Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json)
Hash identifier: ACyLNTdddqISvjANfZMGeCXpD82weQJRSxqRkhTWmIY=
Subject key identifier: 59:B2:5E:74:4C:CE:F3:A6:D0:C2:EC:41:58:66:1B:30:4C:29:EB:32
Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32
Certificate serial: 01974A0CD430D70BFC2E31456F674D523C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 11:00:44 +0000
Manifest this update: Sat 07 Jun 2025 11:00:44 +0000
Manifest next update: Sun 08 Jun 2025 11:00:44 +0000
Files and hashes: 1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: /JNy3AP0oCTfgKTzICaplU7cGQa9P0y2e/GdNfOkjXY=)
2: bxA8JQu2uTNMxZPugWxy8BA9JuM.roa (hash: Z+hupgw09gxg+qKwTC7uynG2+KfBGjPZ8fjXe4JaS6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:d4:30:d7:0b:fc:2e:31:45:6f:67:4d:52:3c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32
Validity
Not Before: Jun 7 11:00:44 2025 GMT
Not After : Jun 8 11:00:44 2025 GMT
Subject: CN=59b25e744ccef3a6d0c2ec4158661b304c29eb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:0e:5a:25:1a:31:9b:42:87:39:e9:06:1d:
dc:5c:c9:7d:2a:04:fd:53:25:8b:98:c9:c5:e6:9f:
3a:34:b5:05:ad:a9:f4:d3:9d:ea:ab:34:ff:d1:89:
90:ae:aa:33:fb:73:61:ab:1f:2f:d3:a9:6b:b7:75:
2f:a0:2b:bc:0e:ec:a4:70:4c:c6:ef:f3:02:9c:4c:
aa:6d:ec:7e:f7:af:b5:2b:ca:82:8a:26:5c:65:e7:
45:6f:26:5a:ae:3e:7d:52:23:d4:58:28:6d:2b:d5:
04:40:09:5e:b3:aa:db:28:ca:ca:9d:21:01:15:e6:
d9:98:00:5a:e3:e7:fb:5f:ae:e8:6e:54:1f:07:d0:
bb:65:ee:8d:7f:0b:bb:4f:af:ec:b6:85:62:9c:a4:
aa:42:4a:4e:84:90:81:b5:59:51:c3:60:c9:5a:b2:
4a:51:a6:aa:b2:65:b2:e3:94:10:ca:05:68:be:69:
bf:69:a6:3f:10:58:5d:c4:40:53:2f:23:56:e5:01:
e6:84:1c:ab:96:ac:c3:c2:85:3a:10:48:8d:98:3a:
20:5e:99:c0:cd:29:4d:f9:62:0d:d1:37:d9:97:3c:
99:a6:25:44:f1:3b:d5:c3:61:51:78:7b:ba:50:c8:
64:7a:7c:2e:5d:cc:bd:8e:44:f7:66:2a:7f:82:da:
2d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B2:5E:74:4C:CE:F3:A6:D0:C2:EC:41:58:66:1B:30:4C:29:EB:32
X509v3 Authority Key Identifier:
keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fa:63:13:55:57:2d:ef:90:cb:37:0e:f3:43:c2:0e:2d:d8:
15:48:ba:3a:5f:b9:8d:0c:64:23:9e:eb:93:59:8d:ca:99:e0:
8a:2d:f3:fd:5e:46:db:72:ba:f1:f4:1b:02:14:49:8c:cd:a9:
0e:95:c7:d1:d2:32:62:1a:be:aa:24:19:b5:44:45:7f:00:95:
b6:0f:8f:2a:d4:41:fe:fb:6c:26:c0:3f:1d:33:bc:ed:ec:b4:
ed:86:26:ba:e4:95:5e:8e:19:b7:1d:c7:bc:2f:e9:ff:80:f4:
cf:f0:b8:e5:4c:ec:14:52:e5:e7:ed:5e:8f:59:90:b9:4e:46:
38:5a:35:c0:ce:a5:6d:a6:ec:2a:1e:0e:48:45:b1:7a:f3:67:
e5:0e:fe:dd:f1:72:b9:84:92:a3:2b:92:f9:54:71:cc:cd:45:
29:24:b3:0d:d9:53:4d:5d:40:e3:33:72:ae:de:55:70:e8:18:
94:3d:d0:1b:23:32:bf:cd:27:f6:c2:15:eb:00:e3:0b:3c:b2:
17:e2:1a:fb:d9:d3:0c:50:b7:ce:53:8b:69:1f:3b:44:3b:d1:
ea:4e:53:b5:9f:d6:d8:b6:73:87:9f:6a:0e:ff:c9:90:e9:38:
ea:23:38:c0:1e:09:57:32:f1:03:30:65:1a:85:c8:cf:ee:43:
5e:3f:fa:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDNQw1wv8LjFFb2dNUjyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZWE0ZTg4NDY2ZGU0Yzg5NjA5NDAyOGYxY2YwZGI2NjUz
NjBkMzIwHhcNMjUwNjA3MTEwMDQ0WhcNMjUwNjA4MTEwMDQ0WjAzMTEwLwYDVQQD
Eyg1OWIyNWU3NDRjY2VmM2E2ZDBjMmVjNDE1ODY2MWIzMDRjMjllYjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvsOWiUaMZtChznpBh3cXMl9KgT9
UyWLmMnF5p86NLUFran0053qqzT/0YmQrqoz+3Nhqx8v06lrt3UvoCu8DuykcEzG
7/MCnEyqbex+96+1K8qCiiZcZedFbyZarj59UiPUWChtK9UEQAles6rbKMrKnSEB
FebZmABa4+f7X67oblQfB9C7Ze6Nfwu7T6/stoVinKSqQkpOhJCBtVlRw2DJWrJK
UaaqsmWy45QQygVovmm/aaY/EFhdxEBTLyNW5QHmhByrlqzDwoU6EEiNmDogXpnA
zSlN+WIN0TfZlzyZpiVE8TvVw2FReHu6UMhkenwuXcy9jkT3Zip/gtotwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmyXnRMzvOm0MLsQVhmGzBMKesyMB8GA1UdIwQY
MBaAFAfqTohGbeTIlglAKPHPDbZlNg0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODAwZjEtNzRhZS00YzE5LWE3Y2Yt
MzFiMzZmNTc5ZjA2LzEvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mODAwZjEtNzRhZS00YzE5LWE3Y2YtMzFiMzZmNTc5ZjA2
LzEvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvpjE1VX
Le+QyzcO80PCDi3YFUi6Ol+5jQxkI57rk1mNypngii3z/V5G23K68fQbAhRJjM2p
DpXH0dIyYhq+qiQZtURFfwCVtg+PKtRB/vtsJsA/HTO87ey07YYmuuSVXo4Ztx3H
vC/p/4D0z/C45UzsFFLl5+1ej1mQuU5GOFo1wM6lbabsKh4OSEWxevNn5Q7+3fFy
uYSSoyuS+VRxzM1FKSSzDdlTTV1A4zNyrt5VcOgYlD3QGyMyv80n9sIV6wDjCzyy
F+Ia+9nTDFC3zlOLaR87RDvR6k5TtZ/W2LZzh59qDv/JkOk46iM4wB4JVzLxAzBl
GoXIz+5DXj/6yQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:21:44 2025 by rpki-client