJBnUxYhK47w8Shbns.crl (hash: QWoTNmj2VOeCLd9qNR3VQWy1dRkVwqa+XCmzQZKnoOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:0f:10:eb:77:f1:09:76:8b:ed:f0:dc:3f:ee:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Validity
Not Before: Jun 8 13:00:44 2025 GMT
Not After : Jun 9 13:00:44 2025 GMT
Subject: CN=bbdd4c15cb062a34bdf8407741b320013d4b005a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:89:01:ba:79:f2:c0:fa:4c:f1:7f:81:58:
31:8d:e9:f7:f4:bd:9e:bf:4c:e9:74:8b:c1:ca:6b:
58:ca:8c:9c:40:e5:95:ff:2c:5f:b3:47:dd:34:d1:
88:88:05:81:41:5d:5e:b4:7d:1b:31:50:ae:38:61:
73:95:d6:a3:bd:2a:57:ad:07:88:8e:5f:1a:c7:76:
9e:1c:97:2a:b0:3e:28:7f:6d:28:d5:6d:e8:ea:86:
d5:76:02:61:26:71:7a:6a:39:13:26:f5:18:69:14:
90:0a:e9:83:ab:1b:57:2e:05:63:9a:90:d7:c7:60:
4b:e6:16:a3:40:84:a9:e0:73:0c:a1:60:86:84:f2:
a0:33:48:70:86:49:49:e9:0d:18:99:82:30:7c:ee:
53:21:db:8f:a3:f6:70:7e:c0:74:1f:85:55:71:f7:
77:30:1f:39:9c:77:22:35:90:19:0b:bf:85:d2:33:
68:c7:2e:3d:dc:a7:c8:57:41:70:d2:b0:17:f9:0e:
4b:01:81:ae:2f:31:5b:23:cf:8c:c2:e8:86:8c:29:
2c:f5:10:15:a0:6e:19:5c:a2:fb:43:d8:a5:62:85:
36:b7:70:f2:74:83:da:4a:ab:2f:ac:75:7d:ed:ef:
8f:6e:99:6e:f4:bb:83:09:b5:0a:e6:7a:32:12:1c:
d2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DD:4C:15:CB:06:2A:34:BD:F8:40:77:41:B3:20:01:3D:4B:00:5A
X509v3 Authority Key Identifier:
keyid:6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:9a:0d:a5:95:0f:c3:ad:04:86:6d:9d:55:a1:f8:46:79:8d:
6e:dc:a2:1e:28:5b:60:59:e9:5d:c8:54:95:5d:2f:cb:e8:9b:
02:17:0e:07:d7:16:97:ef:13:88:d4:2f:9a:25:ac:99:29:8b:
bb:c4:5f:47:b0:ee:5a:3a:da:ee:dd:19:59:75:2a:89:93:74:
f1:57:be:10:5f:e8:b5:8d:1f:9e:85:4e:33:08:86:d2:a5:9d:
63:1a:d1:f3:7e:23:e0:28:0b:7d:57:8e:fa:a8:e6:2c:c3:9d:
58:6f:d1:ea:6e:97:6e:4a:f9:0a:27:35:00:2f:15:f4:98:94:
ad:c2:c7:d0:c9:56:3f:c2:69:c9:a9:de:73:ba:51:53:27:fb:
81:0f:be:56:ef:76:98:22:c4:a6:be:08:8e:c8:08:49:d8:fb:
d2:73:f5:61:9a:e7:91:97:71:a8:e5:0b:48:90:64:de:5a:87:
2b:8c:86:8a:ff:91:77:95:1a:20:82:a1:97:f2:26:5f:2e:62:
9e:b3:b4:00:42:a6:60:c9:77:55:b4:43:ce:f7:7c:2d:b9:a9:
ef:30:c1:35:73:21:44:d3:8e:09:d3:28:0d:33:bc:29:cb:e9:
de:7b:12:65:67:b3:6b:5e:4c:6a:cb:ab:ed:06:ff:d7:2e:55:
09:3b:ac:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPoQ8Q63fxCXaL7fDcP+5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWM1NzEyZmJiY2Q4MzI0MTlkNGM1ODg0YWUzYmMzYzRh
MTZlN2IwHhcNMjUwNjA4MTMwMDQ0WhcNMjUwNjA5MTMwMDQ0WjAzMTEwLwYDVQQD
EyhiYmRkNGMxNWNiMDYyYTM0YmRmODQwNzc0MWIzMjAwMTNkNGIwMDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlGJAbp58sD6TPF/gVgxjen39L2e
v0zpdIvBymtYyoycQOWV/yxfs0fdNNGIiAWBQV1etH0bMVCuOGFzldajvSpXrQeI
jl8ax3aeHJcqsD4of20o1W3o6obVdgJhJnF6ajkTJvUYaRSQCumDqxtXLgVjmpDX
x2BL5hajQISp4HMMoWCGhPKgM0hwhklJ6Q0YmYIwfO5TIduPo/ZwfsB0H4VVcfd3
MB85nHciNZAZC7+F0jNoxy493KfIV0Fw0rAX+Q5LAYGuLzFbI8+MwuiGjCks9RAV
oG4ZXKL7Q9ilYoU2t3DydIPaSqsvrHV97e+Pbplu9LuDCbUK5noyEhzS9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvdTBXLBio0vfhAd0GzIAE9SwBaMB8GA1UdIwQY
MBaAFG9cVxL7vNgyQZ1MWISuO8PEoW57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjF4WEV2dTgyREpCblV4WWhLNDd3OFNoYm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNDAzY2MtNGU2Yy00ZmU5LTgzYTEt
NzU1MDUyOWQ4NDdhLzEvYjF4WEV2dTgyREpCblV4WWhLNDd3OFNoYm5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iNDAzY2MtNGU2Yy00ZmU5LTgzYTEtNzU1MDUyOWQ4NDdh
LzEvYjF4WEV2dTgyREpCblV4WWhLNDd3OFNoYm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAupoNpZUP
w60Ehm2dVaH4RnmNbtyiHihbYFnpXchUlV0vy+ibAhcOB9cWl+8TiNQvmiWsmSmL
u8RfR7DuWjra7t0ZWXUqiZN08Ve+EF/otY0fnoVOMwiG0qWdYxrR834j4CgLfVeO
+qjmLMOdWG/R6m6Xbkr5Cic1AC8V9JiUrcLH0MlWP8Jpyanec7pRUyf7gQ++Vu92
mCLEpr4IjsgISdj70nP1YZrnkZdxqOULSJBk3lqHK4yGiv+Rd5UaIIKhl/ImXy5i
nrO0AEKmYMl3VbRDzvd8Lbmp7zDBNXMhRNOOCdMoDTO8Kcvp3nsSZWeza15Masur
7Qb/1y5VCTusBQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:25:09 2025 by rpki-client