Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: TkW5avDilINtlRFiLCkjf8NEa8nl6Hcp649UzeC4A1s=
Subject key identifier: 4B:25:E2:3F:60:9F:70:BE:8B:40:6D:8F:97:3A:D4:A7:83:78:E5:41
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 01993380A5AED963D60A1E637668453A3460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 07E8
Signing time: Wed 10 Sep 2025 12:01:32 +0000
Manifest this update: Wed 10 Sep 2025 12:01:32 +0000
Manifest next update: Thu 11 Sep 2025 12:01:32 +0000
Files and hashes: 1: 02ZPMrkxrv9TSRNG7JSudAlDYd8.roa (hash: 1pjHbb+bmeJiA9CJ5xGCBjxXea42uVA7wH4sLUyonyA=)
2: 3L6JAHHrLKqNS5i1HV40c9xyyEM.roa (hash: qyyZT9D9IGcDrviVnxZxLdBd6LOM1Me+aqwZJ6D1tPM=)
3: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: xmec569meCdKJy02vsR42JfPhyppmQdbdBcUMOUhXAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:a5:ae:d9:63:d6:0a:1e:63:76:68:45:3a:34:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Sep 10 12:01:32 2025 GMT
Not After : Sep 11 12:01:32 2025 GMT
Subject: CN=4b25e23f609f70be8b406d8f973ad4a78378e541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:1d:fd:ca:2a:fa:cd:22:79:93:a8:eb:5a:
a8:ab:07:98:66:0c:9c:b1:4b:34:2b:9e:0f:d9:a8:
f9:2a:66:ce:f3:26:51:50:0b:48:cb:3b:38:98:ec:
30:e1:c6:df:e2:e0:94:65:90:4b:4e:dd:90:84:06:
31:55:bb:7e:ce:84:c5:1f:90:fc:c9:37:61:b5:06:
1c:84:b0:51:ac:f6:0c:6b:bb:f7:ae:ef:8f:c3:26:
b2:42:d4:cb:a5:c9:13:ab:eb:11:9d:87:88:b9:81:
a8:4c:40:3c:e2:ed:5a:6a:93:c7:c4:a4:76:11:b8:
b1:8a:06:59:7b:db:92:44:e8:6b:eb:da:dd:b3:d7:
b9:84:30:4b:e5:c7:28:23:e3:a3:47:db:96:fc:91:
d9:b1:87:a9:0c:06:be:cf:56:06:7c:8d:12:b6:d9:
e9:cf:d9:d6:cb:f2:0b:37:0a:c4:a1:ef:a9:af:5c:
e5:c4:38:d8:56:fc:7d:42:95:75:86:ff:5b:16:c5:
c8:8e:83:c0:52:34:76:25:de:44:60:ef:b2:ce:2d:
2d:47:17:06:60:9c:4d:08:9c:e8:f2:14:c9:60:c6:
fe:93:0a:86:bf:b9:ef:55:bd:ac:d3:bd:3b:55:ea:
8b:57:aa:24:d3:1e:d4:09:c0:14:6e:52:b9:88:55:
9c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:25:E2:3F:60:9F:70:BE:8B:40:6D:8F:97:3A:D4:A7:83:78:E5:41
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:17:e6:3f:de:30:96:01:26:74:1f:7f:31:5b:4b:90:7b:6f:
4f:53:8e:98:39:85:0b:d6:c6:c3:36:7d:03:49:80:c7:f1:de:
08:78:83:2e:20:29:1e:48:6f:91:78:c1:24:e6:fc:a9:3d:99:
ff:c9:76:10:ec:41:f1:c8:92:ab:c2:c5:70:24:67:f7:aa:7a:
bc:5f:bb:d6:a8:65:34:3c:49:eb:76:4b:40:9a:5f:49:35:cf:
e4:96:4d:95:de:52:f8:11:14:e8:09:a4:21:68:d6:11:66:8f:
34:b9:39:61:94:02:e1:e2:2f:41:c2:8a:3c:37:21:ea:f1:5d:
c0:d9:a8:a9:38:47:8d:d5:21:c3:7d:ef:a8:88:db:5b:98:28:
b4:d2:a5:49:da:bd:5e:b1:d2:47:76:e3:47:5d:6f:75:a7:11:
06:73:5d:3d:bc:5b:23:65:1e:fe:ab:c4:a1:71:1b:ef:bc:d8:
28:32:91:59:d5:2d:68:cf:ed:39:78:bd:5e:50:90:d4:cc:71:
6c:1b:b7:a6:71:4a:e1:93:20:51:cb:a4:e7:b0:de:2d:bd:2d:
03:82:6c:09:28:42:40:e5:77:c8:db:62:10:b2:7f:4e:bb:ff:
ef:a9:57:c0:08:1b:f0:d1:8d:ca:1a:6d:30:be:b7:db:73:b3:
28:28:f8:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzgKWu2WPWCh5jdmhFOjRgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNTM3N2JiOWRhNDFjYWExMTc2ZjQzMjI2MmRjYWE5OWM0
NzZmOWEwHhcNMjUwOTEwMTIwMTMyWhcNMjUwOTExMTIwMTMyWjAzMTEwLwYDVQQD
Eyg0YjI1ZTIzZjYwOWY3MGJlOGI0MDZkOGY5NzNhZDRhNzgzNzhlNTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTUd/coq+s0ieZOo61qoqweYZgyc
sUs0K54P2aj5KmbO8yZRUAtIyzs4mOww4cbf4uCUZZBLTt2QhAYxVbt+zoTFH5D8
yTdhtQYchLBRrPYMa7v3ru+PwyayQtTLpckTq+sRnYeIuYGoTEA84u1aapPHxKR2
EbixigZZe9uSROhr69rds9e5hDBL5ccoI+OjR9uW/JHZsYepDAa+z1YGfI0Sttnp
z9nWy/ILNwrEoe+pr1zlxDjYVvx9QpV1hv9bFsXIjoPAUjR2Jd5EYO+yzi0tRxcG
YJxNCJzo8hTJYMb+kwqGv7nvVb2s0707VeqLV6ok0x7UCcAUblK5iFWcOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsl4j9gn3C+i0Btj5c61KeDeOVBMB8GA1UdIwQY
MBaAFGxTd7udpByqEXb0MiYtyqmcR2+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2It
NmVkMTBlYmI5MzNmLzEvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2ItNmVkMTBlYmI5MzNm
LzEvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRfmP94w
lgEmdB9/MVtLkHtvT1OOmDmFC9bGwzZ9A0mAx/HeCHiDLiApHkhvkXjBJOb8qT2Z
/8l2EOxB8ciSq8LFcCRn96p6vF+71qhlNDxJ63ZLQJpfSTXP5JZNld5S+BEU6Amk
IWjWEWaPNLk5YZQC4eIvQcKKPDch6vFdwNmoqThHjdUhw33vqIjbW5gotNKlSdq9
XrHSR3bjR11vdacRBnNdPbxbI2Ue/qvEoXEb77zYKDKRWdUtaM/tOXi9XlCQ1Mxx
bBu3pnFK4ZMgUcuk57DeLb0tA4JsCShCQOV3yNtiELJ/Trv/76lXwAgb8NGNyhpt
ML6323OzKCj43g==
-----END CERTIFICATE-----
Generated at Wed Sep 10 21:57:06 2025 by rpki-client