Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
File: B_Khdb4gEIZBxklVMhPyElEWZ6U.mft (raw, json)
Hash identifier: Sum/5o7jfvv78O4FesK44X7LxjCrsQZbz8wTWL6udUQ=
Subject key identifier: 70:B0:35:9C:54:B4:B4:D1:2F:43:EE:B0:3A:F9:E0:8F:52:E1:AF:AC
Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
Certificate issuer: /CN=07f2a175be20108641c649553213f212511667a5
Certificate serial: 01974C31E1C99F2C32F15A9BA6B2814B828F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 21:00:26 +0000
Manifest this update: Sat 07 Jun 2025 21:00:26 +0000
Manifest next update: Sun 08 Jun 2025 21:00:26 +0000
Files and hashes: 1: B_Khdb4gEIZBxklVMhPyElEWZ6U.crl (hash: DA/E0il44dJPCQeqcb1k/pq1bsxdNxPMoUdyJg6xMMw=)
2: CgI8RO9Vbr_Gvqd6nXuf6xUvB3c.roa (hash: Us9A46RLHsNHOICpLUg4c/TsB6QkGJR/YxrWMeUzzMw=)
3: f4y74uV6kMhl3FZG7eMTxtB1xcg.roa (hash: xNcDjYfpiNRJh2gGbrd1whQfo3MpBF28ckRw6gIMCZ8=)
4: wjAvaGeoZ8bK8sdbDhHPq0cB8fQ.roa (hash: mivAj3GDT4jOPus8xPGZd/X8AcNpsiWRHJ+pMHxOhWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:31:e1:c9:9f:2c:32:f1:5a:9b:a6:b2:81:4b:82:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f2a175be20108641c649553213f212511667a5
Validity
Not Before: Jun 7 21:00:26 2025 GMT
Not After : Jun 8 21:00:26 2025 GMT
Subject: CN=70b0359c54b4b4d12f43eeb03af9e08f52e1afac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:65:3b:0f:89:9f:73:85:5a:40:57:81:82:
b5:b6:3f:42:a6:79:a9:f0:4c:ca:b9:2e:73:c8:e0:
4d:b0:bc:34:ee:bb:43:f0:5f:c5:44:d8:f4:c1:fb:
ab:53:8f:7a:6c:92:9b:44:7a:a3:5c:60:d7:b5:99:
84:a5:66:c1:a0:db:4d:b3:25:ff:f3:47:07:d1:fc:
87:bc:f6:6f:8b:e6:bf:8a:36:eb:01:28:94:25:8e:
df:9e:bc:43:dd:d0:eb:5d:f9:03:d0:28:90:e3:60:
81:f9:45:60:69:a8:0c:eb:da:eb:a2:fe:40:8b:09:
2b:89:f6:0f:ab:03:7b:83:ef:dd:2d:a5:e8:63:fe:
24:39:d0:95:fb:1f:64:7e:85:2d:22:db:ca:aa:dc:
de:83:e7:18:9c:45:5b:65:af:37:d5:cd:9f:99:c0:
84:36:04:21:b1:ae:b3:4c:95:6e:4b:b4:bb:0b:cf:
c1:32:76:65:20:05:f4:7e:72:83:11:92:7d:e8:ba:
be:f9:19:6c:25:ab:c7:5c:e1:5a:68:f0:03:82:bf:
c9:9a:4c:33:d8:9f:38:dc:68:a4:c9:1d:74:dd:00:
72:d0:02:47:39:2f:54:84:f9:ad:bb:97:17:ff:c8:
17:9e:a0:01:19:14:92:d5:ab:56:00:33:be:b7:ad:
5c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B0:35:9C:54:B4:B4:D1:2F:43:EE:B0:3A:F9:E0:8F:52:E1:AF:AC
X509v3 Authority Key Identifier:
keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0a:3a:10:c0:bb:05:be:a9:b6:49:c0:35:bf:d1:19:06:89:
32:99:d2:b7:65:4e:59:5a:d1:58:75:a2:a6:c0:b8:93:ca:1d:
ad:33:5a:db:a7:9b:b5:a9:63:ed:33:5a:c8:f3:dd:8d:4e:fb:
a3:75:c6:d0:95:48:ff:49:cd:b7:5e:ad:21:2d:54:75:6b:a0:
64:78:43:7f:97:64:0d:f4:c2:32:20:eb:2d:ac:4a:4d:02:61:
ab:a4:f4:e5:c3:24:0c:8b:46:b7:96:75:c5:64:d3:66:0c:f7:
53:64:ae:d9:16:5f:86:b4:8d:3c:3d:f9:9d:9e:89:df:7c:55:
90:77:c7:21:da:58:94:57:35:7f:9f:90:09:df:84:97:6d:f5:
02:45:27:01:b0:b5:0d:4e:95:82:a3:06:35:cf:37:c7:7e:d1:
d0:03:a8:2f:ef:db:c3:3e:fe:a0:d7:bd:46:23:95:1d:b7:18:
f1:d5:39:b5:7d:e3:a2:f1:cc:52:c3:c0:b3:33:db:35:51:28:
a6:8c:e3:4b:48:28:15:30:8a:1d:59:da:95:c7:16:df:d9:f6:
b0:00:5a:b0:34:b0:64:c2:1e:ca:99:43:6f:9a:68:5e:b7:24:
eb:84:fa:b8:48:f8:ec:c0:ef:47:48:db:bc:cc:52:4e:92:7f:
92:15:40:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMMeHJnywy8VqbprKBS4KPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZjJhMTc1YmUyMDEwODY0MWM2NDk1NTMyMTNmMjEyNTEx
NjY3YTUwHhcNMjUwNjA3MjEwMDI2WhcNMjUwNjA4MjEwMDI2WjAzMTEwLwYDVQQD
Eyg3MGIwMzU5YzU0YjRiNGQxMmY0M2VlYjAzYWY5ZTA4ZjUyZTFhZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmBlOw+Jn3OFWkBXgYK1tj9Cpnmp
8EzKuS5zyOBNsLw07rtD8F/FRNj0wfurU496bJKbRHqjXGDXtZmEpWbBoNtNsyX/
80cH0fyHvPZvi+a/ijbrASiUJY7fnrxD3dDrXfkD0CiQ42CB+UVgaagM69rrov5A
iwkrifYPqwN7g+/dLaXoY/4kOdCV+x9kfoUtItvKqtzeg+cYnEVbZa831c2fmcCE
NgQhsa6zTJVuS7S7C8/BMnZlIAX0fnKDEZJ96Lq++RlsJavHXOFaaPADgr/Jmkwz
2J843GikyR103QBy0AJHOS9UhPmtu5cX/8gXnqABGRSS1atWADO+t61cXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCwNZxUtLTRL0PusDr54I9S4a+sMB8GA1UdIwQY
MBaAFAfyoXW+IBCGQcZJVTIT8hJRFmelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zNmIwODUtMWE1Yi00YWY5LTg3OGIt
Mzc2NDI2ZmZkNjYyLzEvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8zNmIwODUtMWE1Yi00YWY5LTg3OGItMzc2NDI2ZmZkNjYy
LzEvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwo6EMC7
Bb6ptknANb/RGQaJMpnSt2VOWVrRWHWipsC4k8odrTNa26ebtalj7TNayPPdjU77
o3XG0JVI/0nNt16tIS1UdWugZHhDf5dkDfTCMiDrLaxKTQJhq6T05cMkDItGt5Z1
xWTTZgz3U2Su2RZfhrSNPD35nZ6J33xVkHfHIdpYlFc1f5+QCd+El231AkUnAbC1
DU6VgqMGNc83x37R0AOoL+/bwz7+oNe9RiOVHbcY8dU5tX3jovHMUsPAszPbNVEo
pozjS0goFTCKHVnalccW39n2sABasDSwZMIeyplDb5poXrck64T6uEj47MDvR0jb
vMxSTpJ/khVArw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:47:01 2025 by rpki-client