Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
File: bBAkoL37rZXwEGTVGM9uqWa0SIo.mft (raw, json)
Hash identifier: My+QJoLpgZAIsYMLv7punuBvNdoC13Lg/TF8HVWTMEc=
Subject key identifier: D6:06:7A:5C:0B:7C:1A:22:83:BC:15:62:2D:84:6C:9F:BB:07:D6:EE
Authority key identifier: 6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
Certificate issuer: /CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Certificate serial: 01974E8E416BA28B18239841744F417B1129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 08:00:35 +0000
Manifest this update: Sun 08 Jun 2025 08:00:35 +0000
Manifest next update: Mon 09 Jun 2025 08:00:35 +0000
Files and hashes: 1: 2jz_GVg3tc2PAmVfZM229I9y7DM.roa (hash: a4U4fdO6/HHzhz/D1fQJsN+9NOOESB95lRB1mTGoD/4=)
2: bBAkoL37rZXwEGTVGM9uqWa0SIo.crl (hash: 7RqTojkby/PRws4Q/NHZi/1h/l6suFn1WgQVqgUzyMw=)
3: qjQqwaE98pw-Tsc3qccVON2SJQg.roa (hash: y4z4CZUi94ZRWjv9y7p8MUe6n4UJbAQ8c5NqooIEDx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:41:6b:a2:8b:18:23:98:41:74:4f:41:7b:11:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Validity
Not Before: Jun 8 08:00:35 2025 GMT
Not After : Jun 9 08:00:35 2025 GMT
Subject: CN=d6067a5c0b7c1a2283bc15622d846c9fbb07d6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:d7:e8:2f:3a:cf:87:f4:0d:60:50:07:17:
cb:55:9f:29:0d:30:c8:95:c8:62:b5:6f:57:c2:41:
af:d1:3a:79:c2:25:bd:7a:8f:ca:99:5c:da:ac:06:
27:f6:24:4f:5f:e8:0a:80:7f:3a:a7:81:11:79:3a:
78:25:4d:65:cb:3c:f8:d8:0a:14:18:72:4c:a9:8f:
7f:49:8b:8a:9c:52:51:d5:60:f9:69:94:78:4c:98:
14:c4:43:67:d1:3f:cb:bf:f0:b2:34:11:b0:ae:d1:
4d:f7:b8:8a:50:5d:bf:1b:af:6b:89:38:b2:bf:0a:
14:1a:d5:54:a6:46:6f:bc:5a:4d:c6:96:ae:a0:16:
68:1e:b6:b3:96:d4:8f:05:64:b1:3d:19:d7:16:3c:
f1:0e:08:07:a4:75:8e:d4:04:30:c0:77:aa:1b:98:
a4:ff:ba:2e:ad:4d:4c:ad:39:8b:46:86:1d:a5:97:
97:77:01:ec:d3:68:af:87:0b:31:f9:04:f9:32:d7:
1b:99:3a:49:30:e9:a5:0f:1a:41:75:03:46:60:ed:
58:42:1c:ed:90:b1:66:99:86:c8:c8:eb:0d:24:e3:
cc:1b:c5:7b:09:93:03:46:8b:d7:c3:38:c6:21:db:
1e:db:f0:29:83:33:41:2c:f5:d3:49:27:66:2f:ec:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:06:7A:5C:0B:7C:1A:22:83:BC:15:62:2D:84:6C:9F:BB:07:D6:EE
X509v3 Authority Key Identifier:
keyid:6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5d:e3:d4:90:58:09:42:a8:ae:f7:23:7d:43:d1:b1:d9:53:
be:48:89:2b:2f:cd:bb:b7:54:55:ae:53:29:4f:79:99:97:fe:
