Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft
File: bG9jkROWOM74MYEUEyzPJuFn06Q.mft (raw, json)
Hash identifier: 4Pemf/KytLr7d0Kt1g+TIxM1kChpR18ru86jVnBrk7k=
Subject key identifier: 12:3E:77:B3:C3:7A:02:A7:4E:2C:61:68:66:58:53:52:12:26:29:6B
Authority key identifier: 6C:6F:63:91:13:96:38:CE:F8:31:81:14:13:2C:CF:26:E1:67:D3:A4
Certificate issuer: /CN=6c6f6391139638cef8318114132ccf26e167d3a4
Certificate serial: 01988B0F91BC5E51137EE14584ACCF8BBF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft
Manifest number: 12FC
Signing time: Fri 08 Aug 2025 19:01:50 +0000
Manifest this update: Fri 08 Aug 2025 19:01:50 +0000
Manifest next update: Sat 09 Aug 2025 19:01:50 +0000
Files and hashes: 1: _HGowDUCSG2pcAysO4ogxA6yosc.roa (hash: UPTC6ZbpFxK2iqUZ6z67RcYvcbR0/gldSq3kNUHLLJI=)
2: bG9jkROWOM74MYEUEyzPJuFn06Q.crl (hash: UOQwyiJ7pqgQfBepAylosLrfLLh2jccfFWLyaCykOrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:91:bc:5e:51:13:7e:e1:45:84:ac:cf:8b:bf:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6f6391139638cef8318114132ccf26e167d3a4
Validity
Not Before: Aug 8 19:01:50 2025 GMT
Not After : Aug 9 19:01:50 2025 GMT
Subject: CN=123e77b3c37a02a74e2c6168665853521226296b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:a9:43:65:77:33:28:e6:4b:3d:2a:fe:c8:
59:a3:2f:31:6f:ab:3e:d1:4c:68:5e:34:ff:ad:60:
39:c0:a3:39:2c:bc:b1:87:36:17:0b:58:0b:b9:82:
e1:1c:0f:ad:0d:47:59:d9:db:63:4f:0b:9e:4e:2c:
80:25:49:1d:2b:2e:49:10:81:93:21:ca:90:be:34:
ab:27:9d:53:c0:8d:dc:fa:f7:8b:d5:e4:6d:47:a2:
9b:cf:2f:34:fd:ed:d9:16:78:1e:e5:e8:28:c2:33:
f8:6e:ad:6b:54:4b:fa:af:2b:99:9f:c9:62:ca:d3:
e0:ac:ee:a2:57:ec:fd:b3:69:2e:5b:35:0a:8e:f7:
02:4a:40:01:e8:97:fb:34:d3:6f:9a:72:e7:b8:bd:
51:d3:29:56:0c:83:94:8a:30:d0:c9:41:1c:34:d9:
6f:db:00:39:1f:e2:04:0a:87:e5:f3:86:3f:50:a5:
1e:b7:4e:f1:96:90:8d:b0:1d:64:79:d8:60:60:4a:
ba:ee:5d:4f:3c:60:03:c2:44:46:e1:47:48:6e:7b:
55:85:2e:36:b9:82:ac:79:71:4d:30:b6:c9:9b:6e:
7e:9b:20:b2:3c:8e:51:ad:6f:f0:bb:a3:56:7d:59:
25:79:2e:90:57:a7:ee:47:c2:a9:a7:19:d1:cb:a6:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3E:77:B3:C3:7A:02:A7:4E:2C:61:68:66:58:53:52:12:26:29:6B
X509v3 Authority Key Identifier:
keyid:6C:6F:63:91:13:96:38:CE:F8:31:81:14:13:2C:CF:26:E1:67:D3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:da:ee:4a:14:05:fc:68:a7:2f:c0:cb:56:e4:98:ed:bf:6e:
