Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
File: B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft (raw, json)
Hash identifier: UlZ4xx3gbA2l2ngLT1Gb4JVnpxDkR20AL9jLhnDdcDE=
Subject key identifier: 1B:3C:A2:00:04:AD:12:B5:3A:D6:F4:43:01:BA:E1:DD:BC:DB:93:7C
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial: 0199240CF31FD3856D0F6CAB0CC31FE14D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
Manifest number: 1679
Signing time: Sun 07 Sep 2025 12:00:52 +0000
Manifest this update: Sun 07 Sep 2025 12:00:52 +0000
Manifest next update: Mon 08 Sep 2025 12:00:52 +0000
Files and hashes: 1: B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl (hash: SPF30B4/RatPm2ltP2ckqelzUdkBHEU3BYGR5DrQgXQ=)
2: HNB1sDrF9WUErSCuLUa0aVt_L3Y.roa (hash: EEUhMDLd8LaCLpdh0d8yAfmLAD7g/8SwACNlTGSymQI=)
3: cGnWsTG6_HuBPIKsK-FAxem4vS0.roa (hash: PlfTsNs/Znlb07VC2B9dZOKYLjXkQ4SWFGFGxZnDFiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:f3:1f:d3:85:6d:0f:6c:ab:0c:c3:1f:e1:4d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
Validity
Not Before: Sep 7 12:00:52 2025 GMT
Not After : Sep 8 12:00:52 2025 GMT
Subject: CN=1b3ca20004ad12b53ad6f44301bae1ddbcdb937c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:f0:bc:db:4b:fc:27:12:a8:64:21:d1:c2:
4f:75:13:ea:54:43:c5:b7:cd:d3:d6:00:2d:b0:a8:
19:26:9d:40:65:6e:e7:4a:ff:e6:44:05:74:0b:0f:
c4:cf:ab:5b:f3:34:c4:82:42:ae:a8:a8:f1:93:15:
14:25:db:f1:89:25:79:bb:0e:93:0f:c5:65:dc:63:
a3:ad:9c:00:75:cc:0b:97:c8:4a:77:9a:12:97:ec:
53:39:93:14:fe:38:99:41:be:27:bf:94:84:d6:51:
32:95:13:eb:06:f9:9d:37:12:2f:60:1e:36:41:47:
4c:0f:a9:3f:e0:73:8f:4b:82:63:44:f5:b5:c1:8b:
e4:9b:e0:6f:5f:ce:3d:b7:5f:d4:eb:15:05:94:a8:
c1:9d:00:c1:42:2f:60:a0:88:21:b0:be:b7:7a:51:
bc:6c:71:67:7f:b6:dd:9a:36:06:88:f4:4c:eb:ad:
71:5e:d1:02:1e:00:7e:fd:64:d8:d1:74:7a:00:99:
c7:96:39:98:6e:8f:58:bf:dc:96:28:fd:4e:14:a8:
0f:e5:0c:58:a9:2f:e5:e1:b0:b4:05:cc:a5:d0:76:
0a:ee:29:e5:51:62:52:3f:29:4e:ac:d1:45:87:29:
ec:41:6f:73:2e:7a:3d:e4:b5:5b:f4:3a:95:69:c0:
4b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3C:A2:00:04:AD:12:B5:3A:D6:F4:43:01:BA:E1:DD:BC:DB:93:7C
X509v3 Authority Key Identifier:
keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:6a:7e:9a:52:aa:1a:fc:1f:78:6b:c3:0d:59:f8:4b:48:7b:
9a:62:8e:f2:bd:e0:fd:06:bc:1c:9b:72:a3:22:60:b2:14:7f:
