Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
File: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json)
Hash identifier: vSoVw2oXS0mKrmKBtf3mm8azn4842Ss2fklqNGD4Oh0=
Subject key identifier: C3:D7:90:3B:56:AF:09:C2:25:01:F0:56:4F:48:A5:74:AA:92:DB:7E
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Certificate issuer: /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial: 0197794170CA37F11B7CEACEA3DE0C8C6159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
Manifest number: 09CC
Signing time: Mon 16 Jun 2025 15:00:21 +0000
Manifest this update: Mon 16 Jun 2025 15:00:21 +0000
Manifest next update: Tue 17 Jun 2025 15:00:21 +0000
Files and hashes: 1: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: 0nU6SMqyTWiSje26qmWQmGWQO5ds9avqJwzGyxbBqkU=)
2: pE_MPWSO2KtGb_d1FHNpKYmtUdU.roa (hash: zv4aepR6TBKlEBTPf/7SbPyiKj3XM1LCzYruoFBSb5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:41:70:ca:37:f1:1b:7c:ea:ce:a3:de:0c:8c:61:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Validity
Not Before: Jun 16 15:00:21 2025 GMT
Not After : Jun 17 15:00:21 2025 GMT
Subject: CN=c3d7903b56af09c22501f0564f48a574aa92db7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:cc:ca:f2:6c:61:89:2d:46:36:00:6c:55:
e0:8a:d3:59:88:e7:f8:a0:a5:ca:c7:d0:16:d3:1c:
aa:57:a3:4f:6a:20:20:fe:90:8a:82:a6:5a:48:b2:
25:ff:cc:10:67:36:23:82:0e:f5:71:d1:74:74:b8:
c8:6c:15:13:f1:d5:21:5a:25:d1:37:07:b4:b4:02:
be:c3:27:dd:31:6a:30:ce:f2:b4:ba:1b:9e:11:3e:
8f:25:dc:ff:4a:9a:a5:99:00:60:51:33:71:6d:d0:
63:ea:90:14:aa:6d:f6:ac:d3:43:0d:bf:45:e7:77:
7c:27:ab:14:80:08:89:26:98:38:7d:ca:a9:a4:4e:
a3:a8:f1:19:c7:cb:ab:d3:34:3f:25:10:42:4e:85:
0d:55:c9:b3:55:4e:03:62:e5:29:9a:f0:d7:9d:31:
d6:94:5a:be:7f:ad:57:79:07:02:3d:44:93:26:2e:
d0:19:92:8a:02:68:fc:51:5e:6a:45:96:bc:f9:92:
d5:02:14:69:64:da:06:01:00:a8:73:3d:55:62:94:
f9:e2:79:23:9f:4c:bc:b5:37:c3:a7:52:0d:07:67:
04:d8:54:ec:03:6d:c9:6c:ef:18:51:31:54:be:7e:
40:82:d8:4e:93:02:62:99:85:32:2d:e4:82:b2:ac:
5d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D7:90:3B:56:AF:09:C2:25:01:F0:56:4F:48:A5:74:AA:92:DB:7E
X509v3 Authority Key Identifier:
keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:aa:7f:dd:ab:ea:4f:de:78:84:87:66:a3:69:59:5b:e6:8c:
11:2a:6f:28:05:52:ad:2e:4a:91:de:ea:b6:0a:02:03:c2:8c:
7e:a8:06:a3:2c:95:cb:79:14:97:18:ab:fb:7d:55:01:46:bc:
d5:23:61:c6:3c:55:e6:78:fb:ea:10:1e:10:86:b9:15:b4:74:
90:59:2f:66:c3:d2:aa:b7:f6:63:70:8d:f0:f8:e5:ae:75:ab:
40:a3:7f:9b:1a:0a:13:d7:f9:37:af:4e:4b:99:22:e5:9e:61:
d7:74:e8:8e:2e:7f:a0:99:f4:98:78:2f:d5:6f:74:3d:d4:fb:
ee:d8:b7:e1:3f:d2:8c:d0:7c:4b:f4:30:7f:74:f4:07:cc:3f:
74:05:01:b3:81:57:b6:3a:4f:d0:87:f0:0f:2e:69:43:3e:31:
1e:78:b6:2e:2c:8b:c0:d5:64:0a:35:8d:f9:55:21:85:26:99:
bb:69:60:ec:66:b2:f6:cb:73:20:db:30:a0:e7:d7:14:b3:31:
a2:18:ba:6d:68:c2:03:f0:d4:d7:f3:c2:78:f4:ea:0a:8a:3f:
f1:bd:b2:8a:0e:3f:72:a8:30:40:f4:b4:1c:f8:ab:e2:8d:43:
a1:69:28:04:b1:1e:eb:57:cb:b6:57:f2:df:3d:fa:6f:9c:98:
b9:31:f7:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5QXDKN/EbfOrOo94MjGFZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjODk1MzM1YmE5OGY3YzYyNmYwYzgxOWU5ZTI4OTRjNjFk
NDQ3NTQwHhcNMjUwNjE2MTUwMDIxWhcNMjUwNjE3MTUwMDIxWjAzMTEwLwYDVQQD
EyhjM2Q3OTAzYjU2YWYwOWMyMjUwMWYwNTY0ZjQ4YTU3NGFhOTJkYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziTMyvJsYYktRjYAbFXgitNZiOf4
oKXKx9AW0xyqV6NPaiAg/pCKgqZaSLIl/8wQZzYjgg71cdF0dLjIbBUT8dUhWiXR
Nwe0tAK+wyfdMWowzvK0uhueET6PJdz/SpqlmQBgUTNxbdBj6pAUqm32rNNDDb9F
53d8J6sUgAiJJpg4fcqppE6jqPEZx8ur0zQ/JRBCToUNVcmzVU4DYuUpmvDXnTHW
lFq+f61XeQcCPUSTJi7QGZKKAmj8UV5qRZa8+ZLVAhRpZNoGAQCocz1VYpT54nkj
n0y8tTfDp1INB2cE2FTsA23JbO8YUTFUvn5AgthOkwJimYUyLeSCsqxd6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPXkDtWrwnCJQHwVk9IpXSqktt+MB8GA1UdIwQY
MBaAFGyJUzW6mPfGJvDIGeniiUxh1EdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yYTU1ZjUtM2NkYy00M2VhLTk4MDMt
NzRlZTgzNzM2ZTk3LzEvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yYTU1ZjUtM2NkYy00M2VhLTk4MDMtNzRlZTgzNzM2ZTk3
LzEvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKp/3avq
T954hIdmo2lZW+aMESpvKAVSrS5Kkd7qtgoCA8KMfqgGoyyVy3kUlxir+31VAUa8
1SNhxjxV5nj76hAeEIa5FbR0kFkvZsPSqrf2Y3CN8PjlrnWrQKN/mxoKE9f5N69O
S5ki5Z5h13Toji5/oJn0mHgv1W90PdT77ti34T/SjNB8S/Qwf3T0B8w/dAUBs4FX
tjpP0IfwDy5pQz4xHni2LiyLwNVkCjWN+VUhhSaZu2lg7Gay9stzINswoOfXFLMx
ohi6bWjCA/DU1/PCePTqCoo/8b2yig4/cqgwQPS0HPir4o1DoWkoBLEe61fLtlfy
3z36b5yYuTH38A==
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:46:20 2025 by rpki-client