Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json)
Hash identifier: x89+qDn4GIhBmMSAgK4Le+NcXBnwXO1QuIW7S/LcLl8=
Subject key identifier: 43:7B:3F:7F:03:D4:0C:49:F1:3F:87:C3:AF:38:35:8B:E2:B5:24:6E
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 0198936CDBBC3C4D953EF9E29D6B2B0505CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 10:00:41 +0000
Manifest this update: Sun 10 Aug 2025 10:00:41 +0000
Manifest next update: Mon 11 Aug 2025 10:00:41 +0000
Files and hashes: 1: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: LMJtV25fy20iJ7pWNN/Dc/+TyTu8Cc2z1x7NCqaAmfo=)
2: N9wZb19u6uDl2jmJsSrj5tJBTrs.roa (hash: 0C5L52QJ9EePN5vLiQx5L6BEy17vjwGiBKVGlRWVCRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:db:bc:3c:4d:95:3e:f9:e2:9d:6b:2b:05:05:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: Aug 10 10:00:41 2025 GMT
Not After : Aug 11 10:00:41 2025 GMT
Subject: CN=437b3f7f03d40c49f13f87c3af38358be2b5246e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:af:bf:6e:fa:0f:b9:63:af:07:29:70:11:a4:
42:15:91:17:d3:f0:c6:e0:2c:24:04:61:6f:20:9a:
21:16:a1:25:55:42:10:dc:da:ba:b7:97:21:ac:27:
f8:4d:48:e0:3a:3d:a8:c2:21:25:2e:b9:d2:65:bc:
26:c9:68:55:5d:91:c6:a2:99:37:fc:ef:fa:b3:89:
48:65:37:ff:fb:f6:a2:cc:f7:a5:cc:dc:4f:51:cb:
48:29:d5:fe:29:3e:b7:a5:97:dd:f6:b8:de:4b:56:
c8:38:76:c1:b0:c1:8a:ee:62:ff:ba:58:f4:de:64:
a5:da:dd:49:fe:9e:e1:c4:72:2a:43:8e:0e:ab:96:
a7:41:7e:03:01:b1:b6:7d:94:96:3b:ea:1f:c8:53:
34:64:bb:4d:04:7d:3b:4e:18:83:22:66:31:d7:3c:
3f:5d:18:fb:04:d3:f3:de:b0:8b:dd:d2:15:fd:ed:
54:af:b0:3f:a8:fc:19:4f:69:02:ae:90:1e:c2:d2:
b5:7f:c8:21:c4:eb:b5:61:61:a8:1e:27:e5:d6:6f:
bd:cd:a9:b1:85:62:c0:22:09:7c:27:da:75:f7:84:
62:c6:a6:c0:1d:b0:5a:63:50:50:5a:2c:cb:a1:f0:
00:e8:22:9c:eb:8e:48:ba:01:e9:96:0b:9f:df:c4:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7B:3F:7F:03:D4:0C:49:F1:3F:87:C3:AF:38:35:8B:E2:B5:24:6E
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:28:db:29:ba:22:fc:a1:7f:53:d1:9b:6c:3b:75:62:08:74:
4c:11:44:c3:ed:82:01:01:4c:2c:44:91:47:92:19:4b:00:b5:
5f:ea:1e:bf:5b:81:48:aa:52:24:c9:d5:3f:7c:04:25:1b:21:
2f:3e:2f:03:82:d8:cd:5f:9a:a6:30:79:11:ad:f3:28:fa:23:
55:c8:6b:60:cd:50:86:ee:81:b2:43:5b:83:33:a8:fb:31:a9:
99:d8:17:97:5c:27:50:3a:56:eb:7e:50:3e:ce:7f:7f:f5:20:
a4:2a:74:20:d0:1d:fa:11:34:ef:f0:1a:71:39:d6:98:89:39:
ff:01:50:f6:94:62:a9:7e:e3:c3:23:20:ba:a6:43:b2:25:e3:
39:ae:dd:98:99:b4:08:ae:68:04:ea:18:38:23:08:f7:54:1e:
a3:15:1b:0f:17:9f:fc:e2:26:bc:fa:1d:5a:b4:6e:94:8e:f1:
c3:fe:45:9f:94:87:f4:32:80:ff:a4:44:a4:12:e9:d1:41:f8:
d0:3b:3a:2e:42:fd:07:d1:09:7f:4d:ad:af:5c:7b:6b:b4:81:
df:69:59:4e:d2:16:13:8c:1a:f7:3d:e9:4d:8a:46:4a:52:3f:
92:9f:5d:1b:3c:93:91:38:fd:39:8e:27:3e:4c:e6:10:72:3c:
1d:0b:cc:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTbNu8PE2VPvninWsrBQXNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0OGIwYzMzNzc2NjYzY2I0MzIxYTEwOGYyZjRkMTYzNWI1
ZDJkOGEwHhcNMjUwODEwMTAwMDQxWhcNMjUwODExMTAwMDQxWjAzMTEwLwYDVQQD
Eyg0MzdiM2Y3ZjAzZDQwYzQ5ZjEzZjg3YzNhZjM4MzU4YmUyYjUyNDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK+/bvoPuWOvBylwEaRCFZEX0/DG
4CwkBGFvIJohFqElVUIQ3Nq6t5chrCf4TUjgOj2owiElLrnSZbwmyWhVXZHGopk3
/O/6s4lIZTf/+/aizPelzNxPUctIKdX+KT63pZfd9rjeS1bIOHbBsMGK7mL/ulj0
3mSl2t1J/p7hxHIqQ44Oq5anQX4DAbG2fZSWO+ofyFM0ZLtNBH07ThiDImYx1zw/
XRj7BNPz3rCL3dIV/e1Ur7A/qPwZT2kCrpAewtK1f8ghxOu1YWGoHifl1m+9zamx
hWLAIgl8J9p194RixqbAHbBaY1BQWizLofAA6CKc645IugHplguf38StXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEN7P38D1AxJ8T+Hw684NYvitSRuMB8GA1UdIwQY
MBaAFASLDDN3ZmPLQyGhCPL00WNbXS2KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUt
MjQxMTZjYjZlOTg2LzEvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUtMjQxMTZjYjZlOTg2
LzEvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJijbKboi
/KF/U9GbbDt1Ygh0TBFEw+2CAQFMLESRR5IZSwC1X+oev1uBSKpSJMnVP3wEJRsh
Lz4vA4LYzV+apjB5Ea3zKPojVchrYM1Qhu6BskNbgzOo+zGpmdgXl1wnUDpW635Q
Ps5/f/UgpCp0INAd+hE07/AacTnWmIk5/wFQ9pRiqX7jwyMguqZDsiXjOa7dmJm0
CK5oBOoYOCMI91QeoxUbDxef/OImvPodWrRulI7xw/5Fn5SH9DKA/6REpBLp0UH4
0Ds6LkL9B9EJf02tr1x7a7SB32lZTtIWE4wa9z3pTYpGSlI/kp9dGzyTkTj9OY4n
PkzmEHI8HQvMHw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:22 2025 by rpki-client