Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
File: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft (raw, json)
Hash identifier: QhAvATofW41I4kA8eHblpi87xpm0tloUP1h4GrjNTJs=
Subject key identifier: 0A:1A:6E:6A:25:E2:68:93:AA:F0:7A:A5:32:D1:A2:ED:E8:4D:11:BC
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial: 01987B9C513B8CE5DD24A1ED9D6034513751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
Manifest number: 0C23
Signing time: Tue 05 Aug 2025 19:01:38 +0000
Manifest this update: Tue 05 Aug 2025 19:01:38 +0000
Manifest next update: Wed 06 Aug 2025 19:01:38 +0000
Files and hashes: 1: 2yP7wLJMuWi-DdvVYt0iPnrDkx4.roa (hash: tlC/Cdti9DOTrW2vJ3/LMhMeuxhFOtOxFl2p6304PGs=)
2: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl (hash: 6x42jAnYYtZxIos9R05t3hVQXXDEi2J+5iuh6DD5WV0=)
3: yizlH9bVBZ4r4iRvvbJ2VP3ozzg.roa (hash: r5Y34WQoYI5TwsCESbJ739CvzI3jr7yM4zMajr00BD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:51:3b:8c:e5:dd:24:a1:ed:9d:60:34:51:37:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Validity
Not Before: Aug 5 19:01:38 2025 GMT
Not After : Aug 6 19:01:38 2025 GMT
Subject: CN=0a1a6e6a25e26893aaf07aa532d1a2ede84d11bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:7a:5c:b7:a7:cb:94:1e:42:7a:47:d5:10:
3a:47:7c:f1:83:ce:5b:ac:1b:ad:f9:09:6e:b4:cf:
ea:aa:96:9e:fe:41:e7:b1:34:23:ad:be:a6:c1:1b:
d9:70:4d:b9:86:da:46:fb:aa:76:7b:7a:0c:5e:de:
90:f3:9e:94:de:29:5a:0b:da:84:72:8a:e8:29:cf:
e2:02:dc:51:33:a1:88:60:91:03:4f:9a:20:87:c0:
05:b0:07:ea:43:3c:82:1e:bb:58:a0:72:b3:8a:dd:
de:ea:1e:67:5d:e7:fc:27:ed:e6:22:99:ba:c9:98:
66:21:cf:de:36:37:f9:c6:ee:8d:cb:0f:fb:b2:e9:
43:a5:8f:a2:5c:0e:38:3d:12:3a:6a:b5:1f:79:e3:
a7:bd:e9:d5:13:39:35:a9:2b:50:56:03:0d:96:ec:
c7:31:ca:12:e7:5e:12:42:c3:10:0f:a6:ba:1b:22:
da:4f:c5:8f:70:87:4c:df:f1:67:7f:75:6a:f2:6f:
cf:99:e2:ca:2b:e8:2f:9a:6a:4f:33:a8:f1:60:0a:
e2:ab:a5:66:03:50:d9:c2:6c:ad:75:1c:68:83:a7:
80:97:02:35:d8:04:04:d4:98:45:96:dc:92:97:84:
85:37:a4:f4:22:23:ab:56:32:26:ab:ab:76:1d:31:
eb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1A:6E:6A:25:E2:68:93:AA:F0:7A:A5:32:D1:A2:ED:E8:4D:11:BC
X509v3 Authority Key Identifier:
keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:51:06:fc:ae:a6:f3:7f:b3:55:8b:ff:ad:5a:9b:6f:52:fb:
c3:3d:f9:38:25:0f:c2:cf:af:49:1f:bf:64:4f:3f:96:c1:35:
2a:4b:fe:e3:e7:fc:da:4e:3b:f9:ec:27:f3:24:14:ef:34:1e:
a1:42:e6:af:85:f5:e9:2d:d7:9a:e2:3f:cc:2e:17:8d:3c:10:
66:41:fa:c4:03:76:4a:bc:e4:b8:b1:d9:4f:3b:a2:ca:9a:2f:
af:0d:df:1e:17:ad:ff:45:8d:6a:66:26:b1:31:91:cf:05:42:
48:7b:1c:a6:95:56:02:30:03:f1:2f:60:1b:ff:c7:79:cb:b4:
9f:1f:0e:2a:f5:6d:df:f1:7e:ca:d7:5f:a4:54:69:40:ee:22:
87:92:51:32:ae:87:14:53:ed:ba:6f:ed:de:2d:75:5f:c1:f5:
57:91:15:20:32:b0:6b:b0:91:06:6a:d1:82:2b:2a:f4:08:cf:
7a:83:5b:eb:03:80:df:d9:b3:67:d7:ff:67:9e:6c:d6:41:6e:
5d:84:75:b5:d0:05:93:a4:3a:46:2d:93:aa:46:46:f5:66:52:
32:ba:df:9f:5c:76:b5:b6:69:6d:36:cd:65:45:95:85:5d:10:
91:71:6c:e8:a4:f8:b4:bb:5e:17:32:25:8a:9c:04:d7:ce:17:
8b:5f:16:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7nFE7jOXdJKHtnWA0UTdRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMWE3NjE3OTVmMGY2NmJmZjI0NzhiNDY4Y2RlMGQ4NTFl
ZDE4ODcwHhcNMjUwODA1MTkwMTM4WhcNMjUwODA2MTkwMTM4WjAzMTEwLwYDVQQD
EygwYTFhNmU2YTI1ZTI2ODkzYWFmMDdhYTUzMmQxYTJlZGU4NGQxMWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnN6XLeny5QeQnpH1RA6R3zxg85b
rBut+QlutM/qqpae/kHnsTQjrb6mwRvZcE25htpG+6p2e3oMXt6Q856U3ilaC9qE
coroKc/iAtxRM6GIYJEDT5ogh8AFsAfqQzyCHrtYoHKzit3e6h5nXef8J+3mIpm6
yZhmIc/eNjf5xu6Nyw/7sulDpY+iXA44PRI6arUfeeOnvenVEzk1qStQVgMNluzH
McoS514SQsMQD6a6GyLaT8WPcIdM3/Fnf3Vq8m/PmeLKK+gvmmpPM6jxYAriq6Vm
A1DZwmytdRxog6eAlwI12AQE1JhFltySl4SFN6T0IiOrVjImq6t2HTHrgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoabmol4miTqvB6pTLRou3oTRG8MB8GA1UdIwQY
MBaAFGwadheV8PZr/yR4tGjN4NhR7RiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMmMzODYtZDVlOS00YWQ5LTkzOGEt
MGQxZDE3NGM0MzUxLzEvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMmMzODYtZDVlOS00YWQ5LTkzOGEtMGQxZDE3NGM0MzUx
LzEvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFEG/K6m
83+zVYv/rVqbb1L7wz35OCUPws+vSR+/ZE8/lsE1Kkv+4+f82k47+ewn8yQU7zQe
oULmr4X16S3XmuI/zC4XjTwQZkH6xAN2SrzkuLHZTzuiypovrw3fHhet/0WNamYm
sTGRzwVCSHscppVWAjAD8S9gG//Hecu0nx8OKvVt3/F+ytdfpFRpQO4ih5JRMq6H
FFPtum/t3i11X8H1V5EVIDKwa7CRBmrRgisq9AjPeoNb6wOA39mzZ9f/Z55s1kFu
XYR1tdAFk6Q6Ri2TqkZG9WZSMrrfn1x2tbZpbTbNZUWVhV0QkXFs6KT4tLteFzIl
ipwE184Xi18WgQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:07:32 2025 by rpki-client