Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
File: BaO2FkB7l-JhFjNId8aqkoqq7rI.mft (raw, json)
Hash identifier: tuQOFO3+z8ZmE1hVzWpSGKE8qIg7gBgiiX4qQW/zleA=
Subject key identifier: EB:40:41:8A:CA:D0:60:56:2A:7B:3E:D0:C2:90:7F:1D:31:C5:A9:8E
Authority key identifier: 05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
Certificate issuer: /CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Certificate serial: 01977A1D48A9A981F07CC89B50A78B6B5001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
Manifest number: 0984
Signing time: Mon 16 Jun 2025 19:00:28 +0000
Manifest this update: Mon 16 Jun 2025 19:00:28 +0000
Manifest next update: Tue 17 Jun 2025 19:00:28 +0000
Files and hashes: 1: BaO2FkB7l-JhFjNId8aqkoqq7rI.crl (hash: NaPLGTO/7M568jVCySGLrj5p5Dz0uZ8hrR2649vR1/4=)
2: bDkAt0CCYnB2xqRfpALpEK1gmgo.roa (hash: HzyjrIASJdGjjHtk6b54LHkaX+3Gt8eRcO+z/aYxOaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:1d:48:a9:a9:81:f0:7c:c8:9b:50:a7:8b:6b:50:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Validity
Not Before: Jun 16 19:00:28 2025 GMT
Not After : Jun 17 19:00:28 2025 GMT
Subject: CN=eb40418acad060562a7b3ed0c2907f1d31c5a98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:0d:aa:47:7d:8a:bf:6e:2b:cf:4a:31:ed:
d3:3a:b8:e3:5b:9d:43:e0:15:0b:40:d5:e6:1c:3b:
57:3e:06:60:3f:6e:81:84:3b:61:b1:62:c5:13:f0:
23:d9:b7:5e:f5:be:30:e5:85:77:4d:98:a0:62:dc:
40:eb:cd:a6:35:72:ad:ab:ab:d7:4b:62:34:45:d2:
5e:60:46:2a:68:e5:16:b4:10:8b:39:06:9a:0f:33:
9b:71:23:f0:af:ed:a1:01:10:25:8d:34:cc:97:de:
0c:4e:a1:03:d9:c1:07:66:d6:fe:ff:b7:10:e4:b2:
0a:ed:6e:a5:b8:a3:e3:c7:14:6e:95:0e:2e:21:fd:
a3:a5:36:86:ca:bc:d8:b5:56:54:47:7e:7f:26:7b:
33:96:fa:02:29:54:f5:73:fd:16:8c:a1:a8:d3:75:
fb:2c:d4:d4:a7:01:28:21:94:15:5d:32:96:e4:2d:
f2:8a:47:78:7b:f8:6c:6a:4b:a8:c7:f0:45:21:37:
c7:a5:b1:c8:05:4f:36:82:13:0b:71:48:8c:8b:cc:
9e:98:be:6b:73:56:fb:39:c4:a2:2a:6d:fd:d2:20:
cf:1c:8b:2f:87:7f:84:d4:bd:64:ad:97:25:a7:50:
b8:72:6e:f3:68:e2:10:21:52:6c:e8:06:51:5c:63:
9f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:40:41:8A:CA:D0:60:56:2A:7B:3E:D0:C2:90:7F:1D:31:C5:A9:8E
X509v3 Authority Key Identifier:
keyid:05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a3:06:4d:ec:c1:3c:65:c7:80:a6:6a:ec:b2:31:5c:b3:0d:
08:8d:c2:a0:6e:10:19:c8:95:c5:2b:ea:31:dd:26:c2:1d:d8:
46:71:40:76:75:21:9a:92:89:2b:66:b9:0e:bb:7e:39:54:1b:
fc:d2:81:25:97:40:b0:77:dd:8e:de:f3:8c:e7:fe:5c:03:92:
ae:bd:57:02:b1:36:d9:d3:19:16:b1:6f:38:b9:e2:1d:bc:8c:
eb:d2:a8:e3:d3:0e:4a:8c:20:8b:fb:64:d5:4f:83:1b:a3:1e:
ce:ab:33:ca:02:34:59:e9:3f:34:50:b3:c7:b5:b7:a2:75:ae:
ed:55:8f:d0:b4:50:18:91:3b:4b:e0:23:d3:db:97:ee:19:7c:
eb:7a:f5:63:f5:bc:d0:c1:d8:23:19:bb:e6:90:dd:ff:80:4c:
e8:dd:20:ca:7e:d1:dc:1c:44:0a:93:ca:ad:fd:80:69:e6:18:
5b:2e:e8:ef:8c:11:d2:a7:bc:20:85:82:bb:45:92:05:9a:61:
47:c3:52:74:64:2b:c7:6a:f6:c6:09:d4:c4:eb:0c:c1:2f:ba:
38:9c:94:d6:e6:59:1e:31:c9:f6:32:75:c6:31:66:a8:f0:ac:
4d:27:1b:1a:ae:c1:b0:5c:0c:ee:10:07:77:f8:ea:83:a7:a8:
b6:02:79:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6HUipqYHwfMibUKeLa1ABMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTNiNjE2NDA3Yjk3ZTI2MTE2MzM0ODc3YzZhYTkyOGFh
YWVlYjIwHhcNMjUwNjE2MTkwMDI4WhcNMjUwNjE3MTkwMDI4WjAzMTEwLwYDVQQD
EyhlYjQwNDE4YWNhZDA2MDU2MmE3YjNlZDBjMjkwN2YxZDMxYzVhOThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUUNqkd9ir9uK89KMe3TOrjjW51D
4BULQNXmHDtXPgZgP26BhDthsWLFE/Aj2bde9b4w5YV3TZigYtxA682mNXKtq6vX
S2I0RdJeYEYqaOUWtBCLOQaaDzObcSPwr+2hARAljTTMl94MTqED2cEHZtb+/7cQ
5LIK7W6luKPjxxRulQ4uIf2jpTaGyrzYtVZUR35/JnszlvoCKVT1c/0WjKGo03X7
LNTUpwEoIZQVXTKW5C3yikd4e/hsakuox/BFITfHpbHIBU82ghMLcUiMi8yemL5r
c1b7OcSiKm390iDPHIsvh3+E1L1krZclp1C4cm7zaOIQIVJs6AZRXGOf6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtAQYrK0GBWKns+0MKQfx0xxamOMB8GA1UdIwQY
MBaAFAWjthZAe5fiYRYzSHfGqpKKqu6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFPMkZrQjdsLUpoRmpOSWQ4YXFrb3FxN3JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NDFmNDUtYjkzMy00MDE5LWFhN2Et
YWQ1MTM1NzRhNDA0LzEvQmFPMkZrQjdsLUpoRmpOSWQ4YXFrb3FxN3JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82NDFmNDUtYjkzMy00MDE5LWFhN2EtYWQ1MTM1NzRhNDA0
LzEvQmFPMkZrQjdsLUpoRmpOSWQ4YXFrb3FxN3JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKMGTezB
PGXHgKZq7LIxXLMNCI3CoG4QGciVxSvqMd0mwh3YRnFAdnUhmpKJK2a5Drt+OVQb
/NKBJZdAsHfdjt7zjOf+XAOSrr1XArE22dMZFrFvOLniHbyM69Ko49MOSowgi/tk
1U+DG6MezqszygI0Wek/NFCzx7W3onWu7VWP0LRQGJE7S+Aj09uX7hl863r1Y/W8
0MHYIxm75pDd/4BM6N0gyn7R3BxECpPKrf2AaeYYWy7o74wR0qe8IIWCu0WSBZph
R8NSdGQrx2r2xgnUxOsMwS+6OJyU1uZZHjHJ9jJ1xjFmqPCsTScbGq7BsFwM7hAH
d/jqg6eotgJ5RQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 22:03:46 2025 by rpki-client