Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
File: B1u0EyX9YF4guvwvBllFQ57AX-A.mft (raw, json)
Hash identifier: Jfdadov/QvKVnRkHiRKAjAqiU4dS2EOYf6sDCEVbfL0=
Subject key identifier: E5:DA:2D:AB:65:CD:C3:7D:80:EA:42:0B:6A:92:5B:5D:31:C3:CD:18
Authority key identifier: 07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
Certificate issuer: /CN=075bb41325fd605e20bafc2f065945439ec05fe0
Certificate serial: 01975AC99F0D1CEA7D8D5EFB8CFE8BE7DAF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
Manifest number: 0D0F
Signing time: Tue 10 Jun 2025 17:00:52 +0000
Manifest this update: Tue 10 Jun 2025 17:00:52 +0000
Manifest next update: Wed 11 Jun 2025 17:00:52 +0000
Files and hashes: 1: 9NXcCPCGYp1JlQR62uCWgbVja78.roa (hash: 28uUXvy/7SzavknoRbkScbCSEecBm4cD32qSoQXRRak=)
2: B1u0EyX9YF4guvwvBllFQ57AX-A.crl (hash: il5OPfhz/2aRzHMch2AQC6DnJ1bpnABI2tlYr8MtgnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:c9:9f:0d:1c:ea:7d:8d:5e:fb:8c:fe:8b:e7:da:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075bb41325fd605e20bafc2f065945439ec05fe0
Validity
Not Before: Jun 10 17:00:52 2025 GMT
Not After : Jun 11 17:00:52 2025 GMT
Subject: CN=e5da2dab65cdc37d80ea420b6a925b5d31c3cd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:13:08:fd:3e:3f:ef:95:f9:47:06:2a:ba:af:
74:46:44:e1:7b:61:39:54:3d:e1:1e:7c:02:02:53:
83:a1:7f:b7:18:5c:5e:d3:5f:c8:ca:02:32:76:a3:
38:32:d3:96:34:28:c1:00:7c:d4:7f:3c:2f:ee:2c:
e7:61:77:4e:51:5f:e1:e0:cf:f0:c8:58:3c:ea:a5:
2c:6f:c2:0b:58:77:0d:51:9a:4d:fa:f7:90:93:b2:
30:22:c0:27:65:a5:75:07:2c:4c:c4:96:87:a8:ba:
23:09:76:ab:13:39:a2:26:6d:13:17:c2:1c:8d:51:
cc:9a:e8:b1:eb:58:31:1f:cc:d9:34:56:96:bd:d6:
2f:34:51:6e:d9:45:a3:4f:25:9d:7f:65:c2:ba:25:
f0:ca:01:11:1c:01:3f:8b:3e:74:a9:4e:40:f5:58:
bd:eb:0a:27:60:af:c2:a3:67:92:6d:31:00:86:de:
60:30:90:66:02:54:2b:3a:7c:b9:7c:67:be:35:e8:
5f:a6:80:31:9f:fa:a3:28:a4:f7:15:e2:78:39:e0:
04:f5:f3:2b:f5:19:ea:94:80:dc:46:8a:b7:46:4d:
a0:b0:99:df:cb:4e:a7:2f:35:82:23:88:dc:2d:8e:
03:ec:ff:d5:35:a4:8d:c7:0b:f2:53:37:fd:57:53:
e2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DA:2D:AB:65:CD:C3:7D:80:EA:42:0B:6A:92:5B:5D:31:C3:CD:18
X509v3 Authority Key Identifier:
keyid:07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0b:1a:c0:7c:4b:13:17:45:c0:a4:e9:bf:fd:9a:9e:b9:a0:
15:82:84:32:d5:5b:e0:06:9d:e5:c4:c6:a6:7d:28:80:c1:59:
