Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
File: s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json)
Hash identifier: XNfMEI4ZdjgMrN0xVPYt/+Hemq10Ve1WyvIWImsxUPw=
Subject key identifier: 8A:F1:DF:A0:09:F1:1F:A3:C1:E6:85:06:E5:3E:C8:8C:68:DB:49:31
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Certificate issuer: /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial: 0199239F3112A29F604EABC4FF4D409E76C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
Manifest number: 11DF
Signing time: Sun 07 Sep 2025 10:00:59 +0000
Manifest this update: Sun 07 Sep 2025 10:00:59 +0000
Manifest next update: Mon 08 Sep 2025 10:00:59 +0000
Files and hashes: 1: AWpLE7spKuCZAaiwcgrEYb9HbDE.roa (hash: HqSrJdcOFCUWqqNPEe+PAqwdq/X6tR+SRGcYc+ZwSvI=)
2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: Jmqay78STbkK/4fLlXlh2iZAnlHX8ndgkM16qrO6LYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:31:12:a2:9f:60:4e:ab:c4:ff:4d:40:9e:76:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
Validity
Not Before: Sep 7 10:00:59 2025 GMT
Not After : Sep 8 10:00:59 2025 GMT
Subject: CN=8af1dfa009f11fa3c1e68506e53ec88c68db4931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3d:d4:e2:09:f9:5a:88:8c:00:d6:c1:0a:27:
5e:ed:39:79:92:a0:61:72:7a:63:7d:bf:75:52:96:
99:5f:ed:1d:59:2d:eb:a1:2c:46:c1:0c:d2:27:eb:
ac:03:fb:d7:2f:bc:fd:24:21:cc:6f:96:78:b4:da:
8a:cd:73:d7:70:32:14:e8:38:1f:fd:86:0c:3b:96:
cf:0f:ba:7b:d9:b4:fb:2c:34:d6:da:f5:39:b4:c0:
8b:ee:6f:68:2f:d9:2e:64:e5:ad:55:2d:08:74:38:
1d:83:05:12:72:85:df:d3:d4:85:1a:8f:72:2c:25:
61:13:94:bc:52:bb:1b:66:99:9a:bb:2f:61:e7:a6:
16:a3:3d:6b:24:cc:4a:17:fa:ed:83:35:a6:bc:e3:
f0:8e:a1:23:1c:88:aa:44:69:47:50:34:e5:bb:a0:
03:b7:4b:1c:dd:53:00:56:de:4b:52:ca:f0:2d:38:
85:a8:9d:ed:91:47:9b:90:4d:d2:66:e7:7e:ff:f2:
90:70:51:39:0e:10:a2:87:0a:80:1c:11:2e:68:d7:
4f:67:b7:86:3c:fc:6c:73:f3:7a:9f:39:90:d8:7e:
04:79:33:9d:dc:ed:2a:3a:cf:84:7b:80:d4:95:6c:
10:09:5b:d3:78:9c:ef:99:64:0c:43:95:17:34:ec:
83:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F1:DF:A0:09:F1:1F:A3:C1:E6:85:06:E5:3E:C8:8C:68:DB:49:31
X509v3 Authority Key Identifier:
keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:32:9a:5a:bb:b5:1c:3b:e6:e4:91:29:2a:44:df:b1:b3:5e:
6c:81:bf:f1:d3:94:d7:7c:00:7b:93:d8:24:39:3b:fb:9c:d7:
18:1a:2c:9e:6f:c4:a2:4d:bf:ea:4a:00:f0:14:a0:02:a2:08:
d8:78:b1:d7:2f:4e:ae:2d:0b:89:20:20:6b:44:22:7e:9b:39:
1d:e9:36:fa:eb:5f:ef:8e:eb:6b:a1:10:e6:66:4a:c5:fc:52:
3b:83:e6:d6:2b:09:3b:7a:29:f8:a1:0b:de:34:09:f3:56:9f:
96:c0:32:84:76:4b:35:e9:69:88:34:40:bf:57:6b:e0:1f:f8:
7a:f9:41:47:af:08:66:b8:23:bf:32:ea:1f:0b:e1:f0:9f:5e:
21:6a:ac:5c:bc:00:4d:56:2f:ad:bd:c3:7d:93:3e:18:19:55:
d4:3f:8c:54:b7:6a:19:c6:5b:ec:29:72:32:b3:17:7b:56:c3:
88:2b:04:62:ef:49:fb:ec:a6:46:98:d2:37:0b:21:fe:bd:d8:
1e:33:2c:f4:23:de:ba:91:1e:ed:15:11:64:a7:e7:8d:28:39:
9d:40:a8:98:a1:b6:f9:8a:54:4b:31:33:79:ab:e4:54:7e:59:
e1:44:cd:d7:fe:6a:90:f8:62:37:84:27:0f:f8:7f:6d:a8:84:
57:c0:ee:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnzESop9gTqvE/01AnnbHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZTA2NGUxNzMzNWZkZWI4M2EwOTg2MmE3MzVhNmU5Nzc2
MmQ5NzMwHhcNMjUwOTA3MTAwMDU5WhcNMjUwOTA4MTAwMDU5WjAzMTEwLwYDVQQD
Eyg4YWYxZGZhMDA5ZjExZmEzYzFlNjg1MDZlNTNlYzg4YzY4ZGI0OTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j3U4gn5WoiMANbBCide7Tl5kqBh
cnpjfb91UpaZX+0dWS3roSxGwQzSJ+usA/vXL7z9JCHMb5Z4tNqKzXPXcDIU6Dgf
/YYMO5bPD7p72bT7LDTW2vU5tMCL7m9oL9kuZOWtVS0IdDgdgwUScoXf09SFGo9y
LCVhE5S8UrsbZpmauy9h56YWoz1rJMxKF/rtgzWmvOPwjqEjHIiqRGlHUDTlu6AD
t0sc3VMAVt5LUsrwLTiFqJ3tkUebkE3SZud+//KQcFE5DhCihwqAHBEuaNdPZ7eG
PPxsc/N6nzmQ2H4EeTOd3O0qOs+Ee4DUlWwQCVvTeJzvmWQMQ5UXNOyD1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrx36AJ8R+jweaFBuU+yIxo20kxMB8GA1UdIwQY
MBaAFLPgZOFzNf3rg6CYYqc1pul3YtlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yMTk0NDktZjI0My00NmUzLWJiYTct
MWQ1NTEzYmZmNGQ2LzEvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yMTk0NDktZjI0My00NmUzLWJiYTctMWQ1NTEzYmZmNGQ2
LzEvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjKaWru1
HDvm5JEpKkTfsbNebIG/8dOU13wAe5PYJDk7+5zXGBosnm/Eok2/6koA8BSgAqII
2Hix1y9Ori0LiSAga0Qifps5Hek2+utf747ra6EQ5mZKxfxSO4Pm1isJO3op+KEL
3jQJ81aflsAyhHZLNelpiDRAv1dr4B/4evlBR68IZrgjvzLqHwvh8J9eIWqsXLwA
TVYvrb3DfZM+GBlV1D+MVLdqGcZb7ClyMrMXe1bDiCsEYu9J++ymRpjSNwsh/r3Y
HjMs9CPeupEe7RURZKfnjSg5nUComKG2+YpUSzEzeavkVH5Z4UTN1/5qkPhiN4Qn
D/h/baiEV8Du4w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:17 2025 by rpki-client