Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
File: bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json)
Hash identifier: RmJCC+akcs9ucmFBLdMgpzjfyGizOUT43TsC79/4gsc=
Subject key identifier: 89:38:CB:89:A0:C4:85:D2:D9:6F:B6:12:4A:35:0C:BB:DF:09:BA:A0
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial: 01994E1B93A2498CFDBDAAD4E8EFDBFB22B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
Manifest number: 14F5
Signing time: Mon 15 Sep 2025 16:00:53 +0000
Manifest this update: Mon 15 Sep 2025 16:00:53 +0000
Manifest next update: Tue 16 Sep 2025 16:00:53 +0000
Files and hashes: 1: 2KIRExbLtGmhtukhHSshDYZqZYU.roa (hash: e/XJlDAv9fIgfof/gpzNCtKITxsPIC/gKrF0rJCVeE8=)
2: F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa (hash: VOxoNM7Ut17hlIuVaKSt03PbZmGteVPLxGUSpYz/b7g=)
3: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: PDuwxblqhe5JEQQH7pJDnLV6dOoOP802HmPKKZuJ3eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:1b:93:a2:49:8c:fd:bd:aa:d4:e8:ef:db:fb:22:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Validity
Not Before: Sep 15 16:00:53 2025 GMT
Not After : Sep 16 16:00:53 2025 GMT
Subject: CN=8938cb89a0c485d2d96fb6124a350cbbdf09baa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:00:a8:aa:de:bb:c4:8e:38:34:47:97:6e:
82:6d:6c:3a:bd:60:ec:da:4b:de:d8:bf:7c:3b:80:
d8:55:df:bb:6c:a3:ac:ac:db:12:c3:e6:14:86:52:
45:47:b8:52:fc:54:be:5c:88:22:49:24:43:4a:4d:
9f:db:11:ca:03:28:29:90:f6:f9:e7:51:95:e9:44:
36:0d:6c:59:3e:2b:f3:6c:32:5c:a3:dc:2a:15:e3:
24:b0:a0:2e:92:11:5f:a2:1c:37:2f:3c:24:ed:ca:
d4:5d:4e:97:48:99:b0:44:cf:d5:0b:a2:f8:4a:09:
88:a4:6f:db:89:c1:fc:40:c9:70:2a:94:b5:f9:4d:
38:89:7d:38:ae:5e:67:a3:81:2f:e9:ba:ee:be:54:
6d:7d:df:bc:db:54:5d:24:fa:f0:36:7f:af:8f:2a:
30:fa:5c:5a:c5:ee:7a:3f:2e:f8:16:b2:67:0b:91:
91:8d:9f:a3:dd:98:bb:7f:3d:aa:7d:69:8d:de:46:
d6:18:7c:db:51:de:b0:bb:0d:38:f5:76:c6:b9:c3:
8f:d2:dd:87:24:9e:0b:24:32:76:37:53:19:6f:ae:
cb:1c:70:5e:a8:87:d2:7f:62:b2:a8:7e:0e:37:2a:
9c:a0:b7:99:73:c6:be:1e:91:c3:20:7e:59:ef:23:
ce:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:38:CB:89:A0:C4:85:D2:D9:6F:B6:12:4A:35:0C:BB:DF:09:BA:A0
X509v3 Authority Key Identifier:
keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:11:24:7a:2f:0f:c7:1b:a2:fd:eb:13:3e:14:06:95:75:c0:
ba:d1:02:f7:2f:c8:a7:a7:05:c6:07:08:f1:56:bf:da:72:f4:
