Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
File: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft (raw, json)
Hash identifier: d8KlCgpZ2iS8UvrZvtC6iao/w/PGUqwuvv0kFg5/+C8=
Subject key identifier: 20:C2:0A:D0:93:8F:C3:53:82:36:02:62:6E:4C:16:02:5E:28:D8:3E
Authority key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
Certificate issuer: /CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Certificate serial: 0199233101B2FC3195E904E8CD160D89AD24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 08:00:38 +0000
Manifest this update: Sun 07 Sep 2025 08:00:38 +0000
Manifest next update: Mon 08 Sep 2025 08:00:38 +0000
Files and hashes: 1: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl (hash: QcxC5FK3GkKv02h9lAR/IXaS1K0zYQQMAiIEyZLlYkI=)
2: ifWZmIX4SXkuGkJP6QgKSkmuMBc.roa (hash: nU4OGwo7QVYE2TFfLmXken2fHAzhkJ4DtS2BG5Z6bzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:01:b2:fc:31:95:e9:04:e8:cd:16:0d:89:ad:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Validity
Not Before: Sep 7 08:00:38 2025 GMT
Not After : Sep 8 08:00:38 2025 GMT
Subject: CN=20c20ad0938fc353823602626e4c16025e28d83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:c8:b2:0f:a0:48:04:6b:f4:b6:84:3a:2e:
d4:87:26:a2:68:5a:fe:c4:e1:ad:44:d9:f4:fe:fc:
7a:32:3f:91:28:e9:20:e1:55:27:ab:6a:2a:e3:89:
05:1b:c5:50:d5:23:6c:f8:82:36:b5:4e:a7:d3:f8:
c1:d0:e2:60:82:6b:f1:52:8a:05:8e:db:7f:70:67:
b8:76:4e:02:1f:20:43:80:59:cc:50:da:45:13:1e:
8b:ce:6f:38:38:f2:4b:49:e3:a7:9e:12:10:c2:22:
b5:21:55:31:81:34:15:f8:ee:90:45:5e:9a:8e:30:
7b:e4:8f:a1:b9:13:ad:f9:16:fa:d6:f7:5e:d6:8c:
7c:bc:da:d3:7b:f3:c1:25:53:be:85:9b:5f:fa:01:
6b:4e:22:5f:a0:7b:9b:ac:27:3a:19:02:f7:16:cb:
ab:60:0c:c7:73:b3:e6:76:e5:cd:03:1c:5e:ad:b9:
10:e4:0a:90:50:09:e0:f7:06:aa:a8:5e:82:e8:89:
01:ec:5d:da:4d:ce:3b:51:71:5d:5b:bc:e9:66:ba:
f1:ad:03:4b:b4:b0:78:df:e2:05:6f:ba:c5:0a:be:
88:35:eb:06:8f:8e:15:eb:37:22:92:73:2d:67:35:
b8:40:66:6d:c3:7b:71:f5:63:09:13:08:b3:4c:94:
0d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C2:0A:D0:93:8F:C3:53:82:36:02:62:6E:4C:16:02:5E:28:D8:3E
X509v3 Authority Key Identifier:
keyid:05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a2:a6:27:e8:4f:d6:37:1d:e9:fc:7e:17:74:21:10:83:a5:
07:0d:27:2a:bd:2d:e6:36:3b:5f:47:a5:2c:d5:88:dd:39:71:
91:63:23:a9:52:76:8d:7a:96:6f:82:33:e6:58:4b:8d:32:61:
d3:d4:ba:73:6e:cf:0b:23:31:c3:ec:bd:ee:f6:ee:fb:8f:1d:
39:67:38:3c:4e:aa:8e:68:48:c1:1a:63:46:ee:9c:60:4a:0e:
ca:d0:a3:f4:0b:a3:96:06:0c:d4:f8:1a:b8:61:51:94:58:5a:
cc:9b:ca:ed:b9:72:f7:ee:4e:69:be:de:20:00:7d:32:26:d0:
88:ec:81:23:8d:67:b1:9d:61:6e:86:9a:a0:94:3b:56:3c:b0:
ef:2a:48:dd:ed:6a:df:cd:80:60:ea:f5:e6:22:d3:2e:aa:01:
ea:be:25:1c:50:4a:60:c2:ba:7e:34:36:c3:be:33:f9:32:63:
54:24:bc:53:2d:06:07:0e:8d:ce:a9:a5:21:7e:44:f7:e7:0a:
2b:b6:56:ab:45:66:fb:0d:38:9b:88:02:33:d0:06:ee:a5:4d:
c9:c6:2d:a9:2b:cc:80:68:85:27:a6:a4:25:82:4b:d0:1c:00:
05:a8:06:b2:f2:24:e1:34:53:59:ce:8e:31:d2:42:83:06:64:
2e:22:39:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMQGy/DGV6QTozRYNia0kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YmQwZmFlZWRlNzNhZDNjZmM0Nzc4YjgyMzhjNjA4ZTQw
ZTk4NDEwHhcNMjUwOTA3MDgwMDM4WhcNMjUwOTA4MDgwMDM4WjAzMTEwLwYDVQQD
EygyMGMyMGFkMDkzOGZjMzUzODIzNjAyNjI2ZTRjMTYwMjVlMjhkODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5/Isg+gSARr9LaEOi7UhyaiaFr+
xOGtRNn0/vx6Mj+RKOkg4VUnq2oq44kFG8VQ1SNs+II2tU6n0/jB0OJggmvxUooF
jtt/cGe4dk4CHyBDgFnMUNpFEx6Lzm84OPJLSeOnnhIQwiK1IVUxgTQV+O6QRV6a
jjB75I+huROt+Rb61vde1ox8vNrTe/PBJVO+hZtf+gFrTiJfoHubrCc6GQL3Fsur
YAzHc7PmduXNAxxerbkQ5AqQUAng9waqqF6C6IkB7F3aTc47UXFdW7zpZrrxrQNL
tLB43+IFb7rFCr6INesGj44V6zciknMtZzW4QGZtw3tx9WMJEwizTJQNtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDCCtCTj8NTgjYCYm5MFgJeKNg+MB8GA1UdIwQY
MBaAFAW9D67t5zrTz8R3i4I4xgjkDphBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmIwUHJ1M25PdFBQeEhlTGdqakdDT1FPbUVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MjE3ODgtZTRiZC00ODg5LWE1OTct
MTJkMGI2MzJlNWU4LzEvQmIwUHJ1M25PdFBQeEhlTGdqakdDT1FPbUVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy81MjE3ODgtZTRiZC00ODg5LWE1OTctMTJkMGI2MzJlNWU4
LzEvQmIwUHJ1M25PdFBQeEhlTGdqakdDT1FPbUVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6KmJ+hP
1jcd6fx+F3QhEIOlBw0nKr0t5jY7X0elLNWI3TlxkWMjqVJ2jXqWb4Iz5lhLjTJh
09S6c27PCyMxw+y97vbu+48dOWc4PE6qjmhIwRpjRu6cYEoOytCj9AujlgYM1Pga
uGFRlFhazJvK7bly9+5Oab7eIAB9MibQiOyBI41nsZ1hboaaoJQ7Vjyw7ypI3e1q
382AYOr15iLTLqoB6r4lHFBKYMK6fjQ2w74z+TJjVCS8Uy0GBw6NzqmlIX5E9+cK
K7ZWq0Vm+w04m4gCM9AG7qVNycYtqSvMgGiFJ6akJYJL0BwABagGsvIk4TRTWc6O
MdJCgwZkLiI5/w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:36 2025 by rpki-client