3e:47:2f:e3:a3:8a:ba:7e:ed:e0:b2:3e:b9:6f:6a:55:fd:d7:
1a:70:fd:9e:69:38:e7:a2:c6:14:f0:d2:0a:15:d3:3e:65:d5:
0c:aa:62:4b:c8:bf:c0:be:ed:04:7b:80:02:a1:61:fc:2e:6f:
cb:59:2f:bc:1f:43:68:cf:bd:b6:e1:db:a3:94:39:99:e2:85:
a8:5f:1f:ae:84:a0:6a:2a:c5:80:05:7a:7e:2c:37:41:9e:40:
4e:c2:a0:5e:8a:b7:b4:d2:a1:11:22:e3:3b:4e:e1:a0:69:26:
7d:b6:ba:61:92:9f:2e:52:95:59:9f:20:70:af:2f:20:82:4b:
f3:d9:b1:c4:8b:3e:29:e1:4e:f4:6f:c7:66:72:45:21:f4:56:
2a:0e:34:a3:4c:9d:8e:6e:79:20:32:aa:35:f2:14:22:7f:54:
e8:5b:1c:2c:72:82:f8:56:7b:e0:61:b7:3c:81:64:12:c2:d9:
56:f6:0f:85:ba:1f:c7:5d:0b:28:90:65:bc:5e:76:51:fb:19:
80:20:79:b5:3f:2c:6c:e0:bf:61:89:6d:cc:be:b1:9f:37:32:
88:c7:8b:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDPMf04VtD2yrDMMf4U1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZmE1NDBhMjU0MzJlMmFhNGRjYTA1Nzg0NWMzNTlkMjE0
ODg2ZjcwHhcNMjUwOTA3MTIwMDUyWhcNMjUwOTA4MTIwMDUyWjAzMTEwLwYDVQQD
EygxYjNjYTIwMDA0YWQxMmI1M2FkNmY0NDMwMWJhZTFkZGJjZGI5MzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OLwvNtL/CcSqGQh0cJPdRPqVEPF
t83T1gAtsKgZJp1AZW7nSv/mRAV0Cw/Ez6tb8zTEgkKuqKjxkxUUJdvxiSV5uw6T
D8Vl3GOjrZwAdcwLl8hKd5oSl+xTOZMU/jiZQb4nv5SE1lEylRPrBvmdNxIvYB42
QUdMD6k/4HOPS4JjRPW1wYvkm+BvX849t1/U6xUFlKjBnQDBQi9goIghsL63elG8
bHFnf7bdmjYGiPRM661xXtECHgB+/WTY0XR6AJnHljmYbo9Yv9yWKP1OFKgP5QxY
qS/l4bC0Bcyl0HYK7inlUWJSPylOrNFFhynsQW9zLno95LVb9DqVacBL6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBs8ogAErRK1Otb0QwG64d2825N8MB8GA1UdIwQY
MBaAFAf6VAolQy4qpNygV4RcNZ0hSIb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9wVUNpVkRMaXFrM0tCWGhGdzFuU0ZJaHZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80MzA3ZDEtYjYwOC00NTgxLTk5MmMt
NzUzNzQxYTgwZTk0LzEvQl9wVUNpVkRMaXFrM0tCWGhGdzFuU0ZJaHZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80MzA3ZDEtYjYwOC00NTgxLTk5MmMtNzUzNzQxYTgwZTk0
LzEvQl9wVUNpVkRMaXFrM0tCWGhGdzFuU0ZJaHZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr2p+mlKq
GvwfeGvDDVn4S0h7mmKO8r3g/Qa8HJtyoyJgshR/Pkcv46OKun7t4LI+uW9qVf3X
GnD9nmk456LGFPDSChXTPmXVDKpiS8i/wL7tBHuAAqFh/C5vy1kvvB9DaM+9tuHb
o5Q5meKFqF8froSgairFgAV6fiw3QZ5ATsKgXoq3tNKhESLjO07hoGkmfba6YZKf
LlKVWZ8gcK8vIIJL89mxxIs+KeFO9G/HZnJFIfRWKg40o0ydjm55IDKqNfIUIn9U
6FscLHKC+FZ74GG3PIFkEsLZVvYPhbofx10LKJBlvF52UfsZgCB5tT8sbOC/YYlt
zL6xnzcyiMeLiQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:34 2025 by rpki-client