Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: bBsk39JO3QH3JGlFsGGLJ8TaEJLHgVr1anjybL+ye0o=
Subject key identifier: 4B:5D:F9:2C:A4:D7:E4:CA:A8:44:AB:59:57:86:69:03:38:CD:F2:AD
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 01975FB936D2D7C7ADEE9BA2252B3DB6B9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 0D89
Signing time: Wed 11 Jun 2025 16:01:03 +0000
Manifest this update: Wed 11 Jun 2025 16:01:03 +0000
Manifest next update: Thu 12 Jun 2025 16:01:03 +0000
Files and hashes: 1: E4Z3vbTECoIeWAX-nTU7dyjahu0.roa (hash: GRl1qEVfqwDbxNSFnBtUIIbDFbsrhFOvP3cHyBgF290=)
2: NOxJnoU4lwihn16i4CMOYrsiBKg.roa (hash: 5FYdl3/DrqY2o6XapqngUb5quoQMLJ6ufA49O6K0iqA=)
3: TRLssSByve8p7zVYSOimtplK7a0.roa (hash: 8S+o32DqiKQ6FrfFZueA3QrWJ407pI0AN9h5W+tL+lE=)
4: XBbWlDtkaQ_YQj-lOcFRZsR4QS4.roa (hash: pp7r6Abd9Ss2uZLn9bwC0PyAqi0RWKysnSc/agfhI6A=)
5: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: HgUUlKITQcqGR15YP3r98+dicy6rQRlrgKlhluvaUWI=)
6: efbfkOdYHKxxnHQ3MrY1EfrtYow.roa (hash: YV9ND6Bmrzln21tu47CU3mbzCUoN6XuUoWHbkz/nF7M=)
7: ywz51nx2Az2FIOdnvxmxOqpSYZc.roa (hash: ywhzW4X8gfJWs3Te7uv4qk5K0NbexGMZNrN76iHRuoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:b9:36:d2:d7:c7:ad:ee:9b:a2:25:2b:3d:b6:b9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Jun 11 16:01:03 2025 GMT
Not After : Jun 12 16:01:03 2025 GMT
Subject: CN=4b5df92ca4d7e4caa844ab595786690338cdf2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:c3:25:15:64:08:ac:30:88:4e:5b:cf:a5:
c9:2e:98:20:f8:9c:3f:f0:f9:22:24:b2:78:59:6f:
57:ee:1c:5d:35:29:d4:1b:9c:63:00:28:17:be:ea:
69:12:d3:8b:0c:90:fb:3c:13:b9:dc:24:8b:96:95:
50:b0:9b:21:45:92:74:aa:98:66:9b:70:56:ea:36:
cf:51:63:a3:11:fb:29:ce:41:8a:88:7a:88:e5:94:
f8:39:32:6b:5a:40:3d:ce:03:b3:f0:0d:3b:38:83:
a3:fe:ca:64:7b:5e:68:65:7f:fa:e7:cc:2e:38:64:
ef:b9:af:2b:cb:ca:08:80:0d:b7:6a:43:af:e0:b2:
49:b6:57:00:5f:e4:63:e5:2a:77:86:5e:cf:1f:fa:
ef:b0:95:50:72:65:32:1d:44:74:15:b7:53:88:b5:
0a:23:8e:7d:a2:c4:07:1c:6f:a2:e3:a9:dd:63:10:
00:30:27:47:7b:8d:9d:ec:49:7d:69:ad:5f:89:01:
08:2a:7d:c5:d5:bf:a5:81:a3:80:74:f3:0d:54:7d:
8a:17:9b:c3:69:fe:6c:7c:ee:7f:bd:78:9d:02:e4:
42:94:47:74:7a:de:6e:44:b3:5c:04:b1:9c:5b:e9:
44:2e:fd:39:66:ed:55:bc:b6:d7:63:1e:47:b4:76:
29:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5D:F9:2C:A4:D7:E4:CA:A8:44:AB:59:57:86:69:03:38:CD:F2:AD
