Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
File: bIkO9qiKsz-logZ2B2jdMlHCOK8.mft (raw, json)
Hash identifier: Nl/DzwnlgYTQ49Vaaag4zv13NZUpUmJe3bHsgiy09BE=
Subject key identifier: 7D:4D:20:51:CB:6A:60:55:BD:4D:A7:0B:0B:F2:CB:FE:92:1C:C1:D7
Authority key identifier: 6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
Certificate issuer: /CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Certificate serial: 0197722CE355219863E0A0E6B241FEE3AECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 06:00:33 +0000
Manifest this update: Sun 15 Jun 2025 06:00:33 +0000
Manifest next update: Mon 16 Jun 2025 06:00:33 +0000
Files and hashes: 1: Jg3tAly607eUyr5ul8qsb9iYCbk.roa (hash: E+on8KClaRu9XGuipMYBlTB9A2oc11upYWwt1aQCGuI=)
2: bIkO9qiKsz-logZ2B2jdMlHCOK8.crl (hash: BHf0/k8huETJ3r0JEf6scNR22zx0L+V6NTziy3sGDME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:e3:55:21:98:63:e0:a0:e6:b2:41:fe:e3:ae:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Validity
Not Before: Jun 15 06:00:33 2025 GMT
Not After : Jun 16 06:00:33 2025 GMT
Subject: CN=7d4d2051cb6a6055bd4da70b0bf2cbfe921cc1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:24:5b:bc:c2:3d:65:03:00:79:ba:dc:f0:
b4:79:1c:8f:35:9d:1b:29:79:96:9c:e2:2c:27:fa:
24:60:24:81:3f:fe:b9:97:ba:28:dc:25:65:28:77:
19:f8:61:c0:5c:db:ef:08:00:46:34:cd:52:23:d6:
37:86:39:f0:54:16:06:44:ec:75:23:68:7a:8c:f6:
c8:70:04:27:7b:57:51:39:8c:17:37:21:08:5c:00:
b1:96:bd:f5:9c:bc:04:74:09:b8:ed:02:8d:b5:2c:
bd:13:34:3d:14:e1:7a:40:0a:90:0e:7b:b0:ee:8b:
06:cf:78:ff:47:4b:7b:ce:2a:f4:e8:90:92:5d:b3:
70:3c:b1:a8:dc:d7:17:b7:1b:5e:6a:f0:5c:26:12:
d8:58:41:21:41:4c:93:d7:2d:92:a6:e3:eb:58:53:
78:a7:67:0a:b9:21:12:49:67:2e:1f:8f:a9:e6:39:
31:54:5a:33:c1:54:07:56:8f:85:ef:87:22:7a:bf:
77:b7:b0:b6:be:19:a4:2c:ab:23:c8:60:d6:bd:3f:
28:fa:b1:13:2e:ee:a6:45:29:db:93:13:91:6d:d3:
e2:dd:2c:72:89:01:2e:20:46:69:26:4f:dd:c1:3c:
2e:54:61:e5:1f:c6:f7:28:d4:a3:c2:3b:77:68:7d:
bb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4D:20:51:CB:6A:60:55:BD:4D:A7:0B:0B:F2:CB:FE:92:1C:C1:D7
X509v3 Authority Key Identifier:
keyid:6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3d:c2:91:13:84:76:4e:d7:dd:21:f6:57:a2:01:2f:e3:87:
2b:9a:67:9d:7f:7e:c5:32:01:6a:84:e2:15:11:7c:7a:02:b7:
33:98:bf:cf:6e:65:35:d8:71:24:c8:4a:a4:1f:35:57:cc:ef:
