
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: adG2ha2QMw952KDITSZmkf1zC4g8f/ffwLpX1rhtyis=
Subject key identifier: 01:FC:C2:CE:79:C3:92:76:A6:59:E1:B1:A6:B2:13:CF:FA:51:B2:DE
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 01976960D75093D56C0638922FDA425C22B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 0D8E
Signing time: Fri 13 Jun 2025 13:00:43 +0000
Manifest this update: Fri 13 Jun 2025 13:00:43 +0000
Manifest next update: Sat 14 Jun 2025 13:00:43 +0000
Files and hashes: 1: E4Z3vbTECoIeWAX-nTU7dyjahu0.roa (hash: GRl1qEVfqwDbxNSFnBtUIIbDFbsrhFOvP3cHyBgF290=)
2: NOxJnoU4lwihn16i4CMOYrsiBKg.roa (hash: 5FYdl3/DrqY2o6XapqngUb5quoQMLJ6ufA49O6K0iqA=)
3: TRLssSByve8p7zVYSOimtplK7a0.roa (hash: 8S+o32DqiKQ6FrfFZueA3QrWJ407pI0AN9h5W+tL+lE=)
4: XBbWlDtkaQ_YQj-lOcFRZsR4QS4.roa (hash: pp7r6Abd9Ss2uZLn9bwC0PyAqi0RWKysnSc/agfhI6A=)
5: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: /NhGbQoE9JQJ6AYhLnmvbAmc2BjM7y9Gt1FsVhFL4GA=)
6: efbfkOdYHKxxnHQ3MrY1EfrtYow.roa (hash: YV9ND6Bmrzln21tu47CU3mbzCUoN6XuUoWHbkz/nF7M=)
7: ywz51nx2Az2FIOdnvxmxOqpSYZc.roa (hash: ywhzW4X8gfJWs3Te7uv4qk5K0NbexGMZNrN76iHRuoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:d7:50:93:d5:6c:06:38:92:2f:da:42:5c:22:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Jun 13 13:00:43 2025 GMT
Not After : Jun 14 13:00:43 2025 GMT
Subject: CN=01fcc2ce79c39276a659e1b1a6b213cffa51b2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:b9:7e:f0:7f:1c:44:1e:a9:3c:99:f8:e8:
ba:8d:d9:19:e0:d8:4f:29:7a:29:18:c7:6b:13:9b:
bb:fe:2a:2c:2a:72:5f:ea:48:5d:e8:b5:78:09:fc:
f3:a3:b9:4f:3d:3d:56:03:c2:29:83:6f:d0:f9:e9:
c3:5d:99:99:7c:b9:2c:5a:c0:43:19:62:4c:ef:90:
af:67:48:74:a4:91:61:54:8f:d7:8a:35:8b:83:56:
d8:e9:0d:b4:36:6c:b7:9d:b0:af:a2:18:52:c7:ee:
10:be:24:46:0c:e8:9e:f5:4c:1f:3e:50:89:a6:69:
04:f1:93:54:a0:3e:fe:30:17:d6:62:d0:62:6f:66:
9d:c4:f2:57:dd:91:20:2c:19:c3:2e:b1:e5:db:f0:
42:cc:32:27:d3:95:2a:b0:1e:f4:c5:e6:2e:3e:d6:
16:f2:e6:20:57:45:18:bf:77:f5:78:b0:18:76:8a:
8e:b9:23:ad:1c:61:62:19:65:cb:35:ba:25:aa:2b:
4b:85:5b:25:d6:18:c3:86:03:dd:3c:e9:8e:b1:c0:
3d:ed:97:f0:b9:80:fc:66:86:70:a3:a4:c4:58:4d:
08:a6:9d:60:0a:6b:47:72:8f:fe:c0:f2:ab:0a:fb:
99:ef:92:6c:78:5e:4e:1e:f9:0b:0c:00:21:7c:7d:
88:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FC:C2:CE:79:C3:92:76:A6:59:E1:B1:A6:B2:13:CF:FA:51:B2:DE
