Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier: uyD+D5lokXbivKmYA2lzyVswwWG1dVZEZqJ0oL1AZKI=
Subject key identifier: 5E:DE:2F:22:94:D4:0A:14:16:43:C1:4E:57:20:E7:62:9F:52:23:D7
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial: 019746674D01E6A1F0CBD89D91A183040160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 18:01:04 +0000
Manifest this update: Fri 06 Jun 2025 18:01:04 +0000
Manifest next update: Sat 07 Jun 2025 18:01:04 +0000
Files and hashes: 1: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: tNKZLQ1G6AI0nPfNY/VHnyaux/sXplhG0E7BAKjpXQU=)
2: gKY4N4flGE3w8VGawvt5MmzbsEY.roa (hash: n6hPnIZKkrQ9PZ3CvwgI/ENozP0XURH/9HKr+aSdN00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:4d:01:e6:a1:f0:cb:d8:9d:91:a1:83:04:01:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Validity
Not Before: Jun 6 18:01:04 2025 GMT
Not After : Jun 7 18:01:04 2025 GMT
Subject: CN=5ede2f2294d40a141643c14e5720e7629f5223d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:57:65:c9:57:74:81:8b:f2:16:69:71:b0:
66:1b:e4:50:07:b8:e3:62:c7:09:d6:cb:bc:22:5d:
2c:64:95:b8:78:b1:da:69:5e:cc:bb:1a:85:1c:10:
9c:a4:52:ef:4f:d0:18:3f:bb:2c:10:00:2f:d2:15:
1a:85:37:3d:20:03:5b:72:06:6d:f4:21:fb:e8:6e:
ad:f4:c3:ee:ba:cb:ea:3d:7a:eb:1a:92:18:41:32:
ce:87:f8:c8:5e:97:aa:ce:05:1a:98:a1:95:5c:f1:
19:e7:c9:6e:5f:56:47:b6:28:a2:5e:a1:83:65:8f:
f2:09:8b:64:d8:0b:a7:61:2f:bd:34:f0:2f:4a:7e:
69:11:aa:8a:f2:2a:51:99:2c:82:c4:97:2f:cb:36:
77:b7:f1:12:67:1e:b5:b6:6b:80:23:cf:c2:18:f4:
b9:1a:16:72:03:ba:72:3d:78:d7:ce:77:36:72:02:
b0:32:42:f1:9d:84:3c:74:0b:4d:02:e7:85:b1:2c:
d7:a3:e4:75:74:ec:db:b2:7a:7c:9f:0d:4d:97:3c:
26:a9:42:05:5e:4a:b7:b0:7f:ad:d1:12:79:1b:a7:
53:b6:ec:95:6c:d1:d3:9c:ce:c7:29:97:eb:f1:91:
c1:5a:78:fc:cc:9a:b5:c2:2d:b3:91:ff:a2:4f:5e:
c2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DE:2F:22:94:D4:0A:14:16:43:C1:4E:57:20:E7:62:9F:52:23:D7
X509v3 Authority Key Identifier:
keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:41:ff:38:76:e5:a0:72:38:de:ec:af:e2:36:ad:e1:56:20:
c1:6e:82:89:3b:99:05:09:7b:76:fc:2b:52:44:22:55:27:b1:
f2:55:0a:74:90:e0:b7:e1:da:05:8e:13:5c:00:40:b4:60:d0:
7e:9a:1b:1a:51:8b:ba:55:1c:b8:c4:a1:28:51:bc:58:3a:7c:
c9:22:dc:5a:05:c4:fb:4d:9b:91:bf:4f:59:91:5e:83:6c:1f:
9c:a1:fb:92:46:e8:56:97:1d:48:d9:3d:d9:fc:96:8f:4c:77:
84:f4:db:e4:cb:6b:d3:05:83:3c:a8:d4:13:88:9a:4d:13:ff:
95:7a:cc:0e:64:a1:33:3f:d3:b7:fd:e4:64:26:2e:d6:34:36:
1d:36:54:19:ae:b8:98:b1:f5:c3:73:11:bc:5e:3a:78:83:73:
b9:6f:bb:1e:6a:87:53:f9:92:37:6d:99:2f:d3:65:33:39:cd:
2a:32:fc:a6:e3:79:fc:ef:2b:50:d7:21:9a:b4:06:dc:e1:8e:
db:07:04:0a:8f:84:1b:15:d6:a3:71:8b:d6:88:fa:27:43:42:
be:6d:a6:b1:25:f2:d8:8a:be:c9:d2:c0:6b:7c:9b:f5:9c:04:
07:ec:b0:57:a0:ba:8b:ce:bb:80:99:7b:39:25:9b:1b:ae:07:
7a:2d:66:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGZ00B5qHwy9idkaGDBAFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZmYzZDg5OWUyNmZjODRmYjQzNzlmYjMyNWYxNzRiNTA3
NWNlMGQwHhcNMjUwNjA2MTgwMTA0WhcNMjUwNjA3MTgwMTA0WjAzMTEwLwYDVQQD
Eyg1ZWRlMmYyMjk0ZDQwYTE0MTY0M2MxNGU1NzIwZTc2MjlmNTIyM2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK5XZclXdIGL8hZpcbBmG+RQB7jj
YscJ1su8Il0sZJW4eLHaaV7MuxqFHBCcpFLvT9AYP7ssEAAv0hUahTc9IANbcgZt
9CH76G6t9MPuusvqPXrrGpIYQTLOh/jIXpeqzgUamKGVXPEZ58luX1ZHtiiiXqGD
ZY/yCYtk2AunYS+9NPAvSn5pEaqK8ipRmSyCxJcvyzZ3t/ESZx61tmuAI8/CGPS5
GhZyA7pyPXjXznc2cgKwMkLxnYQ8dAtNAueFsSzXo+R1dOzbsnp8nw1NlzwmqUIF
Xkq3sH+t0RJ5G6dTtuyVbNHTnM7HKZfr8ZHBWnj8zJq1wi2zkf+iT17CBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7eLyKU1AoUFkPBTlcg52KfUiPXMB8GA1UdIwQY
MBaAFGz/PYmeJvyE+0N5+zJfF0tQdc4NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iMGM4NzUtMjRlMS00NDRkLWIwMWQt
NTQwOGY4ZDlkZmIxLzEvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iMGM4NzUtMjRlMS00NDRkLWIwMWQtNTQwOGY4ZDlkZmIx
LzEvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEH/OHbl
oHI43uyv4jat4VYgwW6CiTuZBQl7dvwrUkQiVSex8lUKdJDgt+HaBY4TXABAtGDQ
fpobGlGLulUcuMShKFG8WDp8ySLcWgXE+02bkb9PWZFeg2wfnKH7kkboVpcdSNk9
2fyWj0x3hPTb5Mtr0wWDPKjUE4iaTRP/lXrMDmShMz/Tt/3kZCYu1jQ2HTZUGa64
mLH1w3MRvF46eINzuW+7HmqHU/mSN22ZL9NlMznNKjL8puN5/O8rUNchmrQG3OGO
2wcECo+EGxXWo3GL1oj6J0NCvm2msSXy2Iq+ydLAa3yb9ZwEB+ywV6C6i867gJl7
OSWbG64Hei1myw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:28 2025 by rpki-client