Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
File: bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json)
Hash identifier: LG4fHel7BJr2CZdOYcBwABblhXDBjWvapgDC1NCQV5g=
Subject key identifier: 4F:50:1C:A4:7C:92:8C:81:E4:48:C4:81:9A:91:3D:B9:33:7D:EB:EF
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Certificate issuer: /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial: 01977F440EDE9803BA4579FD3FED5326A087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
Manifest number: 09A5
Signing time: Tue 17 Jun 2025 19:00:55 +0000
Manifest this update: Tue 17 Jun 2025 19:00:55 +0000
Manifest next update: Wed 18 Jun 2025 19:00:55 +0000
Files and hashes: 1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: J76EtSu5MqD3OE3DtEyWUgY0B6YHqHSvB1TmEiWtHIE=)
2: kYlX8uk50adCvLD80f5Fzepy0uA.roa (hash: ha3QcBHkgMvicsrTAgTGPAD+hk2VZnwH2+hSQHLSUdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:44:0e:de:98:03:ba:45:79:fd:3f:ed:53:26:a0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Validity
Not Before: Jun 17 19:00:55 2025 GMT
Not After : Jun 18 19:00:55 2025 GMT
Subject: CN=4f501ca47c928c81e448c4819a913db9337debef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:08:8d:95:46:6f:98:28:f6:08:44:d5:5d:
a1:43:10:0c:a5:d2:08:37:f2:5e:e2:55:ef:9a:3e:
44:7a:da:7b:28:86:7d:77:35:3c:97:87:b7:fa:eb:
ca:09:80:10:b7:7b:31:70:5d:cf:d5:2a:95:02:4d:
a9:f3:d5:6e:1b:9c:a9:63:74:5a:8e:a4:9e:5b:0e:
10:95:83:5e:89:d6:09:1a:2a:91:ca:db:67:49:2d:
3d:df:8c:64:ea:30:70:0d:a4:39:d7:c9:92:17:20:
ee:77:a4:8b:a6:27:01:4f:e6:6c:40:38:62:ff:81:
72:0e:2e:34:f0:7b:ec:a1:a6:f0:e9:e6:a3:d0:db:
8d:3e:41:79:77:4f:5c:cf:9e:d5:df:3a:3f:8f:b7:
44:c3:aa:35:8e:1c:5d:98:9a:7f:41:2c:fd:10:db:
1f:ba:9d:6f:12:ba:90:a1:83:f7:c8:7a:fc:81:33:
ab:cb:29:9a:c1:f5:e0:5c:c2:24:3a:e7:82:2e:9e:
c2:0d:ff:80:f9:1c:ff:ad:ac:99:43:78:df:46:d5:
eb:44:fc:c8:26:f4:2f:2e:17:37:c9:f3:44:01:14:
5a:b7:5d:e8:73:94:81:a7:06:04:15:0b:02:24:db:
4d:74:ed:af:e9:af:8a:2f:55:36:12:89:49:97:89:
f4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:50:1C:A4:7C:92:8C:81:E4:48:C4:81:9A:91:3D:B9:33:7D:EB:EF
X509v3 Authority Key Identifier:
keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:58:1e:44:fb:ad:36:8a:5b:06:69:17:b4:cc:36:1c:c5:ff:
d8:cc:b8:d7:83:26:27:bc:8a:ce:f1:28:41:85:34:5b:8d:ff:
69:10:62:55:31:4d:9d:2d:14:05:b8:a9:54:d7:09:8e:97:30:
ac:6d:a1:d0:fb:1c:ed:1a:4a:b5:a2:ab:ad:69:f0:c3:fb:73:
9a:8e:92:76:74:da:01:2a:16:13:d8:a7:aa:9c:64:5f:d1:9b:
c4:e8:88:ac:90:b4:c4:26:6e:e4:75:15:88:2d:3e:86:9c:fe:
63:16:1d:89:d8:4e:ad:7c:40:db:7d:a5:30:cf:38:21:6a:17:
e3:7b:33:95:8e:7d:96:2e:a7:93:6a:82:92:7f:d8:a9:c6:14:
00:3d:fc:45:be:7b:7a:57:21:2b:6f:75:f6:94:74:1f:a8:6b:
75:49:7c:2e:97:3d:05:3f:24:7a:44:b9:97:43:8b:c7:f5:e5:
cd:c3:7e:87:e6:2c:1b:98:d7:85:ee:33:7b:19:9c:68:c7:41:
36:93:5c:9a:4f:c6:a8:0a:b0:3a:19:e5:7e:c8:fe:53:ce:f6:
a5:b8:89:3b:cb:b6:e7:5c:79:a7:45:cc:ce:7a:fb:06:19:50:
1c:fa:d9:1d:f1:3d:e6:07:a7:d0:68:d3:7b:74:f6:0a:50:90:
ad:f2:1e:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd/RA7emAO6RXn9P+1TJqCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjhkMzNkM2RhMTRkM2JiY2ZjZmMyZTQ5MmRjMTY3Mzg0
OWFhNmMwHhcNMjUwNjE3MTkwMDU1WhcNMjUwNjE4MTkwMDU1WjAzMTEwLwYDVQQD
Eyg0ZjUwMWNhNDdjOTI4YzgxZTQ0OGM0ODE5YTkxM2RiOTMzN2RlYmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJQIjZVGb5go9ghE1V2hQxAMpdII
N/Je4lXvmj5Eetp7KIZ9dzU8l4e3+uvKCYAQt3sxcF3P1SqVAk2p89VuG5ypY3Ra
jqSeWw4QlYNeidYJGiqRyttnSS0934xk6jBwDaQ518mSFyDud6SLpicBT+ZsQDhi
/4FyDi408Hvsoabw6eaj0NuNPkF5d09cz57V3zo/j7dEw6o1jhxdmJp/QSz9ENsf
up1vErqQoYP3yHr8gTOryymawfXgXMIkOueCLp7CDf+A+Rz/rayZQ3jfRtXrRPzI
JvQvLhc3yfNEARRat13oc5SBpwYEFQsCJNtNdO2v6a+KL1U2EolJl4n0MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9QHKR8koyB5EjEgZqRPbkzfevvMB8GA1UdIwQY
MBaAFG1o0z09oU07vPz8LkktwWc4SapsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9kNjMxNzgtNWQ1My00MWU0LWE3MGUt
MmExZTM5ZGQ2MzNjLzEvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9kNjMxNzgtNWQ1My00MWU0LWE3MGUtMmExZTM5ZGQ2MzNj
LzEvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1geRPut
NopbBmkXtMw2HMX/2My414MmJ7yKzvEoQYU0W43/aRBiVTFNnS0UBbipVNcJjpcw
rG2h0Psc7RpKtaKrrWnww/tzmo6SdnTaASoWE9inqpxkX9GbxOiIrJC0xCZu5HUV
iC0+hpz+YxYdidhOrXxA232lMM84IWoX43szlY59li6nk2qCkn/YqcYUAD38Rb57
elchK2919pR0H6hrdUl8Lpc9BT8kekS5l0OLx/XlzcN+h+YsG5jXhe4zexmcaMdB
NpNcmk/GqAqwOhnlfsj+U872pbiJO8u251x5p0XMznr7BhlQHPrZHfE95gen0GjT
e3T2ClCQrfIeqw==
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:23:46 2025 by rpki-client