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ba:3c:a2:33:79:ca:d0:8f:3f:58:36:9d:a2:9d:dc:27:0a:
de:2e:81:a1:8d:cf:35:2f:6e:66:fd:fe:eb:3b:42:af:bc:6d:
37:3f:9d:6c:99:4a:bd:ed:a5:fe:8e:ba:79:29:2b:2c:c2:82:
57:25:07:93:fc:06:28:a7:da:5b:33:92:23:dc:45:30:de:ad:
08:39:54:59:50:7b:33:bd:7b:ef:a4:76:d4:5e:e4:d5:11:24:
2d:ae:b3:0b:a5:c2:ed:99:1b:09:c3:5d:aa:b1:17:1e:62:c7:
ff:da:e4:af:23:0e:70:c1:b6:cc:b5:9b:3b:bd:b5:0e:bc:57:
6e:41:37:2b:b1:ca:f7:85:6f:64:e8:e2:db:7c:ee:86:2b:c8:
57:1a:df:42:0c:19:e3:d8:15:b9:e0:9f:55:2d:40:a8:40:0e:
a0:45:46:b1:da:a8:f3:88:f1:57:08:7c:30:74:5f:30:55:4f:
ea:87:f4:d1:fe:60:56:c7:aa:5d:17:5e:b0:50:71:ff:d6:92:
50:4c:13:d4:34:27:4c:a5:b5:37:9e:a2:8a:25:3d:66:4e:9e:
67:0e:0e:08:a6:ab:b0:cb:71:1b:63:16:9e:85:1a:a4:3c:fb:
1c:7d:86:2d:46:9c:25:72:0c:9b:4b:f8:d5:ae:a8:9b:de:e9:
02:9c:86:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYNdQk9VsBjiSL9pCXCK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMzI1MGE1YzFiZGFiNzRiMWJkMjNjMDFjNTRhOGQ3MGI2
ZGVmMjAwHhcNMjUwNjEzMTMwMDQzWhcNMjUwNjE0MTMwMDQzWjAzMTEwLwYDVQQD
EygwMWZjYzJjZTc5YzM5Mjc2YTY1OWUxYjFhNmIyMTNjZmZhNTFiMmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cq5fvB/HEQeqTyZ+Oi6jdkZ4NhP
KXopGMdrE5u7/iosKnJf6khd6LV4Cfzzo7lPPT1WA8Ipg2/Q+enDXZmZfLksWsBD
GWJM75CvZ0h0pJFhVI/XijWLg1bY6Q20Nmy3nbCvohhSx+4QviRGDOie9UwfPlCJ
pmkE8ZNUoD7+MBfWYtBib2adxPJX3ZEgLBnDLrHl2/BCzDIn05UqsB70xeYuPtYW
8uYgV0UYv3f1eLAYdoqOuSOtHGFiGWXLNbolqitLhVsl1hjDhgPdPOmOscA97Zfw
uYD8ZoZwo6TEWE0Ipp1gCmtHco/+wPKrCvuZ75JseF5OHvkLDAAhfH2IeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAH8ws55w5J2plnhsaayE8/6UbLeMB8GA1UdIwQY
MBaAFGwyUKXBvat0sb0jwBxUqNcLbe8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEt
MjU0NDY4M2FhMTI1LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEtMjU0NDY4M2FhMTI1
LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbo8ojN5
ytCPP1g2naKd3CcK3i6BoY3PNS9uZv3+6ztCr7xtNz+dbJlKve2l/o66eSkrLMKC
VyUHk/wGKKfaWzOSI9xFMN6tCDlUWVB7M71776R21F7k1REkLa6zC6XC7ZkbCcNd
qrEXHmLH/9rkryMOcMG2zLWbO721DrxXbkE3K7HK94VvZOji23zuhivIVxrfQgwZ
49gVueCfVS1AqEAOoEVGsdqo84jxVwh8MHRfMFVP6of00f5gVseqXRdesFBx/9aS
UEwT1DQnTKW1N56iiiU9Zk6eZw4OCKarsMtxG2MWnoUapDz7HH2GLUacJXIMm0v4
1a6om97pApyGVQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 17:11:44 2025 by rpki-client