
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
File: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft (raw, json)
Hash identifier: L6o1IdMfSVyLSt5e7DC2QxN/uhkfLULQRS/GuafUaas=
Subject key identifier: 27:13:B1:A3:42:14:FB:7E:A0:53:21:B5:12:E3:04:E5:A7:52:B5:80
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 019922FA35F6B4966B62D222BDCFF001407F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
Manifest number: 0D56
Signing time: Sun 07 Sep 2025 07:00:47 +0000
Manifest this update: Sun 07 Sep 2025 07:00:47 +0000
Manifest next update: Mon 08 Sep 2025 07:00:47 +0000
Files and hashes: 1: Bla5VO18gnOwAGsyi_ag0PlrZc8.roa (hash: bB+354vnCwp35QcIDtKoGUcD5g72kaYCQWv9dkrPEdQ=)
2: QDG31XRppMRHcvvmEDOK8yxyWfY.roa (hash: IAXCVrJq/0jbZsdZm/s/bAXJF0pu+1bXoYQ6KRJa9ZY=)
3: Rb_a0gRCH0c3VYafxMa-alIDM-4.roa (hash: TgalgmNta8ylL7dWW9pXnzuDWeshmBXiGFqNZT4RVpk=)
4: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl (hash: aqPFwi/gPzH0gqlXQpeqsjQhHid9VPzw91Xx/wQ+5y8=)
5: i3QBzkSBQXqE1KUhbqTlGV1alRM.roa (hash: CIGq0vRpsPzUMdoNxu3MkZkuvrvIk8NixCm6ZvzmcNI=)
6: nfGSbOJalGhqP8byPsCkjMCHfQQ.roa (hash: nuRymi3xQzwNgp3Dfs4cFrnjeAaJNgEImZjk4KoRXq4=)
7: rkb71IFKmOwHN1Jg5Et0bzsKc_I.roa (hash: WK/N2S2Y2IN8I1NQby/H/tCVPb7ORwKAQmcCTQ3LUwU=)
8: uSj7yNwgRLZ_iGkwQFt66JKSZtc.roa (hash: VBEEf07+DQAhobALIA3FtB3+9uIqNGb9hva1nlb9JoU=)
9: wdntFdrB2WVhyiSz8CdnwsgUr1E.roa (hash: aBxp76/Fhwiw6zYPkXQ7hzraqQ9fxtFY10F00BmNMf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:35:f6:b4:96:6b:62:d2:22:bd:cf:f0:01:40:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Sep 7 07:00:47 2025 GMT
Not After : Sep 8 07:00:47 2025 GMT
Subject: CN=2713b1a34214fb7ea05321b512e304e5a752b580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:5c:95:5d:7c:d1:00:f3:de:6b:5f:cd:90:
72:83:51:47:e6:ab:9a:3d:f3:35:80:56:23:99:48:
a0:09:f9:ea:be:a0:5a:1f:93:46:39:36:0f:c1:73:
2b:e5:b1:91:6e:68:17:8f:6e:ba:ac:58:9a:88:a7:
f5:15:83:8a:d7:07:9e:79:28:36:52:db:62:02:e4:
44:41:2a:4a:6d:6e:85:9c:ee:92:9e:09:bf:9b:3d:
c7:8f:73:98:80:22:aa:8a:4c:48:8d:83:cb:64:43:
e0:c0:32:6c:0e:60:fd:9e:2c:77:4f:84:12:c1:ba:
1b:b2:70:32:b9:9d:af:5c:bd:f0:e3:a1:3c:d8:58:
62:10:2a:1d:77:5e:94:c3:e7:8a:3b:0a:6d:e4:0a:
15:6f:d7:91:fb:a7:32:f3:94:0f:92:5a:0c:de:ea:
dc:fb:00:e8:6b:30:51:6f:65:31:97:48:73:2c:16:
20:c2:4c:06:4e:d6:b3:48:5b:6b:b9:69:92:3c:ab:
02:0d:2e:c7:98:2c:d0:df:3c:51:58:79:b2:04:90:
8c:e3:75:d2:de:0f:b0:b4:2f:6d:ae:fc:ba:c2:4c:
7c:27:e3:21:7b:0c:db:3a:21:c3:87:a6:d3:2b:90:
54:ef:d7:b1:1d:40:92:34:dd:55:db:60:de:76:65:
26:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:13:B1:A3:42:14:FB:7E:A0:53:21:B5:12:E3:04:E5:A7:52:B5:80
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:55:c9:f0:98:1f:58:f5:0a:41:9c:fe:3f:30:a7:b9:80:a1:
28:d2:11:e6:1b:bd:e7:4a:42:26:2a:e8:73:61:4d:7a:1d:72:
c8:40:c5:64:fd:5b:a6:16:d9:3a:f0:16:5d:90:bc:45:d3:62:
43:5e:47:58:76:79:39:72:d3:87:e2:eb:69:0d:9d:a3:a1:de:
0d:ff:56:44:b8:d8:f0:fa:72:da:bf:39:34:ae:49:7e:65:79:
ad:78:4d:c5:ec:93:cb:ef:05:d4:45:fa:a6:33:26:f6:c2:e6:
52:a1:65:ae:53:7c:c6:c9:44:df:c9:b5:b7:19:d0:a2:26:4c:
0e:78:f3:c2:03:c5:75:7d:2c:59:49:b9:53:db:3e:44:9c:0c:
8c:ec:1e:a1:1a:14:16:40:d3:c0:9e:0b:ae:a1:f8:80:7c:ec:
c8:ad:39:92:68:56:6f:37:be:a4:63:c6:8f:e7:e2:83:78:c3:
a5:80:d3:19:b1:b4:63:fb:86:2e:a5:82:a3:fa:6f:85:4d:e7:
84:d3:0a:5b:14:c2:7e:3c:fd:63:c0:e5:57:ec:5d:de:3a:c1:
55:f1:c4:3c:b9:ee:3b:9c:d1:83:19:bb:a2:44:b1:05:45:56:
7c:a1:e2:c3:85:a1:44:47:e1:00:a7:49:76:e8:3f:b8:a8:38:
6d:a5:48:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+jX2tJZrYtIivc/wAUB/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYmQ1MTU3NmI0YTkzNDYwYTQ2NWFmMzVlNmJmNTUwZjU1
NDg4OTQwHhcNMjUwOTA3MDcwMDQ3WhcNMjUwOTA4MDcwMDQ3WjAzMTEwLwYDVQQD
EygyNzEzYjFhMzQyMTRmYjdlYTA1MzIxYjUxMmUzMDRlNWE3NTJiNTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcVclV180QDz3mtfzZByg1FH5qua
PfM1gFYjmUigCfnqvqBaH5NGOTYPwXMr5bGRbmgXj266rFiaiKf1FYOK1weeeSg2
UttiAuREQSpKbW6FnO6Sngm/mz3Hj3OYgCKqikxIjYPLZEPgwDJsDmD9nix3T4QS
wbobsnAyuZ2vXL3w46E82FhiECodd16Uw+eKOwpt5AoVb9eR+6cy85QPkloM3urc
+wDoazBRb2Uxl0hzLBYgwkwGTtazSFtruWmSPKsCDS7HmCzQ3zxRWHmyBJCM43XS
3g+wtC9trvy6wkx8J+MhewzbOiHDh6bTK5BU79exHUCSNN1V22DedmUmzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcTsaNCFPt+oFMhtRLjBOWnUrWAMB8GA1UdIwQY
MBaAFG29UVdrSpNGCkZa815r9VD1VIiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUt
MWVmN2VmMTdmYTQzLzEvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUtMWVmN2VmMTdmYTQz
LzEvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFXJ8Jgf
WPUKQZz+PzCnuYChKNIR5hu950pCJiroc2FNeh1yyEDFZP1bphbZOvAWXZC8RdNi
Q15HWHZ5OXLTh+LraQ2do6HeDf9WRLjY8Ppy2r85NK5JfmV5rXhNxeyTy+8F1EX6
pjMm9sLmUqFlrlN8xslE38m1txnQoiZMDnjzwgPFdX0sWUm5U9s+RJwMjOweoRoU
FkDTwJ4LrqH4gHzsyK05kmhWbze+pGPGj+fig3jDpYDTGbG0Y/uGLqWCo/pvhU3n
hNMKWxTCfjz9Y8DlV+xd3jrBVfHEPLnuO5zRgxm7okSxBUVWfKHiw4WhREfhAKdJ
dug/uKg4baVIIQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:57:03 2025 by rpki-client