Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
File: B_IxNlmFgo1almPtG0QGJLJP7BM.mft (raw, json)
Hash identifier: 3Rp01phcsAf7W/0KCIq0eO6Gu0HjQ70F8eY0R16PmtA=
Subject key identifier: 1D:1E:C5:22:DA:B6:16:CA:82:BC:38:27:31:04:8E:C1:9B:EA:C6:40
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 019864DD6B7DBF974EB34C58A3C122BDBEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
Manifest number: 1230
Signing time: Fri 01 Aug 2025 09:01:28 +0000
Manifest this update: Fri 01 Aug 2025 09:01:28 +0000
Manifest next update: Sat 02 Aug 2025 09:01:28 +0000
Files and hashes: 1: B_IxNlmFgo1almPtG0QGJLJP7BM.crl (hash: WRCEHGAhNbzhgW5ddB5fVGJxlZQgGqx2NQbT1X/+BlU=)
2: Ta-jwZuVmBfbN54Mc87wJCcldqs.roa (hash: atOnMqdqU6L3frERpvrIl+0QC3L9/h7vBzk5CuDitGk=)
3: UYG02sedni6PF3l5885jWR9SDAU.roa (hash: F15eDYq10rpPatO7l2AwP8pJp/GPkxjGwfOAI4ndu8c=)
4: f9twcyYK2by7ABlD3vJjZJJTE9A.roa (hash: yE/0XoRiP4N9ruMBiHFcxDsyw4D7EJrDKYC2qthpjzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:64:dd:6b:7d:bf:97:4e:b3:4c:58:a3:c1:22:bd:be:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Aug 1 09:01:28 2025 GMT
Not After : Aug 2 09:01:28 2025 GMT
Subject: CN=1d1ec522dab616ca82bc382731048ec19beac640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:fc:74:c0:26:61:d0:28:71:f8:d2:89:d1:
b7:dd:d6:47:84:03:a8:e7:9e:19:f2:22:a3:e6:50:
63:ca:61:dc:05:1f:f1:47:02:73:14:07:28:de:62:
7a:b4:07:d8:41:61:81:72:b6:19:df:31:67:c7:5a:
d2:ab:7e:21:09:60:56:5e:a5:09:ce:b0:ad:19:5b:
3f:0c:06:c2:19:2b:3e:5a:da:72:eb:f5:a7:d4:f1:
cb:b6:8f:c1:fe:1d:8b:f6:6c:a2:f9:6b:79:3b:60:
72:8d:4b:32:84:ce:29:bf:ce:bb:0c:73:5a:5a:b1:
b2:93:ae:5d:38:49:6d:81:d7:4a:75:04:9d:40:34:
d9:3a:65:5b:18:dc:ac:03:64:37:6a:81:9b:78:19:
08:a3:72:df:ad:8f:6c:90:ea:c4:3b:a9:0e:bc:81:
20:b6:0f:9a:dd:21:65:84:b0:20:70:08:66:f7:e7:
ec:d7:f2:71:e1:3c:fc:fe:6d:48:38:47:36:6a:82:
ed:ad:dc:49:57:e1:73:30:ca:ae:f9:1e:af:2f:2f:
2e:4e:aa:c9:ca:68:79:1e:b2:88:98:b0:9c:c5:25:
33:18:71:e7:7b:b6:18:d2:df:a6:16:5d:7a:a3:91:
bd:54:cd:af:e8:a8:64:87:d3:f7:7e:73:46:b7:c9:
42:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1E:C5:22:DA:B6:16:CA:82:BC:38:27:31:04:8E:C1:9B:EA:C6:40
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:7e:8d:1b:1e:9a:6d:9e:b7:5e:8e:c1:07:bc:03:db:6c:03:
