Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
File: tBhner86ruA2zUrdd9ZhlvzeTG0.mft (raw, json)
Hash identifier: g+kyjMQO1EtJuWhpR1lUcw9kqWOhUhVoqyUwOYmGpqc=
Subject key identifier: BF:22:75:4D:43:90:74:55:A7:30:C7:05:A2:0C:C7:00:86:BC:20:6D
Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
Certificate issuer: /CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Certificate serial: 01977188A7C4AE1D0EF0BD2A5BD9F8F88D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
Manifest number: 0E60
Signing time: Sun 15 Jun 2025 03:01:10 +0000
Manifest this update: Sun 15 Jun 2025 03:01:10 +0000
Manifest next update: Mon 16 Jun 2025 03:01:10 +0000
Files and hashes: 1: GluX1bXAOCEKoiPGiqd94CJ3PnQ.roa (hash: Ni4Tstwu0GgIgTRS0r/kMJY1nK24hB/s3xhSSr7BatI=)
2: sUg9MVJbpnKjp6n_qVdxGGSeJB8.roa (hash: iazJ3Yw/lvASdOuiaEdBPRq3HWHdL5Kxvj+o3m8saWE=)
3: tBhner86ruA2zUrdd9ZhlvzeTG0.crl (hash: MDjT+vZj2FBJw4AGHB7O9kAx0kiR0NWjKp7t03wfEok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:a7:c4:ae:1d:0e:f0:bd:2a:5b:d9:f8:f8:8d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Validity
Not Before: Jun 15 03:01:10 2025 GMT
Not After : Jun 16 03:01:10 2025 GMT
Subject: CN=bf22754d43907455a730c705a20cc70086bc206d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:b3:f7:f5:4b:a3:a1:50:65:bd:37:ec:b0:
42:e6:e1:ab:f1:09:35:a5:fb:25:59:2f:b8:28:2e:
71:41:a4:12:35:70:2e:d2:85:85:d1:99:cd:5d:e8:
57:14:d5:fa:9c:ea:4a:54:e8:b3:3f:9c:d8:e9:4e:
12:8e:b7:1e:42:9e:fd:fc:08:37:01:43:30:d4:d8:
c3:8b:a1:e2:e2:8f:58:c3:b1:c9:be:85:a7:71:65:
a0:d2:37:f7:37:e6:eb:9d:6d:98:af:7b:34:4e:18:
8b:e4:29:01:28:96:23:20:16:77:59:4f:11:63:32:
3d:d9:f1:4c:8d:91:31:45:e2:23:33:f3:c7:73:c2:
60:a7:ae:99:44:c2:6f:cc:6f:83:5a:b6:5d:2b:ad:
14:55:3b:e5:dd:98:97:08:c2:43:04:cd:52:53:ee:
e3:61:0b:ed:e6:49:ed:5c:6e:6f:d2:dc:8d:29:88:
b5:d7:6c:e5:54:e5:19:6d:91:84:b1:78:35:b7:3a:
ce:c4:0e:46:d9:87:e1:28:07:dc:9c:90:e8:ce:f6:
83:0c:c7:e4:e8:26:33:8f:6e:db:f0:62:0c:95:5e:
9e:e9:ad:5c:ac:d1:77:60:be:ab:93:21:a8:81:a9:
aa:75:2b:9e:cd:92:77:d0:7d:94:49:cd:87:43:70:
d3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:22:75:4D:43:90:74:55:A7:30:C7:05:A2:0C:C7:00:86:BC:20:6D
X509v3 Authority Key Identifier:
keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ff:2e:ce:bd:4e:75:d5:70:bb:6a:77:77:85:3a:cb:c8:9d:
55:ef:2f:c8:ae:d5:e8:c3:9d:c0:68:c6:04:10:07:80:71:cf:
