Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
File: bZOet0q7zSInwhkqoqN-bcuJjlM.mft (raw, json)
Hash identifier: 1KWaAYNRHzLt7sbwU690mKEII/V/5gTJ1WW1g4behMA=
Subject key identifier: F0:6C:71:EB:4C:39:9E:61:77:58:E9:D6:2C:56:11:42:05:A8:D3:D6
Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
Certificate issuer: /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Certificate serial: 019935DCB9A9A7141E9C7EA51321FB58ED86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 23:01:21 +0000
Manifest this update: Wed 10 Sep 2025 23:01:21 +0000
Manifest next update: Thu 11 Sep 2025 23:01:21 +0000
Files and hashes: 1: O1oreHXoGfE0x_DduepnzXbv1jQ.roa (hash: YJRrGXYLhqb/8S1lAURaXg16hfYVh9EAfo6ckQiEqy0=)
2: bZOet0q7zSInwhkqoqN-bcuJjlM.crl (hash: y9G9S0Ayze8nvC8EU497w0E7jLOUkG9AJBvwXeitQxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:dc:b9:a9:a7:14:1e:9c:7e:a5:13:21:fb:58:ed:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Validity
Not Before: Sep 10 23:01:21 2025 GMT
Not After : Sep 11 23:01:21 2025 GMT
Subject: CN=f06c71eb4c399e617758e9d62c56114205a8d3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:52:18:f0:f8:2f:9f:57:91:23:8c:77:96:4f:
c5:1e:88:37:f7:d1:73:49:8c:22:87:61:a0:7f:f3:
dd:5d:42:8d:15:ee:72:64:e2:b8:06:48:e8:33:38:
6c:f2:d7:91:fb:cd:a5:13:a9:31:5e:2a:ce:7e:3b:
7f:f6:3f:bf:39:fc:57:cf:e4:56:f6:0d:d6:b7:67:
62:3c:e7:61:0a:80:d2:5a:83:e7:a9:6d:0f:04:49:
03:0c:f0:59:c2:91:81:e1:fc:02:ea:61:6e:67:d5:
1c:bd:76:93:82:b4:d4:38:10:53:d7:81:89:eb:2e:
0c:b9:8a:df:5b:e7:ad:53:c3:3d:8d:ee:de:ba:7e:
c9:f7:12:f6:26:0b:cd:67:2e:10:9e:14:2f:99:00:
bc:cb:89:0f:19:2a:57:db:04:90:b2:c0:6d:db:3f:
47:6e:fe:30:eb:68:95:06:28:ce:b5:2f:ee:da:d4:
0f:4c:fc:d3:81:0b:95:1e:33:57:e7:8f:3f:f1:8b:
30:7b:78:54:c5:a0:bd:8d:75:0b:90:3f:f7:37:f3:
71:86:e3:de:06:ab:fd:2c:ab:93:3e:69:0f:7b:fb:
76:4e:cb:4e:e2:94:a2:cf:59:a6:e8:bc:5b:6d:c1:
f4:1c:8b:61:c1:d1:48:5c:2c:15:bc:34:47:16:3b:
25:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6C:71:EB:4C:39:9E:61:77:58:E9:D6:2C:56:11:42:05:A8:D3:D6
X509v3 Authority Key Identifier:
keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:48:9f:94:a2:d6:3b:f2:24:a4:1a:33:40:f6:16:26:99:b8:
bb:10:d4:58:76:88:da:62:b9:35:1a:15:aa:66:32:e1:41:a9:
09:4f:77:b0:ad:72:ef:74:06:83:5a:7c:73:76:80:33:0f:cd:
38:fd:49:1e:d3:b4:50:4f:7c:ac:cf:93:96:6c:5d:33:03:05:
95:7d:28:2f:2b:7c:8e:88:cc:59:b5:1f:49:08:24:e9:56:5f:
dc:66:26:2c:e7:6d:d4:45:67:f3:71:58:34:10:50:da:eb:17:
dc:2a:16:e2:a5:46:09:89:60:6c:55:42:1b:89:8f:97:55:24:
eb:df:8d:b9:64:93:bb:e9:f1:20:ed:82:0e:fa:51:e4:0a:b7:
6a:77:4a:31:2b:e6:75:61:8f:55:98:ab:c2:d5:79:6b:e5:d4:
6e:da:0b:eb:a5:ab:d8:30:b4:5a:e5:48:87:bb:80:ae:e5:b0:
46:52:6f:e8:fa:26:fb:36:40:5a:a0:33:64:cf:4e:2c:7f:f3:
e5:9f:b3:66:97:f1:5a:78:6e:d7:68:d2:69:f8:cf:17:88:c2:
84:8d:27:81:10:eb:c1:99:29:ac:77:91:4d:23:c2:86:97:04:
f0:15:a9:a4:0c:9e:82:93:c8:0f:c6:1a:93:70:93:c3:e5:ce:
0d:2c:25:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk13LmppxQenH6lEyH7WO2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkOTM5ZWI3NGFiYmNkMjIyN2MyMTkyYWEyYTM3ZTZkY2I4
OThlNTMwHhcNMjUwOTEwMjMwMTIxWhcNMjUwOTExMjMwMTIxWjAzMTEwLwYDVQQD
EyhmMDZjNzFlYjRjMzk5ZTYxNzc1OGU5ZDYyYzU2MTE0MjA1YThkM2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VIY8Pgvn1eRI4x3lk/FHog399Fz
SYwih2Ggf/PdXUKNFe5yZOK4BkjoMzhs8teR+82lE6kxXirOfjt/9j+/OfxXz+RW
9g3Wt2diPOdhCoDSWoPnqW0PBEkDDPBZwpGB4fwC6mFuZ9UcvXaTgrTUOBBT14GJ
6y4MuYrfW+etU8M9je7eun7J9xL2JgvNZy4QnhQvmQC8y4kPGSpX2wSQssBt2z9H
bv4w62iVBijOtS/u2tQPTPzTgQuVHjNX548/8Yswe3hUxaC9jXULkD/3N/NxhuPe
Bqv9LKuTPmkPe/t2TstO4pSiz1mm6LxbbcH0HIthwdFIXCwVvDRHFjslWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBscetMOZ5hd1jp1ixWEUIFqNPWMB8GA1UdIwQY
MBaAFG2TnrdKu80iJ8IZKqKjfm3LiY5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTIt
ZTk1ZTJkM2QyM2UwLzEvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTItZTk1ZTJkM2QyM2Uw
LzEvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEiflKLW
O/IkpBozQPYWJpm4uxDUWHaI2mK5NRoVqmYy4UGpCU93sK1y73QGg1p8c3aAMw/N
OP1JHtO0UE98rM+TlmxdMwMFlX0oLyt8jojMWbUfSQgk6VZf3GYmLOdt1EVn83FY
NBBQ2usX3CoW4qVGCYlgbFVCG4mPl1Uk69+NuWSTu+nxIO2CDvpR5Aq3andKMSvm
dWGPVZirwtV5a+XUbtoL66Wr2DC0WuVIh7uAruWwRlJv6Pom+zZAWqAzZM9OLH/z
5Z+zZpfxWnhu12jSafjPF4jChI0ngRDrwZkprHeRTSPChpcE8BWppAyegpPID8Ya
k3CTw+XODSwlfA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 00:35:33 2025 by rpki-client