Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
File: bF4zDPom_UTUKU_Nvd-9iVEMakg.mft (raw, json)
Hash identifier: +mAMiMk4pHp3m6LjQmMQ3uO7Qus2UESUVaLvZhtId6I=
Subject key identifier: 12:53:EE:03:AB:2B:BE:6E:57:14:5C:7A:A1:20:0B:3E:C5:DA:1A:71
Authority key identifier: 6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
Certificate issuer: /CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Certificate serial: 0197469D984F7C08E0FC4FBCE6AE16271767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
Manifest number: 0C14
Signing time: Fri 06 Jun 2025 19:00:22 +0000
Manifest this update: Fri 06 Jun 2025 19:00:22 +0000
Manifest next update: Sat 07 Jun 2025 19:00:22 +0000
Files and hashes: 1: OWnzalrEaHNzu4AsD29DhoKa8Xs.roa (hash: w7GvV8HbETtyhTF6uR9vlKySlaF/SU8e2H/ocdNt7lY=)
2: bF4zDPom_UTUKU_Nvd-9iVEMakg.crl (hash: D7rcO0HSW/cI9EL3FckSNq5c1bi57RlHQVVKPbXSYL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:98:4f:7c:08:e0:fc:4f:bc:e6:ae:16:27:17:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Validity
Not Before: Jun 6 19:00:22 2025 GMT
Not After : Jun 7 19:00:22 2025 GMT
Subject: CN=1253ee03ab2bbe6e57145c7aa1200b3ec5da1a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:77:ca:0e:5a:cd:09:d1:d9:b0:0b:93:0a:
0b:f2:0b:02:f3:ca:25:44:99:f5:16:ae:66:65:5a:
e5:9d:f1:df:3e:cd:7f:1a:59:f0:d2:dd:c4:7e:a9:
53:f9:5e:6e:7d:c6:6b:d2:44:6d:72:11:3e:85:7d:
d9:08:1a:a2:4c:ee:8d:36:6a:24:89:b3:51:ce:4b:
6c:c7:5e:1e:e0:b9:ba:7d:15:39:83:fb:a9:53:b2:
f9:9d:ef:7d:77:42:52:02:7f:3e:7a:78:3b:66:e8:
d6:2d:6c:89:90:53:c2:fa:eb:46:83:c6:43:0d:29:
a0:ca:cc:60:a0:a9:02:9e:7c:b8:6f:86:56:f7:4f:
a8:46:ff:01:51:6c:78:c7:6b:d8:c8:56:9d:bb:c6:
be:35:a3:fb:48:44:78:f7:19:76:a9:c0:1a:7b:c1:
99:79:82:45:87:2e:a6:cf:09:21:b0:f2:62:a7:66:
81:08:94:67:2e:33:88:d3:7d:23:2c:3f:c8:5d:3a:
8e:c2:a9:a8:64:07:f0:49:03:c2:71:0c:22:b1:dd:
98:75:f1:90:27:b1:f8:56:f4:44:2b:15:55:09:6d:
63:92:ac:2d:a1:e7:73:75:9c:2b:28:45:30:87:36:
d3:df:5e:d5:c8:60:1b:ed:28:00:09:11:cc:1a:36:
53:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:53:EE:03:AB:2B:BE:6E:57:14:5C:7A:A1:20:0B:3E:C5:DA:1A:71
X509v3 Authority Key Identifier:
keyid:6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:64:30:08:ad:c6:9c:ea:7c:8c:03:12:43:4f:cc:cb:83:03:
b4:67:6b:08:b3:f8:f1:de:2f:3f:94:f7:8b:5a:a2:19:58:17:
a4:3c:46:f7:cb:a3:05:89:f3:93:d0:6e:02:45:2a:1a:6d:a1:
d8:d2:0d:92:53:3f:32:54:c5:5d:ad:59:83:75:02:4f:a8:ed:
54:51:08:43:11:2a:72:9f:ab:c1:f0:25:ba:64:28:51:b8:ad:
0a:bb:75:e2:de:fd:33:de:8a:c4:01:86:3e:33:3d:c0:72:5d:
14:5c:25:39:87:73:cc:05:4e:ec:bb:94:42:ba:0b:04:bb:0d:
12:80:e7:70:8c:15:45:72:6d:83:79:62:f4:d3:43:f8:5b:28:
4b:06:a9:3e:d1:ec:0b:a3:a8:24:00:8e:37:54:a9:f1:8a:83:
cc:b4:e5:0b:9d:6b:7c:d8:c7:a3:91:13:22:0a:fa:2e:d3:90:
65:1b:d0:7b:fe:d4:6a:ca:ad:8f:6c:88:2d:7f:1d:f2:9d:f0:
ba:cf:32:fb:ce:a6:02:df:00:70:70:0d:ba:41:92:b9:80:f3:
97:23:6b:3b:7b:31:fb:c0:8d:c1:11:d1:4d:c2:75:c6:01:e8:
d0:61:03:80:c4:dc:54:9f:61:17:98:f3:d4:39:a8:67:93:e9:
31:6f:db:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnZhPfAjg/E+85q4WJxdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNWUzMzBjZmEyNmZkNDRkNDI5NGZjZGJkZGZiZDg5NTEw
YzZhNDgwHhcNMjUwNjA2MTkwMDIyWhcNMjUwNjA3MTkwMDIyWjAzMTEwLwYDVQQD
EygxMjUzZWUwM2FiMmJiZTZlNTcxNDVjN2FhMTIwMGIzZWM1ZGExYTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5J3yg5azQnR2bALkwoL8gsC88ol
RJn1Fq5mZVrlnfHfPs1/Glnw0t3EfqlT+V5ufcZr0kRtchE+hX3ZCBqiTO6NNmok
ibNRzktsx14e4Lm6fRU5g/upU7L5ne99d0JSAn8+eng7ZujWLWyJkFPC+utGg8ZD
DSmgysxgoKkCnny4b4ZW90+oRv8BUWx4x2vYyFadu8a+NaP7SER49xl2qcAae8GZ
eYJFhy6mzwkhsPJip2aBCJRnLjOI030jLD/IXTqOwqmoZAfwSQPCcQwisd2YdfGQ
J7H4VvREKxVVCW1jkqwtoedzdZwrKEUwhzbT317VyGAb7SgACRHMGjZTNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJT7gOrK75uVxRceqEgCz7F2hpxMB8GA1UdIwQY
MBaAFGxeMwz6Jv1E1ClPzb3fvYlRDGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkY0ekRQb21fVVRVS1VfTnZkLTlpVkVNYWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84ZWFiY2QtZTZlOS00ZjQzLWJhNmMt
ZGEyMzEyYjY1YTUwLzEvYkY0ekRQb21fVVRVS1VfTnZkLTlpVkVNYWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84ZWFiY2QtZTZlOS00ZjQzLWJhNmMtZGEyMzEyYjY1YTUw
LzEvYkY0ekRQb21fVVRVS1VfTnZkLTlpVkVNYWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmQwCK3G
nOp8jAMSQ0/My4MDtGdrCLP48d4vP5T3i1qiGVgXpDxG98ujBYnzk9BuAkUqGm2h
2NINklM/MlTFXa1Zg3UCT6jtVFEIQxEqcp+rwfAlumQoUbitCrt14t79M96KxAGG
PjM9wHJdFFwlOYdzzAVO7LuUQroLBLsNEoDncIwVRXJtg3li9NND+FsoSwapPtHs
C6OoJACON1Sp8YqDzLTlC51rfNjHo5ETIgr6LtOQZRvQe/7Uasqtj2yILX8d8p3w
us8y+86mAt8AcHANukGSuYDzlyNrO3sx+8CNwRHRTcJ1xgHo0GEDgMTcVJ9hF5jz
1DmoZ5PpMW/bWw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:09 2025 by rpki-client