Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
File: bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft (raw, json)
Hash identifier: 8KYQ8IxxYLgmMRVEFJlnTX+IGDDwhYeZ89vMkfa8IOo=
Subject key identifier: A3:BD:CB:29:F3:D3:F1:F5:23:2C:1A:0D:6B:4E:22:70:FD:37:A8:77
Authority key identifier: 6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
Certificate issuer: /CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Certificate serial: 0197488CC5A3C48D2DA4A9FC74A9EF2425E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
Manifest number: 13DB
Signing time: Sat 07 Jun 2025 04:01:14 +0000
Manifest this update: Sat 07 Jun 2025 04:01:14 +0000
Manifest next update: Sun 08 Jun 2025 04:01:14 +0000
Files and hashes: 1: 1-w5DNPlIhExlDG3JJ8YehKY8B2s.roa (hash: 2oDdXXuxPyseKyeUOGZKSwRrTeZuxQlLGL5+bIlribY=)
2: bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl (hash: E98FYh/f8CKZgXODFgaiI3Ql9hxuE8bCBe+Rd6cfXAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:c5:a3:c4:8d:2d:a4:a9:fc:74:a9:ef:24:25:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Validity
Not Before: Jun 7 04:01:14 2025 GMT
Not After : Jun 8 04:01:14 2025 GMT
Subject: CN=a3bdcb29f3d3f1f5232c1a0d6b4e2270fd37a877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:94:4c:04:72:82:44:d3:f3:70:a9:f5:5e:
48:fa:2a:62:1e:1e:c7:15:42:dd:d2:32:9b:5f:b9:
8b:7a:58:98:b5:3b:69:7d:75:ed:4a:a8:85:4f:6f:
b3:91:84:03:7d:54:6f:64:8f:45:f2:eb:4d:07:a1:
2b:c9:a0:bc:45:29:ca:23:9f:31:ed:fe:c6:61:79:
a2:58:1f:4c:9a:59:6e:fb:63:97:45:12:25:11:2f:
5f:c9:6f:9a:43:d9:c8:b4:73:b4:50:d3:f7:31:6a:
53:c0:4a:3f:ac:4a:0c:7d:75:ce:06:8f:df:87:25:
67:87:3d:78:84:7c:b5:bd:41:01:e5:9c:6f:4e:12:
c0:10:ee:62:71:79:18:9a:d5:8a:8e:c5:a4:43:3f:
81:d9:ba:9e:24:92:99:56:2d:f5:7f:16:7f:4a:eb:
b1:8a:4e:f6:48:46:bf:43:e7:83:a1:ab:59:fa:ea:
4a:a7:dd:82:ee:9d:0c:d8:ab:6d:c5:71:7b:df:76:
28:ec:ce:44:3c:51:2c:93:6a:c0:78:52:3a:78:7f:
65:00:84:dd:cf:e5:e3:49:ec:4d:68:7b:80:63:5a:
5d:08:3d:40:d3:aa:97:bb:0d:7f:b2:e3:79:3f:7f:
3a:2b:da:24:ae:07:15:64:fe:05:96:8c:c4:58:9d:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BD:CB:29:F3:D3:F1:F5:23:2C:1A:0D:6B:4E:22:70:FD:37:A8:77
X509v3 Authority Key Identifier:
keyid:6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e8:f1:83:82:e5:8b:ca:8b:93:6e:09:b5:28:ff:b4:85:2f:
07:ce:7c:ff:ea:76:37:43:32:c5:df:70:b1:af:1d:78:21:26:
3c:8f:83:a1:ef:80:c5:b4:3e:cb:b2:a1:7c:35:a3:84:3b:fe:
ad:dd:43:5c:58:62:c2:0b:9d:b9:3a:50:63:b6:7d:86:4a:71:
58:c7:b2:23:65:3d:dd:74:f5:21:78:d9:5e:52:d8:a3:78:e8:
1d:6a:f7:b0:2a:f6:03:8c:2e:a2:bc:8b:b0:74:42:b3:eb:45:
16:ba:14:12:2a:2f:e8:03:ab:e0:90:10:7e:24:f5:43:ce:5b:
99:8e:47:07:16:8e:86:4f:a7:f7:16:59:45:af:e9:10:df:91:
c9:97:c1:70:de:23:5e:62:38:50:ff:8d:46:b2:cb:bc:c8:75:
4c:65:9e:c7:01:ed:3c:5d:27:ed:9d:b5:fd:93:e4:cf:c7:2b:
d4:f7:86:86:52:9c:0d:10:2f:56:b5:7f:4f:ae:9d:27:23:c1:
9e:39:e6:8d:83:18:b9:aa:52:52:df:ce:81:e3:61:a7:3c:74:
12:94:3c:ab:16:10:60:4e:6b:a1:0e:86:50:51:3f:ff:65:d0:
2d:ae:99:48:67:6b:83:f1:82:45:3e:8c:6f:97:4b:56:c8:95:
6e:8c:5a:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjMWjxI0tpKn8dKnvJCXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMGM4MDMxODE3N2JjMTZiNzIzODNmOGUwOTJkNTJhM2Fl
MTMzYjQwHhcNMjUwNjA3MDQwMTE0WhcNMjUwNjA4MDQwMTE0WjAzMTEwLwYDVQQD
EyhhM2JkY2IyOWYzZDNmMWY1MjMyYzFhMGQ2YjRlMjI3MGZkMzdhODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyOUTARygkTT83Cp9V5I+ipiHh7H
FULd0jKbX7mLeliYtTtpfXXtSqiFT2+zkYQDfVRvZI9F8utNB6EryaC8RSnKI58x
7f7GYXmiWB9Mmllu+2OXRRIlES9fyW+aQ9nItHO0UNP3MWpTwEo/rEoMfXXOBo/f
hyVnhz14hHy1vUEB5ZxvThLAEO5icXkYmtWKjsWkQz+B2bqeJJKZVi31fxZ/Suux
ik72SEa/Q+eDoatZ+upKp92C7p0M2KttxXF733Yo7M5EPFEsk2rAeFI6eH9lAITd
z+XjSexNaHuAY1pdCD1A06qXuw1/suN5P386K9okrgcVZP4FlozEWJ2CmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKO9yynz0/H1IywaDWtOInD9N6h3MB8GA1UdIwQY
MBaAFG0MgDGBd7wWtyOD+OCS1So64TO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zMWJkMDctOWExZi00MzQ1LWE2NmIt
Nzk0MjQwNDAxNmYzLzEvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8zMWJkMDctOWExZi00MzQ1LWE2NmItNzk0MjQwNDAxNmYz
LzEvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOjxg4Ll
i8qLk24JtSj/tIUvB858/+p2N0Myxd9wsa8deCEmPI+Doe+AxbQ+y7KhfDWjhDv+
rd1DXFhiwguduTpQY7Z9hkpxWMeyI2U93XT1IXjZXlLYo3joHWr3sCr2A4wuoryL
sHRCs+tFFroUEiov6AOr4JAQfiT1Q85bmY5HBxaOhk+n9xZZRa/pEN+RyZfBcN4j
XmI4UP+NRrLLvMh1TGWexwHtPF0n7Z21/ZPkz8cr1PeGhlKcDRAvVrV/T66dJyPB
njnmjYMYuapSUt/OgeNhpzx0EpQ8qxYQYE5roQ6GUFE//2XQLa6ZSGdrg/GCRT6M
b5dLVsiVboxaVA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:02 2025 by rpki-client