68:bc:1d:3b:41:ee:e6:bf:1b:fc:ed:32:01:81:e7:fa:86:d1:
4a:d7:75:87:88:31:22:c9:25:26:94:f0:90:92:0c:ff:11:75:
24:b3:ac:55:65:48:7a:73:7c:0d:7d:af:d7:54:5b:00:17:2d:
7b:25:c4:ea:77:31:5c:06:54:1d:18:a8:c5:ce:82:6c:58:6c:
06:e9:6d:28:a9:1f:c1:27:65:28:21:66:24:68:9c:f4:9e:f5:
93:09:59:49:20:1d:a4:a5:dc:78:c3:b7:92:db:6a:cd:3c:a6:
fd:e5:df:e7:d0:06:d0:41:19:3e:58:0e:7e:ed:2a:9f:f1:d9:
53:4a:24:59:69:d9:0d:54:18:c1:c4:80:d1:73:d9:7e:7b:7f:
17:b7:28:92:76:5c:89:8d:e7:29:d6:b9:1e:ff:c3:88:3b:37:
3c:0f:b9:24:49:e2:73:fb:61:24:59:97:3e:6b:31:59:ca:1f:
1d:a2:33:10:4d:c6:ff:46:ef:06:0e:43:c3:7a:63:b2:22:67:
89:2c:97:28:ce:25:cc:6d:a1:b1:b7:5d:94:5d:33:16:38:5d:
4d:9f:ac:5f:ee:b5:64:44:bf:90:6a:98:6e:4e:d8:42:b0:a5:
19:db:06:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLD5G8XlETfuFFhKzPi7+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNmY2MzkxMTM5NjM4Y2VmODMxODExNDEzMmNjZjI2ZTE2
N2QzYTQwHhcNMjUwODA4MTkwMTUwWhcNMjUwODA5MTkwMTUwWjAzMTEwLwYDVQQD
EygxMjNlNzdiM2MzN2EwMmE3NGUyYzYxNjg2NjU4NTM1MjEyMjYyOTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMapQ2V3MyjmSz0q/shZoy8xb6s+
0UxoXjT/rWA5wKM5LLyxhzYXC1gLuYLhHA+tDUdZ2dtjTwueTiyAJUkdKy5JEIGT
IcqQvjSrJ51TwI3c+veL1eRtR6Kbzy80/e3ZFnge5egowjP4bq1rVEv6ryuZn8li
ytPgrO6iV+z9s2kuWzUKjvcCSkAB6Jf7NNNvmnLnuL1R0ylWDIOUijDQyUEcNNlv
2wA5H+IECofl84Y/UKUet07xlpCNsB1kedhgYEq67l1PPGADwkRG4UdIbntVhS42
uYKseXFNMLbJm25+myCyPI5RrW/wu6NWfVkleS6QV6fuR8KppxnRy6bv/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBI+d7PDegKnTixhaGZYU1ISJilrMB8GA1UdIwQY
MBaAFGxvY5ETljjO+DGBFBMszybhZ9OkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkc5amtST1dPTTc0TVlFVUV5elBKdUZuMDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85NWE2ZjQtODIyMC00NmRjLWIyMzgt
MzRhZDFjODUzNTk5LzEvYkc5amtST1dPTTc0TVlFVUV5elBKdUZuMDZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS85NWE2ZjQtODIyMC00NmRjLWIyMzgtMzRhZDFjODUzNTk5
LzEvYkc5amtST1dPTTc0TVlFVUV5elBKdUZuMDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNruShQF
/GinL8DLVuSY7b9uaLwdO0Hu5r8b/O0yAYHn+obRStd1h4gxIsklJpTwkJIM/xF1
JLOsVWVIenN8DX2v11RbABcteyXE6ncxXAZUHRioxc6CbFhsBultKKkfwSdlKCFm
JGic9J71kwlZSSAdpKXceMO3kttqzTym/eXf59AG0EEZPlgOfu0qn/HZU0okWWnZ
DVQYwcSA0XPZfnt/F7coknZciY3nKda5Hv/DiDs3PA+5JEnic/thJFmXPmsxWcof
HaIzEE3G/0bvBg5Dw3pjsiJniSyXKM4lzG2hsbddlF0zFjhdTZ+sX+61ZES/kGqY
bk7YQrClGdsGZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:47:32 2025 by rpki-client