Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
File: bz2JqB_CmfOcCS5PbQFzqanPvGU.mft (raw, json)
Hash identifier: n7hypobrYTUSxHKiM513cjVfxDiPQB5qYBvCYnGUz58=
Subject key identifier: A4:32:43:C7:5E:14:CA:8F:86:91:2B:1A:9A:05:5D:87:52:E2:EF:55
Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
Certificate issuer: /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Certificate serial: 019889200093E9714D93589D3725B3F0D99B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
Manifest number: 1628
Signing time: Fri 08 Aug 2025 10:00:32 +0000
Manifest this update: Fri 08 Aug 2025 10:00:32 +0000
Manifest next update: Sat 09 Aug 2025 10:00:32 +0000
Files and hashes: 1: _OBCt42Qgl4wI2H058mG4uDYUOw.roa (hash: jWbxYRFs270K2f9wkh6LdpAj2cDPsQg7s0mhGOvBxRQ=)
2: bz2JqB_CmfOcCS5PbQFzqanPvGU.crl (hash: J0eGw1rgerkWIjeWSU5lSzk7JiMct9Xt71KCIFnL4dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:00:93:e9:71:4d:93:58:9d:37:25:b3:f0:d9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Validity
Not Before: Aug 8 10:00:32 2025 GMT
Not After : Aug 9 10:00:32 2025 GMT
Subject: CN=a43243c75e14ca8f86912b1a9a055d8752e2ef55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:09:e9:c6:62:36:8c:b0:59:64:3a:cb:f9:3e:
5c:c8:6a:c3:88:20:21:9e:44:3c:45:df:2c:50:ad:
53:c1:6c:6e:5c:ee:05:d9:c7:69:88:12:6b:7a:84:
01:08:d3:ae:76:f2:d9:f0:65:65:da:34:5a:2c:e5:
97:b6:0d:50:7e:d9:84:69:94:dc:5e:23:a5:41:3f:
f6:1e:97:3f:2f:56:4d:1b:57:42:66:c4:21:e3:51:
6b:2f:4f:bb:0b:63:2e:0d:7c:2c:f7:6d:68:c4:a2:
29:4e:0b:ef:6a:f8:80:06:d7:91:a6:18:dc:a9:bf:
8c:63:4a:01:e0:90:5d:04:3f:13:7e:34:5e:bc:09:
5d:26:bf:04:df:55:b3:23:84:cc:4c:96:60:3a:5e:
19:ac:6d:35:45:24:d6:67:1c:f6:19:09:1d:97:9f:
00:c8:29:f0:ac:37:42:49:cb:f0:98:38:36:36:44:
07:45:7d:9b:f8:fa:f1:8c:62:d7:24:e1:89:2a:6b:
7c:23:1c:da:61:e5:5f:d4:6f:ae:c7:ee:27:d3:68:
7d:81:b7:d2:61:1b:87:66:ee:a2:d2:a9:31:62:21:
ee:c0:82:2e:e4:7a:c5:3e:22:ba:4e:9c:ef:a4:da:
74:e3:8c:8c:e4:4c:b9:5f:75:a6:9c:52:30:89:df:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:32:43:C7:5E:14:CA:8F:86:91:2B:1A:9A:05:5D:87:52:E2:EF:55
X509v3 Authority Key Identifier:
keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9e:33:a1:40:88:da:e2:b3:ee:bd:02:b3:27:f6:1d:bf:ff:
f4:ee:ff:86:2a:f8:d1:ff:3b:42:a1:86:c1:f3:72:dd:37:78:
b2:fd:11:16:4f:a8:f3:5a:55:dd:90:99:0c:63:d3:7f:df:63:
db:82:a9:a9:fc:06:f8:36:69:7b:ac:a9:63:1e:cd:77:c3:bf:
2e:8a:22:b3:7f:1f:a1:cd:0e:58:6e:be:20:3c:9c:54:83:52:
ea:50:3f:dc:dc:7e:e0:8e:de:71:a9:53:b0:f7:02:11:0a:11:
98:7b:09:ee:68:52:ef:9f:cc:4a:73:5c:0e:32:3e:0c:46:c4:
ed:7e:e0:30:78:0a:1e:ca:7f:58:e3:00:f7:06:a8:66:88:e5:
be:2d:56:0d:b0:e4:d5:f5:f3:c4:ac:15:04:8c:36:57:44:e5:
7b:69:df:f9:22:3b:ad:8c:06:fd:8b:c8:5b:3f:89:c4:64:70:
fd:81:eb:2f:ed:96:d3:5a:fa:85:52:e8:3d:4c:49:65:5a:47:
2c:d3:cf:8e:d0:8b:7d:55:45:cc:e7:cd:b0:65:23:37:4a:b5:
5f:36:03:e5:a4:18:c4:60:3b:e7:b2:68:aa:66:0e:b8:38:db:
0f:02:b6:ed:16:2d:98:ee:45:bb:f5:83:6f:5d:ba:9a:18:74:
79:d1:18:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJIACT6XFNk1idNyWz8NmbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmM2Q4OWE4MWZjMjk5ZjM5YzA5MmU0ZjZkMDE3M2E5YTlj
ZmJjNjUwHhcNMjUwODA4MTAwMDMyWhcNMjUwODA5MTAwMDMyWjAzMTEwLwYDVQQD
EyhhNDMyNDNjNzVlMTRjYThmODY5MTJiMWE5YTA1NWQ4NzUyZTJlZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QnpxmI2jLBZZDrL+T5cyGrDiCAh
nkQ8Rd8sUK1TwWxuXO4F2cdpiBJreoQBCNOudvLZ8GVl2jRaLOWXtg1QftmEaZTc
XiOlQT/2Hpc/L1ZNG1dCZsQh41FrL0+7C2MuDXws921oxKIpTgvvaviABteRphjc
qb+MY0oB4JBdBD8TfjRevAldJr8E31WzI4TMTJZgOl4ZrG01RSTWZxz2GQkdl58A
yCnwrDdCScvwmDg2NkQHRX2b+PrxjGLXJOGJKmt8IxzaYeVf1G+ux+4n02h9gbfS
YRuHZu6i0qkxYiHuwIIu5HrFPiK6TpzvpNp044yM5Ey5X3WmnFIwid9bKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQyQ8deFMqPhpErGpoFXYdS4u9VMB8GA1UdIwQY
MBaAFG89iagfwpnznAkuT20Bc6mpz7xlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnoySnFCX0NtZk9jQ1M1UGJRRnpxYW5QdkdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wNWUwZWUtYWUwMy00MTI0LWI2NzAt
MzA5YjdiOTYwZDE0LzEvYnoySnFCX0NtZk9jQ1M1UGJRRnpxYW5QdkdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wNWUwZWUtYWUwMy00MTI0LWI2NzAtMzA5YjdiOTYwZDE0
LzEvYnoySnFCX0NtZk9jQ1M1UGJRRnpxYW5QdkdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZ4zoUCI
2uKz7r0Csyf2Hb//9O7/hir40f87QqGGwfNy3Td4sv0RFk+o81pV3ZCZDGPTf99j
24KpqfwG+DZpe6ypYx7Nd8O/Loois38foc0OWG6+IDycVINS6lA/3Nx+4I7ecalT
sPcCEQoRmHsJ7mhS75/MSnNcDjI+DEbE7X7gMHgKHsp/WOMA9waoZojlvi1WDbDk
1fXzxKwVBIw2V0Tle2nf+SI7rYwG/YvIWz+JxGRw/YHrL+2W01r6hVLoPUxJZVpH
LNPPjtCLfVVFzOfNsGUjN0q1XzYD5aQYxGA757JoqmYOuDjbDwK27RYtmO5Fu/WD
b126mhh0edEY8Q==
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:58:30 2025 by rpki-client