
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
File: bV-D7gKxc3SL5d47O5wlMXmSaOg.mft (raw, json)
Hash identifier: 43ySOc2oISicE88g6N1tWdFP96lBNasnIAmH9Zk22GY=
Subject key identifier: DE:BF:0F:22:D3:49:41:DA:23:12:08:93:F1:9F:58:F2:29:68:D4:22
Authority key identifier: 6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
Certificate issuer: /CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Certificate serial: 01974D0E1BB107DA543E8B0EDF6CDADDCC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 01:00:59 +0000
Manifest this update: Sun 08 Jun 2025 01:00:59 +0000
Manifest next update: Mon 09 Jun 2025 01:00:59 +0000
Files and hashes: 1: TOEiqlLp3YhnuZt00V4Ge_gWm3w.roa (hash: 7eGYzt0fIboqSotZXLbGSLMqFgnc7lNxn1f/rJYyeyA=)
2: bV-D7gKxc3SL5d47O5wlMXmSaOg.crl (hash: PXYqZWy0f+p0NjrW+ba/Ltdhiv2MLF1LdNAnpLOVpK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:1b:b1:07:da:54:3e:8b:0e:df:6c:da:dd:cc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Validity
Not Before: Jun 8 01:00:59 2025 GMT
Not After : Jun 9 01:00:59 2025 GMT
Subject: CN=debf0f22d34941da23120893f19f58f22968d422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7e:09:d8:e7:cc:30:9a:43:77:e7:27:0b:58:
19:35:79:12:7f:2c:26:bf:0e:1c:c9:7c:3c:78:a4:
58:43:8d:d1:16:4b:bb:95:47:34:70:d9:02:2e:3c:
42:31:f0:94:ce:dc:f9:29:a7:6b:83:57:56:a2:79:
d6:03:d7:97:58:06:d6:fa:c5:08:0b:df:35:86:60:
c4:be:aa:0d:1d:af:db:e6:40:f3:6d:41:e5:15:97:
8d:95:c4:99:97:11:a5:28:0b:d4:03:b9:4d:4a:2d:
49:a4:4b:77:e9:a3:4e:3d:79:75:cb:e9:68:14:ea:
07:c5:4c:89:28:91:69:9e:70:dc:00:67:ee:95:ea:
17:f0:88:40:3e:3b:70:cb:b4:53:70:4a:d7:4c:ef:
21:8c:b6:25:bb:d0:e4:e7:d7:83:a2:57:38:e3:af:
28:39:e6:fc:a8:45:f3:81:64:80:ad:2a:11:36:7b:
85:22:82:da:5b:f0:e8:33:31:f9:3c:b7:93:dd:2a:
44:36:ea:bd:cd:b5:38:f2:e5:a4:d5:59:9e:5e:1f:
62:9c:ea:ce:0c:3d:bf:82:5a:55:9e:08:30:2d:c3:
d6:86:b7:f1:66:2a:55:19:18:6c:92:7a:0e:40:c3:
15:68:05:28:a7:8a:0d:74:30:ba:96:f1:02:96:4c:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BF:0F:22:D3:49:41:DA:23:12:08:93:F1:9F:58:F2:29:68:D4:22
X509v3 Authority Key Identifier:
keyid:6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9a:00:a1:6a:6d:e2:aa:27:39:35:f2:4a:0f:48:6e:07:8e:
13:80:45:dd:0e:ba:11:1e:99:20:c8:43:14:40:6f:7d:cf:84:
18:bf:9a:10:c1:80:1e:d4:b2:6e:e0:e6:7d:02:59:63:44:dc:
8c:f4:43:6b:77:10:62:41:60:1c:c9:66:29:f4:ef:0a:20:45:
39:73:ed:ab:28:2d:c0:b9:fc:53:58:2d:72:dc:d1:b7:39:bc:
c9:fb:22:68:de:ff:32:c4:f5:eb:d2:91:e0:6d:13:7a:d2:36:
0f:08:8d:3c:11:ef:de:3a:87:25:84:b0:72:9a:aa:1e:85:01:
08:b9:8d:33:be:27:48:f9:d1:52:37:a5:d4:96:e3:bc:36:c5:
8c:c7:b8:30:28:12:9d:f1:74:47:09:99:a0:53:dc:56:49:83:
6a:21:c6:47:a7:74:45:7e:79:ce:4b:b7:ee:45:4e:e8:57:1f:
06:5e:56:b4:39:8d:82:77:ad:32:a8:7d:bc:50:97:e5:44:ec:
38:ab:6a:13:ab:53:d7:e8:e4:dd:89:1d:85:e8:9a:ca:e7:72:
d5:1a:87:1f:44:75:43:23:44:62:1f:a2:45:26:40:13:01:5f:
ff:5c:82:0a:7e:04:bb:99:1c:28:7d:9b:a7:29:24:34:96:7a:
5d:a8:01:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDhuxB9pUPosO32za3cx4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNWY4M2VlMDJiMTczNzQ4YmU1ZGUzYjNiOWMyNTMxNzk5
MjY4ZTgwHhcNMjUwNjA4MDEwMDU5WhcNMjUwNjA5MDEwMDU5WjAzMTEwLwYDVQQD
EyhkZWJmMGYyMmQzNDk0MWRhMjMxMjA4OTNmMTlmNThmMjI5NjhkNDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX4J2OfMMJpDd+cnC1gZNXkSfywm
vw4cyXw8eKRYQ43RFku7lUc0cNkCLjxCMfCUztz5Kadrg1dWonnWA9eXWAbW+sUI
C981hmDEvqoNHa/b5kDzbUHlFZeNlcSZlxGlKAvUA7lNSi1JpEt36aNOPXl1y+lo
FOoHxUyJKJFpnnDcAGfuleoX8IhAPjtwy7RTcErXTO8hjLYlu9Dk59eDolc4468o
Oeb8qEXzgWSArSoRNnuFIoLaW/DoMzH5PLeT3SpENuq9zbU48uWk1VmeXh9inOrO
DD2/glpVnggwLcPWhrfxZipVGRhsknoOQMMVaAUop4oNdDC6lvEClkwv7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6/DyLTSUHaIxIIk/GfWPIpaNQiMB8GA1UdIwQY
MBaAFG1fg+4CsXN0i+XeOzucJTF5kmjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlYtRDdnS3hjM1NMNWQ0N081d2xNWG1TYU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9mOTUwM2UtZGE4NS00NWZjLWIwMzIt
YjJlN2ZlZmY0MDJmLzEvYlYtRDdnS3hjM1NMNWQ0N081d2xNWG1TYU9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9mOTUwM2UtZGE4NS00NWZjLWIwMzItYjJlN2ZlZmY0MDJm
LzEvYlYtRDdnS3hjM1NMNWQ0N081d2xNWG1TYU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJoAoWpt
4qonOTXySg9IbgeOE4BF3Q66ER6ZIMhDFEBvfc+EGL+aEMGAHtSybuDmfQJZY0Tc
jPRDa3cQYkFgHMlmKfTvCiBFOXPtqygtwLn8U1gtctzRtzm8yfsiaN7/MsT169KR
4G0TetI2DwiNPBHv3jqHJYSwcpqqHoUBCLmNM74nSPnRUjel1JbjvDbFjMe4MCgS
nfF0RwmZoFPcVkmDaiHGR6d0RX55zku37kVO6FcfBl5WtDmNgnetMqh9vFCX5UTs
OKtqE6tT1+jk3Ykdheiayudy1RqHH0R1QyNEYh+iRSZAEwFf/1yCCn4Eu5kcKH2b
pykkNJZ6XagBHg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:27:55 2025 by rpki-client