Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier: 0OIAQPk6dUZd7ld0sO2qrmhVf7yJ9sSSwiuFLVg5YoY=
Subject key identifier: F4:CB:F3:D4:E9:EE:0D:0D:68:BE:5F:3B:E1:95:CA:B3:0E:BA:8F:9A
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 01992FA306DB2B8CD85E3323E6CFA0DADBED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number: 0F86
Signing time: Tue 09 Sep 2025 18:00:37 +0000
Manifest this update: Tue 09 Sep 2025 18:00:37 +0000
Manifest next update: Wed 10 Sep 2025 18:00:37 +0000
Files and hashes: 1: SeGdw-NsjMC3xa1HTxnhlgnRFG0.roa (hash: 2DoSSeAY7zRuUc6N/EdrEbSmCJqRqnoNYJZ5rPcfON4=)
2: TlEgVdPwV6Gl0yxcaSKSOXS8BDk.roa (hash: rOzs3FdYqLMRuICzpdxO1YhRALyW7K6gs5XgNJ8pgZU=)
3: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: KoosMKO7Wtn51t1bWm60k0ywDiqcklgiinSP6PaGlu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:a3:06:db:2b:8c:d8:5e:33:23:e6:cf:a0:da:db:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Sep 9 18:00:37 2025 GMT
Not After : Sep 10 18:00:37 2025 GMT
Subject: CN=f4cbf3d4e9ee0d0d68be5f3be195cab30eba8f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:1e:9b:c8:81:23:05:b7:b4:4b:9e:40:f2:
d9:64:78:23:6e:39:6e:69:c4:51:26:64:9d:8d:73:
09:8b:25:5a:35:8c:2b:69:d1:74:05:db:8e:15:15:
a5:8f:b8:8f:e9:be:ff:6f:2f:4b:f6:29:ee:ca:27:
db:ef:28:b7:42:f1:dc:4a:08:20:38:7e:4b:90:d0:
96:d2:d6:2e:bb:e4:2e:9a:f8:3c:49:7f:d2:6e:a6:
78:b5:bc:3a:4a:90:42:87:11:78:fc:47:6d:66:a1:
03:ae:4f:fa:a9:7b:60:04:7e:b6:fe:da:23:99:78:
58:1b:43:96:0b:06:93:04:05:91:73:2d:76:52:9a:
d1:f9:bf:02:91:09:59:68:4a:81:34:18:e3:c0:03:
3b:59:af:51:8b:d4:1e:02:65:a3:1c:50:76:58:9d:
21:b6:9c:ef:73:93:5d:3a:3d:9f:f0:f4:e8:75:7b:
ed:b6:22:39:20:1d:20:ca:f8:9b:2f:fc:22:a1:da:
c4:bc:6d:fb:cb:5c:2a:29:a4:7a:88:e3:8d:ce:64:
69:84:a4:3e:d0:a3:66:9d:7c:de:a8:c7:7c:af:03:
97:e4:ea:1e:cb:55:65:73:e0:e9:88:d2:d3:a5:c8:
cc:8e:06:7f:11:fc:30:bc:94:f8:38:4a:8f:80:1b:
28:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CB:F3:D4:E9:EE:0D:0D:68:BE:5F:3B:E1:95:CA:B3:0E:BA:8F:9A
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:99:7a:3c:d2:99:5b:6c:4f:33:4d:33:64:c5:87:f8:d6:8a:
e5:2a:e0:ae:ef:2a:63:48:1d:a1:5f:9e:03:c1:b9:71:42:40:
eb:09:a8:34:70:0f:ec:fd:ad:78:f6:89:32:f4:b7:ad:fa:d0:
0f:d7:ca:3a:d6:b8:9f:7e:89:5a:5e:f0:34:a8:41:91:71:2c:
11:48:f6:b9:45:21:04:78:25:e8:02:a4:c4:ee:0f:54:79:e5:
1f:91:bc:09:94:25:bd:41:75:56:d9:ff:85:73:d2:f7:d1:4f:
89:69:90:d9:4f:ea:66:0d:52:42:1f:a9:c7:43:ff:57:ce:61:
7f:13:67:bf:bd:dc:f4:46:00:79:ce:56:94:9c:2d:84:a3:f9:
b1:7c:e5:71:0e:c0:ae:6a:8d:71:63:9a:33:1a:b8:21:58:84:
7f:31:d3:30:b3:d2:29:e9:5b:e0:c7:63:c6:de:64:24:75:f5:
f0:61:ae:ac:b8:a5:a8:61:71:47:1c:e2:9a:0d:a3:0c:34:e2:
ff:03:09:aa:23:33:43:05:79:68:68:df:ce:5b:d5:2b:12:d2:
2a:69:b1:65:5e:94:69:49:3e:0d:0a:d4:ae:23:37:50:40:60:
e2:f1:40:9f:b5:44:e0:e4:f3:76:a3:b3:fd:4b:9c:71:8a:a7:
4d:2d:9a:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkvowbbK4zYXjMj5s+g2tvtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYmQ1Y2IyOTk0MGFjMmE4NTUzYjZlYzBhOGNlYzdjMjA5
ZjdjZTcwHhcNMjUwOTA5MTgwMDM3WhcNMjUwOTEwMTgwMDM3WjAzMTEwLwYDVQQD
EyhmNGNiZjNkNGU5ZWUwZDBkNjhiZTVmM2JlMTk1Y2FiMzBlYmE4ZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUgem8iBIwW3tEueQPLZZHgjbjlu
acRRJmSdjXMJiyVaNYwradF0BduOFRWlj7iP6b7/by9L9inuyifb7yi3QvHcSggg
OH5LkNCW0tYuu+Qumvg8SX/SbqZ4tbw6SpBChxF4/EdtZqEDrk/6qXtgBH62/toj
mXhYG0OWCwaTBAWRcy12UprR+b8CkQlZaEqBNBjjwAM7Wa9Ri9QeAmWjHFB2WJ0h
tpzvc5NdOj2f8PTodXvttiI5IB0gyvibL/wiodrEvG37y1wqKaR6iOONzmRphKQ+
0KNmnXzeqMd8rwOX5Ooey1Vlc+DpiNLTpcjMjgZ/EfwwvJT4OEqPgBso4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTL89Tp7g0NaL5fO+GVyrMOuo+aMB8GA1UdIwQY
MBaAFG29XLKZQKwqhVO27AqM7Hwgn3znMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEt
MmZkZTgwNDM1ZjRkLzEvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEtMmZkZTgwNDM1ZjRk
LzEvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJl6PNKZ
W2xPM00zZMWH+NaK5Srgru8qY0gdoV+eA8G5cUJA6wmoNHAP7P2tePaJMvS3rfrQ
D9fKOta4n36JWl7wNKhBkXEsEUj2uUUhBHgl6AKkxO4PVHnlH5G8CZQlvUF1Vtn/
hXPS99FPiWmQ2U/qZg1SQh+px0P/V85hfxNnv73c9EYAec5WlJwthKP5sXzlcQ7A
rmqNcWOaMxq4IViEfzHTMLPSKelb4Mdjxt5kJHX18GGurLilqGFxRxzimg2jDDTi
/wMJqiMzQwV5aGjfzlvVKxLSKmmxZV6UaUk+DQrUriM3UEBg4vFAn7VE4OTzdqOz
/UuccYqnTS2aNQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 03:29:39 2025 by rpki-client