Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: 81z75AhOl9/B8kJE1CiqS7dfIAeVoIEkseMUOOpfm0E=
Subject key identifier: BE:2D:86:80:13:5D:EB:DA:8E:DD:5C:EF:19:2F:4A:D2:87:E6:89:F9
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 01974E57235A7CB76AED8BE7506E5528EFE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 1589
Signing time: Sun 08 Jun 2025 07:00:22 +0000
Manifest this update: Sun 08 Jun 2025 07:00:22 +0000
Manifest next update: Mon 09 Jun 2025 07:00:22 +0000
Files and hashes: 1: 0wgL08QR2Tg8DD4ym9yl2cWgk4Y.roa (hash: qV9D4m0x0M6TJ4fUI73uoZNgwejKGUBXdkrfKOtrD44=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: ynq7nFAixJhgD7lm/DvhMmf0KbvSoAW5TjRdPebqXh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:23:5a:7c:b7:6a:ed:8b:e7:50:6e:55:28:ef:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Jun 8 07:00:22 2025 GMT
Not After : Jun 9 07:00:22 2025 GMT
Subject: CN=be2d8680135debda8edd5cef192f4ad287e689f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:45:70:1f:13:d8:fa:af:0c:95:35:5e:b3:
89:d1:ac:11:43:aa:55:03:21:c9:35:0a:b1:22:ea:
77:7f:06:de:2b:7d:02:76:3b:0c:2e:5b:a8:2e:ff:
01:19:88:a5:e3:70:e8:19:b5:18:c6:bd:fa:07:ea:
d1:7e:2a:ac:0a:06:48:35:b0:67:aa:0f:8e:99:42:
68:96:b1:84:a1:d0:9d:fc:9c:f6:fa:85:5b:ec:fc:
82:d3:4c:c9:2c:7d:d3:9e:80:71:d7:7e:4e:30:8a:
dc:d2:b0:04:1c:94:06:8e:f1:95:79:80:88:93:ab:
17:8a:67:ef:30:b9:8f:75:54:c3:65:29:92:fb:2e:
c2:34:5e:d7:06:9e:13:3c:3d:33:03:c2:92:ad:16:
39:d0:15:ba:e2:c4:17:73:e1:f6:01:3e:70:31:71:
b9:c8:9e:36:04:57:35:39:26:62:79:b5:8d:4d:33:
40:6b:f4:ac:28:8d:bf:d6:0e:56:f3:59:ce:d3:14:
ce:2c:30:bd:e0:9e:34:f7:7a:41:52:bf:2f:7d:04:
d9:f0:3f:54:b7:ce:75:44:3d:0e:7a:c7:ae:c5:c2:
f0:93:45:80:c6:7c:30:37:ea:5f:04:b5:de:23:85:
09:fc:ac:0f:d6:4e:e3:20:45:1d:5f:2a:09:37:c9:
44:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2D:86:80:13:5D:EB:DA:8E:DD:5C:EF:19:2F:4A:D2:87:E6:89:F9
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:15:37:58:45:66:54:4b:61:75:86:7b:12:10:a7:df:ca:b8:
95:5f:e9:df:67:bf:06:fe:52:b1:8f:95:aa:43:49:19:60:3c:
e5:d0:58:2c:0d:4e:39:3e:f7:31:fe:44:07:60:ac:32:fb:7a:
09:8b:de:ef:09:35:1a:c3:0c:77:75:44:c5:41:34:66:d5:98:
08:98:13:80:5e:85:b3:20:a8:57:17:33:d1:61:fe:97:df:6e:
e9:42:3a:b5:c8:4b:e8:1f:d3:ff:1c:ce:fd:8b:2d:4b:94:31:
eb:74:33:e8:b4:b5:15:8c:81:f4:4f:06:19:7f:93:1b:d7:a5:
01:f1:c7:03:b2:34:4f:ab:ff:54:f0:6a:83:dc:e5:78:ff:c2:
a9:4e:6b:26:c4:a1:e6:08:e1:db:ac:24:f0:0c:af:c1:45:26:
32:26:f3:be:e4:ae:6f:a2:e8:8a:b5:38:cb:87:b0:bb:da:e8:
67:a0:99:3d:2c:2d:6d:0d:1f:d7:ee:19:97:c1:86:06:63:1e:
dd:f5:f7:3f:94:e4:57:06:d6:f0:2f:ac:e2:3b:2f:ed:06:75:
8c:c4:a9:ea:03:4a:04:04:9a:ba:24:41:6e:ae:5f:49:29:d3:
d7:23:57:2f:f9:de:23:d3:5d:69:77:48:7b:e4:1f:ee:20:7b:
93:51:53:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOVyNafLdq7YvnUG5VKO/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNWU0ZWY1NTE2Nzk5ZmZlMGJiMWI4MzkzMTdkYmQzNTVi
YjdhOWIwHhcNMjUwNjA4MDcwMDIyWhcNMjUwNjA5MDcwMDIyWjAzMTEwLwYDVQQD
EyhiZTJkODY4MDEzNWRlYmRhOGVkZDVjZWYxOTJmNGFkMjg3ZTY4OWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRBFcB8T2PqvDJU1XrOJ0awRQ6pV
AyHJNQqxIup3fwbeK30CdjsMLluoLv8BGYil43DoGbUYxr36B+rRfiqsCgZINbBn
qg+OmUJolrGEodCd/Jz2+oVb7PyC00zJLH3TnoBx135OMIrc0rAEHJQGjvGVeYCI
k6sXimfvMLmPdVTDZSmS+y7CNF7XBp4TPD0zA8KSrRY50BW64sQXc+H2AT5wMXG5
yJ42BFc1OSZiebWNTTNAa/SsKI2/1g5W81nO0xTOLDC94J4093pBUr8vfQTZ8D9U
t851RD0OeseuxcLwk0WAxnwwN+pfBLXeI4UJ/KwP1k7jIEUdXyoJN8lEVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4thoATXevajt1c7xkvStKH5on5MB8GA1UdIwQY
MBaAFGxeTvVRZ5n/4Lsbg5MX29NVu3qbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUt
MWJlNzUzZmFkMWJmLzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUtMWJlNzUzZmFkMWJm
LzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERU3WEVm
VEthdYZ7EhCn38q4lV/p32e/Bv5SsY+VqkNJGWA85dBYLA1OOT73Mf5EB2CsMvt6
CYve7wk1GsMMd3VExUE0ZtWYCJgTgF6FsyCoVxcz0WH+l99u6UI6tchL6B/T/xzO
/YstS5Qx63Qz6LS1FYyB9E8GGX+TG9elAfHHA7I0T6v/VPBqg9zleP/CqU5rJsSh
5gjh26wk8AyvwUUmMibzvuSub6LoirU4y4ewu9roZ6CZPSwtbQ0f1+4Zl8GGBmMe
3fX3P5TkVwbW8C+s4jsv7QZ1jMSp6gNKBASauiRBbq5fSSnT1yNXL/neI9NdaXdI
e+Qf7iB7k1FTnQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:48:27 2025 by rpki-client