91:15:a9:d1:70:07:61:ab:e3:ff:14:2d:5d:da:40:b7:02:0e:
cd:d9:4d:bd:1f:28:8b:02:87:3f:2b:33:07:a3:c3:5d:16:ad:
03:9b:07:38:2f:2a:67:08:c9:8a:75:b3:3f:53:10:6d:7d:f4:
c7:bb:d7:07:d0:68:f6:c5:0b:33:7f:eb:19:5f:a3:cf:a8:47:
fa:01:57:31:93:4f:cf:3a:61:a9:0b:2c:ca:96:15:82:ee:d9:
e7:be:c6:a6:37:d0:00:56:d2:47:6d:70:30:55:11:72:18:d1:
4f:9d:51:25:d7:0c:1b:35:c6:a2:df:51:aa:8c:43:fc:9b:d7:
dd:42:d3:74:8f:09:82:e0:2e:60:48:b2:db:a6:67:e2:f0:74:
d5:a6:8c:29:73:bf:4b:69:27:4a:0e:a6:4a:3e:fd:57:ab:6f:
09:36:9e:eb:02:2e:37:76:a3:ef:d8:86:a4:ab:62:01:82:0f:
a7:9f:96:ef:09:7a:0a:0c:24:ea:36:13:d1:b9:99:d7:b2:2c:
6d:8c:e3:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyLONVIZhj4KDmskH+467KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjODkwZWY2YTg4YWIzM2ZhNWEyMDY3NjA3NjhkZDMyNTFj
MjM4YWYwHhcNMjUwNjE1MDYwMDMzWhcNMjUwNjE2MDYwMDMzWjAzMTEwLwYDVQQD
Eyg3ZDRkMjA1MWNiNmE2MDU1YmQ0ZGE3MGIwYmYyY2JmZTkyMWNjMWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC4kW7zCPWUDAHm63PC0eRyPNZ0b
KXmWnOIsJ/okYCSBP/65l7oo3CVlKHcZ+GHAXNvvCABGNM1SI9Y3hjnwVBYGROx1
I2h6jPbIcAQne1dROYwXNyEIXACxlr31nLwEdAm47QKNtSy9EzQ9FOF6QAqQDnuw
7osGz3j/R0t7zir06JCSXbNwPLGo3NcXtxteavBcJhLYWEEhQUyT1y2SpuPrWFN4
p2cKuSESSWcuH4+p5jkxVFozwVQHVo+F74cier93t7C2vhmkLKsjyGDWvT8o+rET
Lu6mRSnbkxORbdPi3SxyiQEuIEZpJk/dwTwuVGHlH8b3KNSjwjt3aH27mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1NIFHLamBVvU2nCwvyy/6SHMHXMB8GA1UdIwQY
MBaAFGyJDvaoirM/paIGdgdo3TJRwjivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklrTzlxaUtzei1sb2daMkIyamRNbEhDT0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yYjdjZDEtNDliNi00OTIxLWE1ZTEt
NjFmOTFlZGVkZjBhLzEvYklrTzlxaUtzei1sb2daMkIyamRNbEhDT0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8yYjdjZDEtNDliNi00OTIxLWE1ZTEtNjFmOTFlZGVkZjBh
LzEvYklrTzlxaUtzei1sb2daMkIyamRNbEhDT0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUj3CkROE
dk7X3SH2V6IBL+OHK5pnnX9+xTIBaoTiFRF8egK3M5i/z25lNdhxJMhKpB81V8zv
kRWp0XAHYavj/xQtXdpAtwIOzdlNvR8oiwKHPyszB6PDXRatA5sHOC8qZwjJinWz
P1MQbX30x7vXB9Bo9sULM3/rGV+jz6hH+gFXMZNPzzphqQssypYVgu7Z577GpjfQ
AFbSR21wMFURchjRT51RJdcMGzXGot9RqoxD/JvX3ULTdI8JguAuYEiy26Zn4vB0
1aaMKXO/S2knSg6mSj79V6tvCTae6wIuN3aj79iGpKtiAYIPp5+W7wl6Cgwk6jYT
0bmZ17IsbYzjrA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:05:08 2025 by rpki-client