Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
File: bcXjzvXaXn_fw2TF1aBALTpnhtw.mft (raw, json)
Hash identifier: lPGQjvDWEXNd+z/b9dweKqyuyVH9YSBhWuXDa0uYbZ8=
Subject key identifier: D8:23:70:9F:12:B7:52:36:BC:EA:E1:A9:C9:6D:1C:9D:F0:46:03:F8
Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
Certificate issuer: /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Certificate serial: 0197481E821EB92D27DB39CA5287709A0BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
Manifest number: 0E16
Signing time: Sat 07 Jun 2025 02:00:48 +0000
Manifest this update: Sat 07 Jun 2025 02:00:48 +0000
Manifest next update: Sun 08 Jun 2025 02:00:48 +0000
Files and hashes: 1: DoUsi8lBp24xgpF7Cj5k0M8Xf1k.roa (hash: 8DoQ+UjZ0y3DouoJyhRBNdxsuMKM8IPBGox8SgTwz/M=)
2: bcXjzvXaXn_fw2TF1aBALTpnhtw.crl (hash: FVqZg86vPoUwNYdWw7NOs40vfiDk6zJWGbzlc+nPfBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:82:1e:b9:2d:27:db:39:ca:52:87:70:9a:0b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Validity
Not Before: Jun 7 02:00:48 2025 GMT
Not After : Jun 8 02:00:48 2025 GMT
Subject: CN=d823709f12b75236bceae1a9c96d1c9df04603f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9b:b1:4f:00:4b:8b:e3:b2:c4:3f:68:47:5f:
56:3e:c9:ae:75:2a:42:55:e4:63:31:15:e0:95:d7:
30:89:ac:74:d5:85:b9:fb:2a:51:9b:67:01:23:f7:
ae:cf:ac:8f:39:e0:a4:57:c8:45:ab:7f:90:a7:3c:
bd:67:19:d7:1d:1b:56:d2:bd:d0:00:6b:25:3a:4c:
d4:30:dc:b3:da:f2:89:8b:20:47:0a:70:e7:6a:86:
74:b9:ee:2f:56:e5:1f:27:b6:59:98:70:15:6e:db:
bc:42:1b:da:54:04:20:31:97:d4:c6:13:c9:72:23:
db:e8:47:5f:e1:6d:25:4c:a2:13:27:4c:30:79:c6:
a5:c9:34:6a:fc:98:e3:0b:a4:da:b9:41:d0:76:02:
ee:60:a8:6c:01:99:81:00:19:77:ed:f5:1d:e8:3c:
4d:e9:0d:b6:92:72:91:4f:70:2f:45:20:cc:ca:f7:
38:ff:d6:a2:89:2a:13:26:67:d5:d2:a3:74:74:d3:
49:8e:95:75:cd:11:ac:8b:35:d0:32:32:dc:0c:36:
4a:d4:fd:48:2e:f9:02:b2:37:64:23:05:19:0c:8d:
6a:ff:7c:b8:82:cb:9d:8f:a6:ab:d1:f5:2c:17:8b:
24:9a:d6:f0:5a:d2:9a:c5:dd:c7:ce:b7:9b:bd:42:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:23:70:9F:12:B7:52:36:BC:EA:E1:A9:C9:6D:1C:9D:F0:46:03:F8
X509v3 Authority Key Identifier:
keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ff:11:14:34:80:45:8d:5c:be:44:73:92:7d:cd:1c:02:ab:
de:b4:b4:a6:cc:4c:48:cf:c2:fa:a3:a4:81:24:37:c9:de:36:
fa:cf:15:28:68:67:d4:7f:47:f5:4c:5c:12:dc:9d:f0:31:80:
80:a5:4a:0e:5a:21:d0:89:1d:b8:98:b7:41:e4:d9:59:0a:c2:
e6:6e:5b:01:bc:2f:f6:51:00:15:bf:98:c7:5c:d9:95:50:97:
40:ce:ef:7d:69:9b:74:2a:4a:80:59:b4:a1:49:87:db:3c:80:
82:6c:ea:bc:eb:55:4c:5a:46:72:bc:4c:d4:c9:5e:1a:fb:1f:
5e:54:a2:90:bd:74:ec:be:54:70:0e:c7:ed:af:53:c0:ff:9b:
25:27:8a:94:8e:2e:14:de:5b:86:80:83:c5:7c:5e:57:67:3d:
2a:55:8c:a3:38:9f:eb:8f:2a:bd:50:7f:d6:e8:6c:a2:cb:6c:
4f:cd:bb:68:58:2a:9c:c6:24:5e:e6:31:d5:f8:18:d0:4f:21:
29:e4:56:cd:a8:14:34:fb:87:1d:8b:57:39:0c:42:2a:72:57:
93:77:5d:56:da:fc:a5:56:a8:c7:e0:7b:64:24:7a:2d:7b:93:
a3:1e:72:a7:79:90:a7:e1:f6:39:cf:04:d8:dd:6c:44:77:8f:
69:7c:7f:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHoIeuS0n2znKUodwmgvoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYzVlM2NlZjVkYTVlN2ZkZmMzNjRjNWQ1YTA0MDJkM2E2
Nzg2ZGMwHhcNMjUwNjA3MDIwMDQ4WhcNMjUwNjA4MDIwMDQ4WjAzMTEwLwYDVQQD
EyhkODIzNzA5ZjEyYjc1MjM2YmNlYWUxYTljOTZkMWM5ZGYwNDYwM2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3puxTwBLi+OyxD9oR19WPsmudSpC
VeRjMRXgldcwiax01YW5+ypRm2cBI/euz6yPOeCkV8hFq3+Qpzy9ZxnXHRtW0r3Q
AGslOkzUMNyz2vKJiyBHCnDnaoZ0ue4vVuUfJ7ZZmHAVbtu8QhvaVAQgMZfUxhPJ
ciPb6Edf4W0lTKITJ0wwecalyTRq/JjjC6TauUHQdgLuYKhsAZmBABl37fUd6DxN
6Q22knKRT3AvRSDMyvc4/9aiiSoTJmfV0qN0dNNJjpV1zRGsizXQMjLcDDZK1P1I
LvkCsjdkIwUZDI1q/3y4gsudj6ar0fUsF4skmtbwWtKaxd3HzrebvUIqKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgjcJ8St1I2vOrhqcltHJ3wRgP4MB8GA1UdIwQY
MBaAFG3F48712l5/38NkxdWgQC06Z4bcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYt
Y2RjYzk2NjA3YjlhLzEvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYtY2RjYzk2NjA3Yjlh
LzEvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHv8RFDSA
RY1cvkRzkn3NHAKr3rS0psxMSM/C+qOkgSQ3yd42+s8VKGhn1H9H9UxcEtyd8DGA
gKVKDloh0IkduJi3QeTZWQrC5m5bAbwv9lEAFb+Yx1zZlVCXQM7vfWmbdCpKgFm0
oUmH2zyAgmzqvOtVTFpGcrxM1MleGvsfXlSikL107L5UcA7H7a9TwP+bJSeKlI4u
FN5bhoCDxXxeV2c9KlWMozif648qvVB/1uhsostsT827aFgqnMYkXuYx1fgY0E8h
KeRWzagUNPuHHYtXOQxCKnJXk3ddVtr8pVaox+B7ZCR6LXuTox5yp3mQp+H2Oc8E
2N1sRHePaXx/cg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:34:21 2025 by rpki-client