14:c0:d2:b5:fe:2d:e3:52:3e:6f:15:33:34:78:21:ba:eb:d0:
d6:5e:4f:b2:b3:ba:ff:1b:e3:73:bc:3c:98:d0:41:24:3d:c9:
f0:5e:50:19:51:2b:f8:ce:ff:0c:6d:9b:de:96:44:a1:94:2b:
57:9f:f1:bd:bd:f0:dd:f9:61:40:5b:13:4c:4d:58:7b:87:15:
8b:b1:75:23:be:ec:1b:79:9e:12:ef:83:05:1c:24:f2:1b:4a:
7c:e1:5d:af:74:fb:19:d4:c6:4e:da:b9:fb:11:79:59:aa:da:
b7:84:f9:f3:e1:0f:5f:13:79:af:d3:3c:04:18:8e:c1:88:3f:
f0:5b:99:c2:fd:df:fc:40:7c:92:e8:6e:a0:2d:d4:ca:9c:f2:
14:c0:1c:5a:a5:64:7a:2a:5f:b6:5a:2d:02:4a:32:00:93:5e:
7f:76:ea:39:4b:30:8c:c4:e3:e0:b2:71:84:38:00:54:e5:b5:
5c:06:56:2f:34:4d:c7:38:70:90:a1:c7:49:be:3c:75:52:98:
41:a7:b2:16:b2:2d:80:fd:1f:21:a1:da:e2:b9:44:e7:73:4e:
f1:c9:aa:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdayZ8NHOp9jV77jP6L59r1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NWJiNDEzMjVmZDYwNWUyMGJhZmMyZjA2NTk0NTQzOWVj
MDVmZTAwHhcNMjUwNjEwMTcwMDUyWhcNMjUwNjExMTcwMDUyWjAzMTEwLwYDVQQD
EyhlNWRhMmRhYjY1Y2RjMzdkODBlYTQyMGI2YTkyNWI1ZDMxYzNjZDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xMI/T4/75X5RwYquq90RkThe2E5
VD3hHnwCAlODoX+3GFxe01/IygIydqM4MtOWNCjBAHzUfzwv7iznYXdOUV/h4M/w
yFg86qUsb8ILWHcNUZpN+veQk7IwIsAnZaV1ByxMxJaHqLojCXarEzmiJm0TF8Ic
jVHMmuix61gxH8zZNFaWvdYvNFFu2UWjTyWdf2XCuiXwygERHAE/iz50qU5A9Vi9
6wonYK/Co2eSbTEAht5gMJBmAlQrOny5fGe+NehfpoAxn/qjKKT3FeJ4OeAE9fMr
9RnqlIDcRoq3Rk2gsJnfy06nLzWCI4jcLY4D7P/VNaSNxwvyUzf9V1PiwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXaLatlzcN9gOpCC2qSW10xw80YMB8GA1UdIwQY
MBaAFAdbtBMl/WBeILr8LwZZRUOewF/gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjF1MEV5WDlZRjRndXZ3dkJsbEZRNTdBWC1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85ODVhMjctMDgxOC00Y2E1LWEzNzct
MDYxZjVjYzZhZDUyLzEvQjF1MEV5WDlZRjRndXZ3dkJsbEZRNTdBWC1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85ODVhMjctMDgxOC00Y2E1LWEzNzctMDYxZjVjYzZhZDUy
LzEvQjF1MEV5WDlZRjRndXZ3dkJsbEZRNTdBWC1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngsawHxL
ExdFwKTpv/2anrmgFYKEMtVb4Aad5cTGpn0ogMFZFMDStf4t41I+bxUzNHghuuvQ
1l5PsrO6/xvjc7w8mNBBJD3J8F5QGVEr+M7/DG2b3pZEoZQrV5/xvb3w3flhQFsT
TE1Ye4cVi7F1I77sG3meEu+DBRwk8htKfOFdr3T7GdTGTtq5+xF5Warat4T58+EP
XxN5r9M8BBiOwYg/8FuZwv3f/EB8kuhuoC3UypzyFMAcWqVkeipftlotAkoyAJNe
f3bqOUswjMTj4LJxhDgAVOW1XAZWLzRNxzhwkKHHSb48dVKYQaeyFrItgP0fIaHa
4rlE53NO8cmq4w==
-----END CERTIFICATE-----
Generated at Wed Jun 11 01:23:43 2025 by rpki-client