Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
File: bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft (raw, json)
Hash identifier: XIaUBgsgY4u7ye0Ethhqb7KhIlrT8ASQnTsdmrJG4vI=
Subject key identifier: 98:FA:3A:28:0C:8F:08:EA:D0:C2:DC:24:F3:35:EA:7F:AB:E2:C0:28
Authority key identifier: 6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
Certificate issuer: /CN=6eef0dc51dfff0103419599906365572b7fe48fe
Certificate serial: 019923A0B7A0D12BEBBEAB536BFD1EF9D210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
Manifest number: 15CF
Signing time: Sun 07 Sep 2025 10:02:39 +0000
Manifest this update: Sun 07 Sep 2025 10:02:39 +0000
Manifest next update: Mon 08 Sep 2025 10:02:39 +0000
Files and hashes: 1: bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl (hash: R2j9S/T87LFJUk3S78kpV8+AG0xsX+izmD3LkrNKttc=)
2: c2zsKW42u9qFvcl-pNszF08tguU.roa (hash: V/eBjVd839gDYIh5zShIDIAcf0aMo/ChEoQd1e5SHwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:b7:a0:d1:2b:eb:be:ab:53:6b:fd:1e:f9:d2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef0dc51dfff0103419599906365572b7fe48fe
Validity
Not Before: Sep 7 10:02:39 2025 GMT
Not After : Sep 8 10:02:39 2025 GMT
Subject: CN=98fa3a280c8f08ead0c2dc24f335ea7fabe2c028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9c:3e:fe:76:37:25:8d:88:06:59:ff:8e:16:
19:5e:2d:25:b9:be:5d:a5:40:a0:c2:15:f3:92:c7:
08:c5:c6:70:04:48:71:f8:24:cd:90:47:1a:9e:3b:
d1:b3:47:86:1c:55:c9:3f:fe:61:ee:67:a9:c4:71:
7c:6e:bc:2d:c9:a2:37:5c:d5:5f:79:f8:4c:aa:6c:
c5:7f:b2:92:8a:3d:11:ad:c9:c5:d0:a0:55:7e:48:
9a:9d:f7:ee:68:27:23:86:14:15:e7:3b:2c:3f:92:
25:a6:bc:bb:7d:23:49:70:5b:95:f8:c3:1c:a7:fc:
60:c5:33:dc:ad:5a:9d:81:85:c5:64:66:bc:85:f7:
bb:8a:cf:d2:8f:da:cb:4b:a2:f0:50:20:16:2c:11:
fe:ed:db:0a:d5:81:f0:fb:91:bb:7f:d8:de:7d:b1:
59:62:df:6b:de:b7:71:2a:7d:31:ed:2e:50:d6:00:
c3:00:49:85:3d:93:7e:fc:b8:b0:2c:53:5d:d5:95:
57:8c:5b:5a:3a:6b:27:c6:97:1d:d2:ba:fe:cd:f6:
31:40:c8:fb:87:ba:89:23:c5:c5:6d:74:50:09:fa:
0f:6b:64:26:98:f5:78:cc:db:d6:13:35:02:c7:db:
a9:42:9c:18:aa:13:c1:71:d6:4c:fc:b3:31:2b:7f:
7d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FA:3A:28:0C:8F:08:EA:D0:C2:DC:24:F3:35:EA:7F:AB:E2:C0:28
X509v3 Authority Key Identifier:
keyid:6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8b:bc:90:6a:1d:b9:f1:8d:50:b8:b1:86:e7:48:8c:66:32:
47:75:54:da:ea:9a:36:e4:97:ef:87:f8:d6:ca:c4:36:4b:eb:
4b:da:5b:6c:e2:a6:2c:46:95:ca:d9:dc:92:57:40:a1:1a:e8:
df:ca:6e:0a:f6:8d:6b:e7:04:98:01:cd:12:0e:52:ef:a3:fb:
06:cf:5c:df:81:db:ad:81:fd:70:aa:0f:f0:22:6c:0f:15:6e:
36:8f:4e:38:e6:41:44:0d:40:9f:28:6d:1d:50:85:91:51:4a:
55:45:4d:0d:99:57:d6:0d:8e:fe:83:c6:27:ee:8f:6b:6f:69:
d1:34:4d:45:76:e2:a6:bf:7d:3d:3b:59:f9:01:ca:da:96:6b:
06:ff:24:21:2b:ca:9c:67:db:7c:a8:3d:4b:33:73:f2:0f:f7:
a6:07:13:f8:45:9e:97:cf:6e:5e:8e:8b:eb:f3:8e:a6:fc:04:
e9:b6:7f:cc:ae:57:47:bb:b6:5f:74:83:82:db:e8:ce:46:af:
cf:ec:8b:45:ae:d4:05:bf:3c:b8:e6:a9:19:ca:ec:53:37:99:
e4:9f:65:08:89:a6:74:65:4c:5e:0e:b1:66:1c:ac:e4:ab:86:
15:d1:66:6e:16:5f:0d:c2:2a:38:73:b1:ed:47:7b:89:a9:0a:
de:0a:68:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoLeg0SvrvqtTa/0e+dIQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZWYwZGM1MWRmZmYwMTAzNDE5NTk5OTA2MzY1NTcyYjdm
ZTQ4ZmUwHhcNMjUwOTA3MTAwMjM5WhcNMjUwOTA4MTAwMjM5WjAzMTEwLwYDVQQD
Eyg5OGZhM2EyODBjOGYwOGVhZDBjMmRjMjRmMzM1ZWE3ZmFiZTJjMDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJw+/nY3JY2IBln/jhYZXi0lub5d
pUCgwhXzkscIxcZwBEhx+CTNkEcanjvRs0eGHFXJP/5h7mepxHF8brwtyaI3XNVf
efhMqmzFf7KSij0RrcnF0KBVfkianffuaCcjhhQV5zssP5Ilpry7fSNJcFuV+MMc
p/xgxTPcrVqdgYXFZGa8hfe7is/Sj9rLS6LwUCAWLBH+7dsK1YHw+5G7f9jefbFZ
Yt9r3rdxKn0x7S5Q1gDDAEmFPZN+/LiwLFNd1ZVXjFtaOmsnxpcd0rr+zfYxQMj7
h7qJI8XFbXRQCfoPa2QmmPV4zNvWEzUCx9upQpwYqhPBcdZM/LMxK399TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJj6OigMjwjq0MLcJPM16n+r4sAoMB8GA1UdIwQY
MBaAFG7vDcUd//AQNBlZmQY2VXK3/kj+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnU4TnhSM184QkEwR1ZtWkJqWlZjcmYtU1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS81ZjIxN2EtZGUyNi00YmYwLWFjMjAt
NGZkYWUwOWE2NzdkLzEvYnU4TnhSM184QkEwR1ZtWkJqWlZjcmYtU1A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS81ZjIxN2EtZGUyNi00YmYwLWFjMjAtNGZkYWUwOWE2Nzdk
LzEvYnU4TnhSM184QkEwR1ZtWkJqWlZjcmYtU1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYu8kGod
ufGNULixhudIjGYyR3VU2uqaNuSX74f41srENkvrS9pbbOKmLEaVytnckldAoRro
38puCvaNa+cEmAHNEg5S76P7Bs9c34HbrYH9cKoP8CJsDxVuNo9OOOZBRA1Anyht
HVCFkVFKVUVNDZlX1g2O/oPGJ+6Pa29p0TRNRXbipr99PTtZ+QHK2pZrBv8kISvK
nGfbfKg9SzNz8g/3pgcT+EWel89uXo6L6/OOpvwE6bZ/zK5XR7u2X3SDgtvozkav
z+yLRa7UBb88uOapGcrsUzeZ5J9lCImmdGVMXg6xZhys5KuGFdFmbhZfDcIqOHOx
7Ud7iakK3gpoGQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:46 2025 by rpki-client