d5:23:18:98:db:51:92:69:38:00:a2:ad:00:d5:5f:02:3d:17:
06:b9:c2:9c:ec:d1:53:87:79:d5:8e:33:0d:a0:eb:e2:ad:42:
9d:f8:3c:e5:bf:e0:ed:cc:16:ff:ab:d5:e7:d1:02:56:34:b5:
dc:7c:61:03:c8:49:9c:1b:b4:cb:c5:3a:a4:56:8c:0b:0e:52:
97:57:f5:24:7c:d7:39:8b:0b:1c:46:64:46:5a:84:c3:cb:63:
64:4f:bf:33:ed:9d:cd:4f:a8:02:0a:7f:24:62:bf:2c:81:df:
f3:41:3e:d6:fc:01:1a:40:61:5e:24:51:44:df:0a:0d:8a:c8:
5e:d8:5a:15:65:78:7d:26:f4:00:60:49:09:ba:ae:66:a9:a5:
29:e3:83:fa:a4:a0:f4:48:10:06:46:3f:43:77:6c:b2:eb:14:
a4:25:c3:e6:ba:e5:84:61:b5:8c:b8:4a:61:0a:aa:63:83:c1:
ce:b1:6b:00:e6:e5:5f:ce:2e:32:7e:91:40:c2:4e:9d:3b:a5:
cd:e1:de:12:06:8b:61:f2:81:ae:e5:11:67:52:74:24:3a:ad:
2d:b8:70:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlOG5OiSYz9varU6O/b+yK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzcwMWQ1ODUwNDkxZjUwMjk5ZWY5M2YyZDc0MDliNzhj
ZDZjOTYwHhcNMjUwOTE1MTYwMDUzWhcNMjUwOTE2MTYwMDUzWjAzMTEwLwYDVQQD
Eyg4OTM4Y2I4OWEwYzQ4NWQyZDk2ZmI2MTI0YTM1MGNiYmRmMDliYWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylIAqKreu8SOODRHl26CbWw6vWDs
2kve2L98O4DYVd+7bKOsrNsSw+YUhlJFR7hS/FS+XIgiSSRDSk2f2xHKAygpkPb5
51GV6UQ2DWxZPivzbDJco9wqFeMksKAukhFfohw3Lzwk7crUXU6XSJmwRM/VC6L4
SgmIpG/bicH8QMlwKpS1+U04iX04rl5no4Ev6bruvlRtfd+821RdJPrwNn+vjyow
+lxaxe56Py74FrJnC5GRjZ+j3Zi7fz2qfWmN3kbWGHzbUd6wuw049XbGucOP0t2H
JJ4LJDJ2N1MZb67LHHBeqIfSf2KyqH4ONyqcoLeZc8a+HpHDIH5Z7yPOgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIk4y4mgxIXS2W+2Eko1DLvfCbqgMB8GA1UdIwQY
MBaAFG13AdWFBJH1Apnvk/LXQJt4zWyWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhjQjFZVUVrZlVDbWUtVDh0ZEFtM2pOYkpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83Zjk5N2MtMDdjZi00NGMyLWJkZjAt
NjZhMzI5YjZhZmFkLzEvYlhjQjFZVUVrZlVDbWUtVDh0ZEFtM2pOYkpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi83Zjk5N2MtMDdjZi00NGMyLWJkZjAtNjZhMzI5YjZhZmFk
LzEvYlhjQjFZVUVrZlVDbWUtVDh0ZEFtM2pOYkpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaREkei8P
xxui/esTPhQGlXXAutEC9y/Ip6cFxgcI8Va/2nL01SMYmNtRkmk4AKKtANVfAj0X
BrnCnOzRU4d51Y4zDaDr4q1Cnfg85b/g7cwW/6vV59ECVjS13HxhA8hJnBu0y8U6
pFaMCw5Sl1f1JHzXOYsLHEZkRlqEw8tjZE+/M+2dzU+oAgp/JGK/LIHf80E+1vwB
GkBhXiRRRN8KDYrIXthaFWV4fSb0AGBJCbquZqmlKeOD+qSg9EgQBkY/Q3dssusU
pCXD5rrlhGG1jLhKYQqqY4PBzrFrAOblX84uMn6RQMJOnTulzeHeEgaLYfKBruUR
Z1J0JDqtLbhwHA==
-----END CERTIFICATE-----
Generated at Mon Sep 15 19:06:41 2025 by rpki-client