Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: lLHSJMYppzw3B1VL3dSa2QTEgknQwqAbP7JcOrPEhuI=
Subject key identifier: 84:AD:07:DF:17:B8:03:4F:07:F0:3C:CA:38:88:4F:74:F3:33:F5:5A
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 01976BBCC5F1F192F4D0A0D7F9A28DE23A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 04BE
Signing time: Sat 14 Jun 2025 00:00:22 +0000
Manifest this update: Sat 14 Jun 2025 00:00:22 +0000
Manifest next update: Sun 15 Jun 2025 00:00:22 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: E1FAJTvMeZGgj+E+bQ1ZxY/0lvtxidZhG9jwKbNhRL8=)
2: lkUV_pQvaLsSaoJOegWniJF6RQo.roa (hash: i9n/5GhzO6//QgpiyuPewqwCFXVYirWQt6MCRZhl13U=)
3: x_9Ds4w921G-S6uMB3BqKl4lwk4.roa (hash: 4uIRZVtStLzfbHbkUvgOoPNPKk9YaTAL+flcnzSJknE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:c5:f1:f1:92:f4:d0:a0:d7:f9:a2:8d:e2:3a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Jun 14 00:00:22 2025 GMT
Not After : Jun 15 00:00:22 2025 GMT
Subject: CN=84ad07df17b8034f07f03cca38884f74f333f55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:19:2f:23:81:9a:1c:50:ff:68:ff:fd:b4:2f:
b7:75:06:ef:bf:e3:68:56:35:83:95:6c:ee:ce:a9:
87:cb:13:0e:15:14:3b:69:4e:42:f3:e5:0e:a9:85:
70:2b:bf:5b:b0:58:8a:24:62:29:c1:2a:35:7a:2a:
0d:fa:90:a0:c4:31:64:06:aa:69:41:b1:85:a6:cc:
c1:73:47:c9:4f:52:2c:12:b7:19:c1:70:f2:72:33:
31:f7:d1:64:ae:b4:1d:11:81:cf:75:e8:20:7c:5d:
4d:b5:d3:60:ad:11:35:5d:65:dd:55:5b:1b:94:c4:
48:42:fb:4e:ef:27:e3:70:10:27:07:75:17:d8:24:
0d:70:37:81:33:04:1d:26:23:4f:f7:e5:47:19:2a:
89:a4:6d:6f:d9:78:91:54:ba:87:c6:b7:91:98:83:
86:e1:9b:07:26:8e:92:20:c7:05:bd:29:e6:9a:80:
4a:65:6e:63:89:66:06:ce:8b:f1:f2:dd:3a:88:4d:
dc:13:e1:15:d9:a4:f7:e8:d2:08:79:07:db:de:71:
4d:fe:01:44:e9:68:ba:84:e2:cc:ae:fa:e0:2d:de:
7b:e6:bd:c7:9e:27:a9:88:87:58:f4:89:83:6a:40:
78:a6:ed:65:96:ae:df:f7:35:f0:1d:89:92:f3:e4:
e9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AD:07:DF:17:B8:03:4F:07:F0:3C:CA:38:88:4F:74:F3:33:F5:5A
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d6:ad:7e:49:54:34:5f:77:75:6c:78:da:88:91:6e:46:65:
cc:de:12:ee:e7:5a:37:5a:ef:24:87:e0:f8:b3:eb:af:c6:5c:
fd:7c:b9:a9:80:b5:e1:fa:91:cb:9b:3a:fd:f5:61:99:10:da:
37:4f:09:f0:57:34:81:cf:6f:ec:e6:ab:ef:3e:b3:c7:f4:36:
8f:82:7c:e6:84:85:77:e1:a8:9b:e2:64:78:8f:cd:1a:34:ab:
bb:25:6f:f9:26:0c:6d:e4:fa:a2:e4:45:4d:69:f4:51:e5:66:
f8:5a:d6:d7:c7:e5:e9:2a:82:f4:03:57:e5:29:cd:6d:86:3b:
04:49:6f:e6:00:c8:57:0a:5c:ad:31:58:4b:e2:44:de:a8:87:
af:bf:9a:3a:42:ca:a7:e8:68:93:9f:1b:12:9d:17:31:77:ae:
4c:8a:14:96:bf:ca:48:60:c5:0a:db:d2:dd:a7:9f:79:14:8a:
02:7b:1c:26:23:bc:a6:e2:44:69:24:cd:36:70:d3:22:98:64:
7b:4c:06:8e:1f:54:f1:f5:59:5d:9a:e5:3f:06:b8:a7:e1:ad:
09:59:58:38:be:96:2f:51:73:b9:d2:d7:fd:14:cc:c7:0f:b2:
0f:fa:6b:53:f0:24:64:38:34:fd:29:b4:16:05:13:af:e2:3f:
ab:79:b1:4b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdrvMXx8ZL00KDX+aKN4jqPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MTVlMDJiZGE3YTkwNzE0ODc4MzdkMzE1NThiNWUwMjIx
ZDNjZjkwHhcNMjUwNjE0MDAwMDIyWhcNMjUwNjE1MDAwMDIyWjAzMTEwLwYDVQQD
Eyg4NGFkMDdkZjE3YjgwMzRmMDdmMDNjY2EzODg4NGY3NGYzMzNmNTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhkvI4GaHFD/aP/9tC+3dQbvv+No
VjWDlWzuzqmHyxMOFRQ7aU5C8+UOqYVwK79bsFiKJGIpwSo1eioN+pCgxDFkBqpp
QbGFpszBc0fJT1IsErcZwXDycjMx99FkrrQdEYHPdeggfF1NtdNgrRE1XWXdVVsb
lMRIQvtO7yfjcBAnB3UX2CQNcDeBMwQdJiNP9+VHGSqJpG1v2XiRVLqHxreRmIOG
4ZsHJo6SIMcFvSnmmoBKZW5jiWYGzovx8t06iE3cE+EV2aT36NIIeQfb3nFN/gFE
6Wi6hOLMrvrgLd575r3HniepiIdY9ImDakB4pu1llq7f9zXwHYmS8+TpFQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIStB98XuANPB/A8yjiIT3TzM/VaMB8GA1UdIwQY
MBaAFPgV4CvaepBxSHg30xVYteAiHTz5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CWGdLOXA2a0hGSWVEZlRGVmkxNENJZFBQay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvY2Q0NzJjLTQyNTYtNDBmZi05OGUy
LWQ5ODM4NDM5NzkyOS8xLzEtQlhnSzlwNmtIRkllRGZURlZpMTRDSWRQUGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI4L2NkNDcyYy00MjU2LTQwZmYtOThlMi1kOTgzODQzOTc5
MjkvMS8xLUJYZ0s5cDZrSEZJZURmVEZWaTE0Q0lkUFBrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNat
fklUNF93dWx42oiRbkZlzN4S7udaN1rvJIfg+LPrr8Zc/Xy5qYC14fqRy5s6/fVh
mRDaN08J8Fc0gc9v7Oar7z6zx/Q2j4J85oSFd+Gom+JkeI/NGjSruyVv+SYMbeT6
ouRFTWn0UeVm+FrW18fl6SqC9ANX5SnNbYY7BElv5gDIVwpcrTFYS+JE3qiHr7+a
OkLKp+hok58bEp0XMXeuTIoUlr/KSGDFCtvS3aefeRSKAnscJiO8puJEaSTNNnDT
Iphke0wGjh9U8fVZXZrlPwa4p+GtCVlYOL6WL1FzudLX/RTMxw+yD/prU/AkZDg0
/Sm0FgUTr+I/q3mxSw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:45:49 2025 by rpki-client