79:20:03:0c:d3:da:19:d7:ec:71:5e:94:df:75:91:b7:1c:c9:
43:e3:76:04:63:33:12:fc:7e:aa:b8:53:a6:21:8a:20:e0:7c:
12:b4:84:c3:23:f5:53:6f:98:2a:23:ea:97:ee:36:b3:b4:92:
eb:46:97:34:dc:fb:60:de:83:36:12:5e:c9:6c:7a:78:6f:d6:
b9:75:88:c1:73:7c:96:96:1d:94:60:19:8a:db:62:31:7b:6c:
7c:55:54:8f:d7:4c:1e:b9:e2:7d:3b:7f:15:b2:fa:8d:1a:65:
63:bb:24:9d:46:ab:23:cc:ae:9d:01:b8:de:c7:b6:ea:1b:49:
59:18:59:a4:98:f3:b6:2f:77:03:11:8b:45:ba:ab:67:49:af:
31:d8:a6:5c:56:73:d4:e0:79:11:37:3a:c0:2e:fe:2f:43:b0:
35:94:66:25:12:a4:fc:e2:57:bd:a6:79:26:ab:95:33:08:d3:
1f:db:90:1b:61:22:81:05:3e:be:7a:d2:2f:e8:79:cd:bf:24:
bd:54:9a:ce:24:b2:22:e3:0b:9d:c8:59:53:24:19:df:68:5e:
41:d1:91:c1:59:65:ac:64:d4:85:21:f8:98:db:c3:b8:38:19:
83:42:b3:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhk3Wt9v5dOs0xYo8Eivb7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZjIzMTM2NTk4NTgyOGQ1YTk2NjNlZDFiNDQwNjI0YjI0
ZmVjMTMwHhcNMjUwODAxMDkwMTI4WhcNMjUwODAyMDkwMTI4WjAzMTEwLwYDVQQD
EygxZDFlYzUyMmRhYjYxNmNhODJiYzM4MjczMTA0OGVjMTliZWFjNjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj/8dMAmYdAocfjSidG33dZHhAOo
554Z8iKj5lBjymHcBR/xRwJzFAco3mJ6tAfYQWGBcrYZ3zFnx1rSq34hCWBWXqUJ
zrCtGVs/DAbCGSs+Wtpy6/Wn1PHLto/B/h2L9myi+Wt5O2ByjUsyhM4pv867DHNa
WrGyk65dOEltgddKdQSdQDTZOmVbGNysA2Q3aoGbeBkIo3LfrY9skOrEO6kOvIEg
tg+a3SFlhLAgcAhm9+fs1/Jx4Tz8/m1IOEc2aoLtrdxJV+FzMMqu+R6vLy8uTqrJ
ymh5HrKImLCcxSUzGHHne7YY0t+mFl16o5G9VM2v6Khkh9P3fnNGt8lCEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0exSLathbKgrw4JzEEjsGb6sZAMB8GA1UdIwQY
MBaAFAfyMTZZhYKNWpZj7RtEBiSyT+wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzct
MDg1ZmEwYTU2MDUyLzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzctMDg1ZmEwYTU2MDUy
LzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt36NGx6a
bZ63Xo7BB7wD22wDeSADDNPaGdfscV6U33WRtxzJQ+N2BGMzEvx+qrhTpiGKIOB8
ErSEwyP1U2+YKiPql+42s7SS60aXNNz7YN6DNhJeyWx6eG/WuXWIwXN8lpYdlGAZ
ittiMXtsfFVUj9dMHrnifTt/FbL6jRplY7sknUarI8yunQG43se26htJWRhZpJjz
ti93AxGLRbqrZ0mvMdimXFZz1OB5ETc6wC7+L0OwNZRmJRKk/OJXvaZ5JquVMwjT
H9uQG2EigQU+vnrSL+h5zb8kvVSaziSyIuMLnchZUyQZ32heQdGRwVllrGTUhSH4
mNvDuDgZg0Kzcg==
-----END CERTIFICATE-----
Generated at Fri Aug 1 19:08:36 2025 by rpki-client