9c:18:af:7b:bd:29:5f:f6:66:bb:8d:72:48:23:58:f2:0a:8f:
5b:57:86:34:34:ca:38:8b:39:1b:49:cf:81:0d:22:f6:fa:f2:
73:a1:81:bc:68:cf:9f:e2:ee:54:13:6c:51:1c:ce:b6:2e:7c:
8d:bb:48:84:b1:a2:dd:6a:12:57:1f:27:2b:e7:15:b5:18:80:
33:d0:e1:4c:66:24:32:57:eb:37:ad:b6:0f:b9:5a:51:8b:2c:
2e:d5:b6:c2:ec:c8:83:ef:ff:9f:34:1f:a5:20:1f:e2:48:8c:
97:de:2e:96:2d:9e:66:b4:9c:bc:76:8e:75:79:a8:3c:69:14:
40:c0:27:3f:d1:60:04:8a:d3:90:ce:9e:65:44:a4:16:d0:89:
e8:93:2c:67:71:1a:ea:98:08:0c:a3:91:e9:d2:28:96:8d:e8:
da:3c:23:68:7b:7a:cc:aa:d6:83:b6:76:70:dd:b9:66:3d:d3:
4f:76:f1:c9:66:2c:48:31:91:bd:63:e7:58:1a:cb:e3:5a:71:
05:ce:29:bf:8f:fc:17:73:b1:06:0f:3c:e5:00:1a:2a:c0:fd:
d3:a8:6a:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxiKfErh0O8L0qW9n4+I04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MTg2NzdhYmYzYWFlZTAzNmNkNGFkZDc3ZDY2MTk2ZmNk
ZTRjNmQwHhcNMjUwNjE1MDMwMTEwWhcNMjUwNjE2MDMwMTEwWjAzMTEwLwYDVQQD
EyhiZjIyNzU0ZDQzOTA3NDU1YTczMGM3MDVhMjBjYzcwMDg2YmMyMDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLOz9/VLo6FQZb037LBC5uGr8Qk1
pfslWS+4KC5xQaQSNXAu0oWF0ZnNXehXFNX6nOpKVOizP5zY6U4SjrceQp79/Ag3
AUMw1NjDi6Hi4o9Yw7HJvoWncWWg0jf3N+brnW2Yr3s0ThiL5CkBKJYjIBZ3WU8R
YzI92fFMjZExReIjM/PHc8Jgp66ZRMJvzG+DWrZdK60UVTvl3ZiXCMJDBM1SU+7j
YQvt5kntXG5v0tyNKYi112zlVOUZbZGEsXg1tzrOxA5G2YfhKAfcnJDozvaDDMfk
6CYzj27b8GIMlV6e6a1crNF3YL6rkyGogamqdSuezZJ30H2USc2HQ3DTCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8idU1DkHRVpzDHBaIMxwCGvCBtMB8GA1UdIwQY
MBaAFLQYZ3q/Oq7gNs1K3XfWYZb83kxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEJobmVyODZydUEyelVyZGQ5WmhsdnplVEcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9kYTI1YzktNGZlMS00NWRhLThlNzQt
MmJlYTM0Yjg5MzhiLzEvdEJobmVyODZydUEyelVyZGQ5WmhsdnplVEcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9kYTI1YzktNGZlMS00NWRhLThlNzQtMmJlYTM0Yjg5Mzhi
LzEvdEJobmVyODZydUEyelVyZGQ5WmhsdnplVEcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYP8uzr1O
ddVwu2p3d4U6y8idVe8vyK7V6MOdwGjGBBAHgHHPnBive70pX/Zmu41ySCNY8gqP
W1eGNDTKOIs5G0nPgQ0i9vryc6GBvGjPn+LuVBNsURzOti58jbtIhLGi3WoSVx8n
K+cVtRiAM9DhTGYkMlfrN622D7laUYssLtW2wuzIg+//nzQfpSAf4kiMl94uli2e
ZrScvHaOdXmoPGkUQMAnP9FgBIrTkM6eZUSkFtCJ6JMsZ3Ea6pgIDKOR6dIolo3o
2jwjaHt6zKrWg7Z2cN25Zj3TT3bxyWYsSDGRvWPnWBrL41pxBc4pv4/8F3OxBg88
5QAaKsD906hqxQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:45:43 2025 by rpki-client