bb:01:85:41:74:fc:44:dc:90:ea:6f:f4:3c:b8:de:d3:df:de:
ff:6e:71:2b:08:56:c9:55:f4:3c:8c:0d:4b:25:e1:6d:9c:ac:
82:26:f6:a0:6c:8c:a6:19:4d:98:42:e1:d3:08:9d:00:26:a7:
35:55:9b:7f:f0:39:99:94:f6:22:db:66:1c:44:2d:cf:c5:1e:
26:6f:45:2a:af:aa:ea:6c:2f:b2:4b:5b:33:08:52:97:f1:38:
a7:e7:ec:2a:99:26:2e:f0:26:d6:da:cf:dc:7e:57:f6:81:b7:
a7:41:d9:22:c8:8d:25:e7:87:ff:79:1d:98:bf:33:75:04:eb:
69:02:a2:52:fa:2e:a3:60:bb:da:83:e3:68:83:c7:2a:ec:a0:
0e:43:1a:62:3c:fd:c6:64:ae:bd:19:6f:f4:bf:7c:2e:da:09:
ec:ee:2e:fa:ee:8c:b9:34:c9:93:20:da:1e:fa:be:73:ce:d1:
ea:43:64:8c:be:04:08:f4:1b:21:ec:d2:49:7f:ee:2f:f1:91:
7b:91:bc:92:65:cb:06:bd:04:8f:46:c6:5c:98:90:60:fc:2c:
9c:06:9a:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOjkFroosYI5hBdE9BexEpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMTAyNGEwYmRmYmFkOTVmMDEwNjRkNTE4Y2Y2ZWE5NjZi
NDQ4OGEwHhcNMjUwNjA4MDgwMDM1WhcNMjUwNjA5MDgwMDM1WjAzMTEwLwYDVQQD
EyhkNjA2N2E1YzBiN2MxYTIyODNiYzE1NjIyZDg0NmM5ZmJiMDdkNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13HX6C86z4f0DWBQBxfLVZ8pDTDI
lchitW9XwkGv0Tp5wiW9eo/KmVzarAYn9iRPX+gKgH86p4EReTp4JU1lyzz42AoU
GHJMqY9/SYuKnFJR1WD5aZR4TJgUxENn0T/Lv/CyNBGwrtFN97iKUF2/G69riTiy
vwoUGtVUpkZvvFpNxpauoBZoHrazltSPBWSxPRnXFjzxDggHpHWO1AQwwHeqG5ik
/7ourU1MrTmLRoYdpZeXdwHs02ivhwsx+QT5MtcbmTpJMOmlDxpBdQNGYO1YQhzt
kLFmmYbIyOsNJOPMG8V7CZMDRovXwzjGIdse2/ApgzNBLPXTSSdmL+yBbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYGelwLfBoig7wVYi2EbJ+7B9buMB8GA1UdIwQY
MBaAFGwQJKC9+62V8BBk1RjPbqlmtEiKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJBa29MMzdyWlh3RUdUVkdNOXVxV2EwU0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZDU4YjUtNGYxMy00N2IyLWE1N2Ut
MjgzYmIwOTIzODE3LzEvYkJBa29MMzdyWlh3RUdUVkdNOXVxV2EwU0lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84ZDU4YjUtNGYxMy00N2IyLWE1N2UtMjgzYmIwOTIzODE3
LzEvYkJBa29MMzdyWlh3RUdUVkdNOXVxV2EwU0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoF3j1JBY
CUKorvcjfUPRsdlTvkiJKy/Nu7dUVa5TKU95mZf+uwGFQXT8RNyQ6m/0PLje09/e
/25xKwhWyVX0PIwNSyXhbZysgib2oGyMphlNmELh0widACanNVWbf/A5mZT2Ittm
HEQtz8UeJm9FKq+q6mwvsktbMwhSl/E4p+fsKpkmLvAm1trP3H5X9oG3p0HZIsiN
JeeH/3kdmL8zdQTraQKiUvouo2C72oPjaIPHKuygDkMaYjz9xmSuvRlv9L98LtoJ
7O4u+u6MuTTJkyDaHvq+c87R6kNkjL4ECPQbIezSSX/uL/GRe5G8kmXLBr0Ej0bG
XJiQYPwsnAaa5A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:50:36 2025 by rpki-client