Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
File: b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json)
Hash identifier: ixusyjsHt1oF4Fdt2bMZ7QckR1p4L9HoEciSh+kh4Ec=
Subject key identifier: 85:87:49:C1:33:A2:55:14:F3:AD:9E:A4:39:E4:FD:EE:2E:51:25:F5
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Certificate issuer: /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial: 01974742A274429CAC3FC8FEDB126607D0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 22:00:38 +0000
Manifest this update: Fri 06 Jun 2025 22:00:38 +0000
Manifest next update: Sat 07 Jun 2025 22:00:38 +0000
Files and hashes: 1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: LK1TGJNJRBAj6z+L6mzttVChhonqiyV78/JZwsvzwzY=)
2: o-uxsmeV-GDLlYueP7RtZNtRLkY.roa (hash: xd5QoXbqzMFg+YyYmPM0+ODCfAWCU2/7fETeFx+AjCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:a2:74:42:9c:ac:3f:c8:fe:db:12:66:07:d0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Validity
Not Before: Jun 6 22:00:38 2025 GMT
Not After : Jun 7 22:00:38 2025 GMT
Subject: CN=858749c133a25514f3ad9ea439e4fdee2e5125f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:5d:a9:1d:0d:d4:78:40:c9:e3:ef:96:17:
6e:c5:e3:f4:3a:b8:b1:cc:51:6e:3d:ef:40:d6:03:
9b:7d:6e:91:63:71:52:15:b4:26:53:fb:b0:2d:78:
cd:4d:75:24:40:37:aa:67:90:96:29:ca:b3:8d:bc:
fe:c3:18:18:7f:bb:57:98:f9:12:42:06:71:a7:51:
a8:cf:9e:2f:27:e4:49:d8:98:fb:3c:74:55:31:57:
fd:65:0b:28:5f:4e:3f:a3:1a:55:d9:fa:45:d9:ee:
91:28:46:c0:07:a9:da:35:cb:da:bf:09:c9:c0:61:
03:c6:04:dd:b9:59:33:3c:cf:02:4c:4e:3f:e6:de:
9a:cf:93:f7:c7:9a:9b:3b:39:39:33:57:cf:19:87:
ac:5f:51:fe:33:fb:e6:a6:25:c9:d6:d8:ee:81:b4:
fe:18:28:2f:9e:1c:81:42:b4:4d:24:61:ed:8a:3c:
cc:9b:d3:b7:18:03:ac:0d:fe:b7:17:25:8c:0c:44:
51:76:5c:d5:27:7e:de:7c:74:2f:54:a7:cc:b8:69:
f9:ad:51:ef:a5:38:ee:e4:7f:42:0b:fc:61:49:93:
88:9a:05:b5:3f:ec:d7:ff:27:1b:69:46:bc:57:22:
b0:16:66:23:a5:ee:40:bf:5d:b1:4d:92:c3:52:77:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:87:49:C1:33:A2:55:14:F3:AD:9E:A4:39:E4:FD:EE:2E:51:25:F5
X509v3 Authority Key Identifier:
keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3b:ba:3b:4f:4c:91:96:29:66:ec:96:7c:76:bd:7e:67:f8:
b4:0a:72:d1:f1:9a:31:5d:b1:dc:70:fd:46:14:89:06:29:d3:
10:e1:d2:db:a3:8f:50:bc:44:3d:c6:b4:17:42:08:23:94:b5:
c9:99:a2:ba:97:00:ca:29:81:69:e2:46:4d:de:26:9b:35:f8:
d7:20:53:a8:e8:d3:fc:50:74:72:dd:23:f4:dc:22:0f:72:4c:
c9:ca:be:f9:21:ac:ca:c9:1a:e2:9c:7e:50:c3:8a:57:1a:c1:
ce:00:70:27:65:59:f3:69:56:88:fb:29:43:0e:a2:c5:05:7d:
a2:bf:79:d5:88:71:89:aa:26:60:00:28:16:2c:89:db:86:fb:
05:f3:1a:d1:da:9d:e5:34:fb:98:e5:81:60:cf:c4:1f:6c:bf:
1f:b6:5b:3f:26:8b:ec:d5:e3:d1:19:a4:88:39:e5:7e:17:b4:
3c:03:99:7d:64:cc:da:ae:f2:0d:56:1b:0f:ff:6b:b1:d3:3b:
32:76:08:ab:bd:a0:f6:a1:97:b3:40:46:92:01:f6:c4:d4:83:
e5:bc:07:44:35:6a:1b:34:41:9b:02:2d:e1:88:d7:63:79:09:
78:9c:98:1c:78:58:8f:27:50:b7:4d:73:dd:bb:51:11:b9:35:
25:e5:8f:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQqJ0QpysP8j+2xJmB9DaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYWQ2YTcxZGVmZTU2MGEwZTVjMjFmZmJiNDAzOGZiNDEw
OTEyOTUwHhcNMjUwNjA2MjIwMDM4WhcNMjUwNjA3MjIwMDM4WjAzMTEwLwYDVQQD
Eyg4NTg3NDljMTMzYTI1NTE0ZjNhZDllYTQzOWU0ZmRlZTJlNTEyNWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w1dqR0N1HhAyePvlhduxeP0Orix
zFFuPe9A1gObfW6RY3FSFbQmU/uwLXjNTXUkQDeqZ5CWKcqzjbz+wxgYf7tXmPkS
QgZxp1Goz54vJ+RJ2Jj7PHRVMVf9ZQsoX04/oxpV2fpF2e6RKEbAB6naNcvavwnJ
wGEDxgTduVkzPM8CTE4/5t6az5P3x5qbOzk5M1fPGYesX1H+M/vmpiXJ1tjugbT+
GCgvnhyBQrRNJGHtijzMm9O3GAOsDf63FyWMDERRdlzVJ37efHQvVKfMuGn5rVHv
pTju5H9CC/xhSZOImgW1P+zX/ycbaUa8VyKwFmYjpe5Av12xTZLDUne3MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWHScEzolUU862epDnk/e4uUSX1MB8GA1UdIwQY
MBaAFG+tanHe/lYKDlwh/7tAOPtBCRKVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjYxcWNkNy1WZ29PWENIX3UwQTQtMEVKRXBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yOTM2OTgtOTQ5ZC00NjY1LWJhMDct
OGNiNGUyNTNmMTc1LzEvYjYxcWNkNy1WZ29PWENIX3UwQTQtMEVKRXBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yOTM2OTgtOTQ5ZC00NjY1LWJhMDctOGNiNGUyNTNmMTc1
LzEvYjYxcWNkNy1WZ29PWENIX3UwQTQtMEVKRXBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAju6O09M
kZYpZuyWfHa9fmf4tApy0fGaMV2x3HD9RhSJBinTEOHS26OPULxEPca0F0III5S1
yZmiupcAyimBaeJGTd4mmzX41yBTqOjT/FB0ct0j9NwiD3JMycq++SGsyska4px+
UMOKVxrBzgBwJ2VZ82lWiPspQw6ixQV9or951YhxiaomYAAoFiyJ24b7BfMa0dqd
5TT7mOWBYM/EH2y/H7ZbPyaL7NXj0RmkiDnlfhe0PAOZfWTM2q7yDVYbD/9rsdM7
MnYIq72g9qGXs0BGkgH2xNSD5bwHRDVqGzRBmwIt4YjXY3kJeJyYHHhYjydQt01z
3btREbk1JeWPcg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:52:39 2025 by rpki-client