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:36:f8:c9:7a:ea:b3:ee:2a:6b:41:cf:c0:dd:8b:9b:d3:79:
ce:3e:9d:2b:a6:5a:f3:e3:31:12:15:6f:f3:be:19:90:e6:a4:
e7:0b:e8:73:3f:a0:dc:c4:82:01:42:c0:81:00:90:9d:ca:07:
cb:2f:b0:bd:33:e6:a9:55:eb:be:5e:47:29:48:14:09:49:43:
b9:a5:00:6e:a0:2b:2d:11:6e:8c:3d:fa:a4:73:a8:45:38:82:
67:d8:6e:1b:d7:97:97:d2:80:5b:84:d6:4d:c0:8e:e0:5a:34:
61:16:30:d7:5a:27:97:db:fd:5f:7f:de:2d:2f:e8:61:87:ea:
60:dd:56:b8:81:a4:ad:ba:e0:18:d8:85:31:44:1f:7f:ea:1a:
30:e2:fe:d0:93:64:f0:7b:20:e0:65:20:23:74:41:37:90:c9:
cd:fe:2a:f7:ae:8c:a1:37:17:1c:06:d7:69:bc:2b:85:f9:08:
0b:be:d3:c0:e2:93:d1:c8:42:13:4a:b2:bc:22:6c:fd:67:a3:
33:85:af:80:91:0c:dc:e9:41:39:74:00:89:4c:64:46:8c:cb:
93:9c:31:03:39:b7:18:7a:b2:54:7b:e3:3c:01:fa:d8:01:1a:
8a:30:db:97:ef:fe:3b:50:ce:0d:cc:cd:b5:cc:64:a5:fc:8a:
b6:b5:2d:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdfuTbS18et7puiJSs9trnYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMzI1MGE1YzFiZGFiNzRiMWJkMjNjMDFjNTRhOGQ3MGI2
ZGVmMjAwHhcNMjUwNjExMTYwMTAzWhcNMjUwNjEyMTYwMTAzWjAzMTEwLwYDVQQD
Eyg0YjVkZjkyY2E0ZDdlNGNhYTg0NGFiNTk1Nzg2NjkwMzM4Y2RmMmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvnDJRVkCKwwiE5bz6XJLpgg+Jw/
8PkiJLJ4WW9X7hxdNSnUG5xjACgXvuppEtOLDJD7PBO53CSLlpVQsJshRZJ0qphm
m3BW6jbPUWOjEfspzkGKiHqI5ZT4OTJrWkA9zgOz8A07OIOj/spke15oZX/658wu
OGTvua8ry8oIgA23akOv4LJJtlcAX+Rj5Sp3hl7PH/rvsJVQcmUyHUR0FbdTiLUK
I459osQHHG+i46ndYxAAMCdHe42d7El9aa1fiQEIKn3F1b+lgaOAdPMNVH2KF5vD
af5sfO5/vXidAuRClEd0et5uRLNcBLGcW+lELv05Zu1VvLbXYx5HtHYp8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtd+Syk1+TKqESrWVeGaQM4zfKtMB8GA1UdIwQY
MBaAFGwyUKXBvat0sb0jwBxUqNcLbe8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEt
MjU0NDY4M2FhMTI1LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEtMjU0NDY4M2FhMTI1
LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDb4yXrq
s+4qa0HPwN2Lm9N5zj6dK6Za8+MxEhVv874ZkOak5wvocz+g3MSCAULAgQCQncoH
yy+wvTPmqVXrvl5HKUgUCUlDuaUAbqArLRFujD36pHOoRTiCZ9huG9eXl9KAW4TW
TcCO4Fo0YRYw11onl9v9X3/eLS/oYYfqYN1WuIGkrbrgGNiFMUQff+oaMOL+0JNk
8Hsg4GUgI3RBN5DJzf4q966MoTcXHAbXabwrhfkIC77TwOKT0chCE0qyvCJs/Wej
M4WvgJEM3OlBOXQAiUxkRozLk5wxAzm3GHqyVHvjPAH62AEaijDbl+/+O1DODczN
tcxkpfyKtrUtsg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 21:58:50 2025 by rpki-client