Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
File: bAqWFKxOEOei4qW8EvhiMGTInvk.mft (raw, json)
Hash identifier: /effGCs8ck3QNMrdiN9BEGxao/5Mae17tAUms/4/IHk=
Subject key identifier: D9:46:47:4F:91:50:C3:BF:D2:56:48:D1:48:38:5F:58:EA:0E:81:DD
Authority key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
Certificate issuer: /CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Certificate serial: 01974DB2A79C3C7DDE0E4231D59C73807C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 04:00:43 +0000
Manifest this update: Sun 08 Jun 2025 04:00:43 +0000
Manifest next update: Mon 09 Jun 2025 04:00:43 +0000
Files and hashes: 1: F67gDfZc4Jx2LCZVEE2FihPJzHw.roa (hash: yPyUtL/skPgjKLNjvoKJs7SdqhdnCeGN7LFhVgvBzCk=)
2: bAqWFKxOEOei4qW8EvhiMGTInvk.crl (hash: Z7kYv5Ult5C/C4g9b9B7s8GDwTHmewp1x/0tr8F1qUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:a7:9c:3c:7d:de:0e:42:31:d5:9c:73:80:7c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Validity
Not Before: Jun 8 04:00:43 2025 GMT
Not After : Jun 9 04:00:43 2025 GMT
Subject: CN=d946474f9150c3bfd25648d148385f58ea0e81dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2d:12:6c:ea:ff:35:ca:26:be:d3:39:a5:8b:
ed:3d:d8:93:85:3a:0e:35:16:25:f3:72:c5:62:68:
00:ab:1b:fc:8f:9f:3f:14:a8:49:36:7f:52:04:4f:
4f:0e:28:20:3d:ad:cf:07:ca:38:18:31:0b:a0:e0:
56:f4:95:de:c2:f4:04:53:b9:3d:97:5a:55:64:aa:
ad:54:26:27:63:dd:a5:c5:d5:b5:0a:78:5d:81:ee:
af:de:0b:50:d7:41:83:57:6c:20:9a:51:da:cf:0b:
0f:1a:9e:53:00:a9:79:63:11:39:cf:41:dc:42:63:
88:4a:86:33:1d:23:20:14:21:9d:38:b5:fe:d4:9d:
8c:a8:7c:af:b8:c4:d7:d3:34:65:01:ae:22:29:9e:
8e:c2:04:f6:c3:43:fd:c4:56:d7:27:71:06:0b:80:
e8:17:28:9f:dd:c1:78:02:87:cc:78:0e:ac:d8:43:
f8:35:ea:86:45:6a:9b:aa:ee:ee:b7:aa:00:78:94:
20:57:6d:40:88:b6:a9:1c:93:9a:22:7b:a1:e9:09:
5d:86:6d:ba:0d:c7:86:ec:e4:bc:df:4b:1d:28:2b:
7a:6d:33:6a:24:01:45:be:71:e1:2a:06:62:02:ba:
14:64:96:d3:a7:6c:d2:50:b7:94:50:2e:04:93:ae:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:46:47:4F:91:50:C3:BF:D2:56:48:D1:48:38:5F:58:EA:0E:81:DD
X509v3 Authority Key Identifier:
keyid:6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:77:bb:a1:1a:43:2c:42:3c:b0:7e:a4:30:f5:cf:e4:c3:43:
4d:09:91:06:70:22:0a:a7:e4:09:72:31:41:51:62:b6:56:85:
41:6f:43:b0:af:b5:09:1d:e6:c0:08:46:a3:59:fd:1b:a2:5d:
48:6b:35:50:92:4d:79:ee:7e:67:b0:bb:ee:b5:39:fc:75:73:
4d:80:73:1c:54:11:b7:f8:57:27:da:94:a6:c0:3c:c6:80:50:
0b:65:5b:d9:46:e8:26:10:41:8e:5d:f7:5f:a3:7e:40:5b:7c:
78:e8:20:7c:63:7d:09:79:75:b6:27:55:50:78:63:5c:fd:84:
3e:a6:0f:33:a7:b7:b5:6b:0f:39:38:34:f8:70:ed:85:3f:4f:
53:ab:51:71:74:10:b0:81:6c:cc:be:0f:4d:ad:02:14:5f:7e:
c6:43:6d:86:e2:4c:80:e3:11:ca:9f:e7:33:05:c7:9a:fe:b2:
de:5d:30:fb:58:c9:79:15:37:4e:6e:f0:3b:de:6a:24:cc:71:
9d:35:bd:e6:d5:68:74:9c:b5:24:fb:da:8e:76:c0:9c:17:63:
3f:79:d9:4f:f7:ce:01:5c:c6:3f:28:ea:92:9b:2d:65:22:ba:
e4:ef:be:54:a1:1c:fd:d0:20:b5:ad:ff:e9:82:cb:43:23:cd:
50:0d:2d:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNsqecPH3eDkIx1ZxzgHwoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMGE5NjE0YWM0ZTEwZTdhMmUyYTViYzEyZjg2MjMwNjRj
ODllZjkwHhcNMjUwNjA4MDQwMDQzWhcNMjUwNjA5MDQwMDQzWjAzMTEwLwYDVQQD
EyhkOTQ2NDc0ZjkxNTBjM2JmZDI1NjQ4ZDE0ODM4NWY1OGVhMGU4MWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2i0SbOr/NcomvtM5pYvtPdiThToO
NRYl83LFYmgAqxv8j58/FKhJNn9SBE9PDiggPa3PB8o4GDELoOBW9JXewvQEU7k9
l1pVZKqtVCYnY92lxdW1Cnhdge6v3gtQ10GDV2wgmlHazwsPGp5TAKl5YxE5z0Hc
QmOISoYzHSMgFCGdOLX+1J2MqHyvuMTX0zRlAa4iKZ6OwgT2w0P9xFbXJ3EGC4Do
Fyif3cF4AofMeA6s2EP4NeqGRWqbqu7ut6oAeJQgV21AiLapHJOaInuh6Qldhm26
DceG7OS830sdKCt6bTNqJAFFvnHhKgZiAroUZJbTp2zSULeUUC4Ek66GeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlGR0+RUMO/0lZI0Ug4X1jqDoHdMB8GA1UdIwQY
MBaAFGwKlhSsThDnouKlvBL4YjBkyJ75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkFxV0ZLeE9FT2VpNHFXOEV2aGlNR1RJbnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82NGEzOTItMzcyZS00OGE2LWEwZTIt
ZjVhZDE2N2Q4NDk0LzEvYkFxV0ZLeE9FT2VpNHFXOEV2aGlNR1RJbnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi82NGEzOTItMzcyZS00OGE2LWEwZTItZjVhZDE2N2Q4NDk0
LzEvYkFxV0ZLeE9FT2VpNHFXOEV2aGlNR1RJbnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsne7oRpD
LEI8sH6kMPXP5MNDTQmRBnAiCqfkCXIxQVFitlaFQW9DsK+1CR3mwAhGo1n9G6Jd
SGs1UJJNee5+Z7C77rU5/HVzTYBzHFQRt/hXJ9qUpsA8xoBQC2Vb2UboJhBBjl33
X6N+QFt8eOggfGN9CXl1tidVUHhjXP2EPqYPM6e3tWsPOTg0+HDthT9PU6tRcXQQ
sIFszL4PTa0CFF9+xkNthuJMgOMRyp/nMwXHmv6y3l0w+1jJeRU3Tm7wO95qJMxx
nTW95tVodJy1JPvajnbAnBdjP3nZT/fOAVzGPyjqkpstZSK65O++VKEc/dAgta3/
6YLLQyPNUA0toA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:15:04 2025 by rpki-client