Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
File: bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft (raw, json)
Hash identifier: lI0ihm/rFZK0YTmZ3lv2GcwY1BsJgEW3LkZpyXctGiA=
Subject key identifier: EE:40:C4:9E:EB:F3:98:87:92:7B:62:76:2B:51:12:E0:F8:47:4F:2B
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial: 019931240252B36FD1BB2981612F38BC7FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 01:01:07 +0000
Manifest this update: Wed 10 Sep 2025 01:01:07 +0000
Manifest next update: Thu 11 Sep 2025 01:01:07 +0000
Files and hashes: 1: 4ZrViR6MQ2LLwx-EpgYcmNOkhLU.roa (hash: CcPs0/7vgqCna/xx+mVGMJUsG3faAZo8Ob5SJoRyZWw=)
2: bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl (hash: npYIyk1/huP0XUBbmGl0CXGsmr+oPdBG0i4By8n+RcM=)
3: rUMFzM_6Km-2DqJ2YTtdSrWtUek.roa (hash: abXfjUUyhIhLutP9c/7/Y4Znd/9ps5Twdqn7uTEich0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:02:52:b3:6f:d1:bb:29:81:61:2f:38:bc:7f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Validity
Not Before: Sep 10 01:01:07 2025 GMT
Not After : Sep 11 01:01:07 2025 GMT
Subject: CN=ee40c49eebf39887927b62762b5112e0f8474f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:6c:76:ed:c2:97:01:e2:5d:f1:b1:13:e0:
13:16:bd:86:72:e4:8b:eb:63:fb:17:c7:3a:ce:e0:
f6:7d:64:89:5a:3c:f4:df:02:af:2c:30:3a:b2:0d:
06:b9:d1:d1:4b:f8:d9:ba:24:bd:81:68:a1:e5:d8:
47:73:34:0e:29:75:2d:f2:74:86:cc:20:55:7a:97:
f5:4e:b6:f5:bc:32:12:0b:e6:3d:c1:b7:30:c8:b0:
a1:cf:b5:29:f1:f9:cc:a5:d0:b0:d8:6c:83:11:35:
1e:87:77:c0:e6:01:60:9a:10:bb:78:b5:ca:25:7b:
fb:ac:7e:5c:99:f7:50:48:72:87:78:00:fc:a7:0a:
65:39:33:41:32:bf:d8:a2:df:c4:1e:de:96:de:f8:
73:cb:9c:dd:18:a7:43:d6:17:8e:d0:d8:be:41:a5:
6d:08:18:e6:6e:e5:e1:b3:b9:85:09:90:c4:78:8f:
48:bc:4b:19:b0:14:e9:92:d1:b6:0a:5b:be:c6:01:
43:84:0e:35:6a:ee:36:9f:19:4a:b9:e5:08:37:33:
80:de:5f:7b:62:f2:c4:cb:47:38:d8:df:56:b4:d2:
22:67:c9:6c:37:e4:20:40:62:a4:f7:fe:20:ff:1a:
2e:fa:50:e4:42:a6:13:02:8a:1a:14:ed:14:6a:df:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:40:C4:9E:EB:F3:98:87:92:7B:62:76:2B:51:12:E0:F8:47:4F:2B
X509v3 Authority Key Identifier:
keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fa:86:7b:aa:25:82:58:5a:fb:3c:59:98:a1:1d:5f:6a:87:
3f:a9:33:e0:80:88:04:35:43:e7:0e:19:d0:a8:61:47:3e:7f:
ad:d8:b2:8f:a8:67:d7:8f:e3:de:e6:fb:98:02:68:81:ae:28:
49:e7:6c:84:08:5a:dd:ab:8b:03:94:ac:78:98:fb:6c:20:30:
90:0d:8e:3e:06:9d:f2:43:02:53:58:93:48:e0:ba:36:3c:c5:
5d:7e:34:d1:bc:56:bb:01:38:dd:b3:26:dc:f5:bd:de:8d:af:
aa:02:46:ff:75:c1:2f:1d:83:cd:76:39:4a:a5:68:45:d8:c1:
06:73:bb:80:08:48:23:dd:42:d5:ec:f6:65:1b:7f:37:51:37:
1e:bf:dd:c7:c2:d9:f0:77:a5:b8:71:db:30:b0:86:3b:a2:db:
e7:d2:97:b8:59:ef:a9:f1:71:29:da:cb:18:f5:7c:b6:4d:95:
0e:17:1a:73:31:1a:1f:5b:b6:5e:51:df:5d:3f:f3:31:ea:60:
71:0a:52:b2:7d:1c:30:f8:b2:a3:5a:7d:26:af:a9:8e:56:28:
d5:a0:b2:ca:e3:f4:1c:83:f7:6c:f4:0f:25:51:73:6e:89:e2:
37:a1:7e:03:2c:b8:a1:3c:46:a9:aa:98:01:a6:e6:bf:6b:ed:
82:cf:76:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxJAJSs2/RuymBYS84vH/CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMTJhYjcwNjNjODVkZmUyMmZhN2E5OWQ5YzZmY2U1ZTYx
NjEwMzEwHhcNMjUwOTEwMDEwMTA3WhcNMjUwOTExMDEwMTA3WjAzMTEwLwYDVQQD
EyhlZTQwYzQ5ZWViZjM5ODg3OTI3YjYyNzYyYjUxMTJlMGY4NDc0ZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo5sdu3ClwHiXfGxE+ATFr2GcuSL
62P7F8c6zuD2fWSJWjz03wKvLDA6sg0GudHRS/jZuiS9gWih5dhHczQOKXUt8nSG
zCBVepf1Trb1vDISC+Y9wbcwyLChz7Up8fnMpdCw2GyDETUeh3fA5gFgmhC7eLXK
JXv7rH5cmfdQSHKHeAD8pwplOTNBMr/Yot/EHt6W3vhzy5zdGKdD1heO0Ni+QaVt
CBjmbuXhs7mFCZDEeI9IvEsZsBTpktG2Clu+xgFDhA41au42nxlKueUINzOA3l97
YvLEy0c42N9WtNIiZ8lsN+QgQGKk9/4g/xou+lDkQqYTAooaFO0Uat8XJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5AxJ7r85iHkntiditREuD4R08rMB8GA1UdIwQY
MBaAFGwSq3BjyF3+Ivp6mdnG/OXmFhAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xMmU2NzktODU2Yy00OGVhLWEwNjIt
OTU5ZWJiOTA1YjNhLzEvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xMmU2NzktODU2Yy00OGVhLWEwNjItOTU5ZWJiOTA1YjNh
LzEvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfqGe6ol
glha+zxZmKEdX2qHP6kz4ICIBDVD5w4Z0KhhRz5/rdiyj6hn14/j3ub7mAJoga4o
SedshAha3auLA5SseJj7bCAwkA2OPgad8kMCU1iTSOC6NjzFXX400bxWuwE43bMm
3PW93o2vqgJG/3XBLx2DzXY5SqVoRdjBBnO7gAhII91C1ez2ZRt/N1E3Hr/dx8LZ
8HeluHHbMLCGO6Lb59KXuFnvqfFxKdrLGPV8tk2VDhcaczEaH1u2XlHfXT/zMepg
cQpSsn0cMPiyo1p9Jq+pjlYo1aCyyuP0HIP3bPQPJVFzboniN6F+Ayy4oTxGqaqY
Aabmv2vtgs921Q==
-----END CERTIFICATE-----
Generated at Wed Sep 10 03:25:20 2025 by rpki-client