Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
File: BpCRPbvu2t3pXc5HBFJihOeufMo.mft (raw, json)
Hash identifier: edHqnKCqLGRdB0qmJeuvrBfrjNRZk0dR2GHIaGbSD1w=
Subject key identifier: 77:8C:C6:AD:39:9C:50:8E:D8:8D:F5:B6:6D:C4:ED:90:C9:38:06:C5
Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
Certificate issuer: /CN=0690913dbbeedadde95dce4704526284e7ae7cca
Certificate serial: 019892FF423EE978F5CDF511F2E0D57A6F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
Manifest number: 15B7
Signing time: Sun 10 Aug 2025 08:00:58 +0000
Manifest this update: Sun 10 Aug 2025 08:00:58 +0000
Manifest next update: Mon 11 Aug 2025 08:00:58 +0000
Files and hashes: 1: BpCRPbvu2t3pXc5HBFJihOeufMo.crl (hash: WsnZGFtFNQX4b1JPNtFIwrPSPCnMaA4tOqmKbQwH77A=)
2: Iy7lkqpbyaSDL2grrU_SdETf7DQ.roa (hash: DorRUxYefmWL1rp1az3xVIzdxI7JSTisHh4gg2RZ6eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:42:3e:e9:78:f5:cd:f5:11:f2:e0:d5:7a:6f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca
Validity
Not Before: Aug 10 08:00:58 2025 GMT
Not After : Aug 11 08:00:58 2025 GMT
Subject: CN=778cc6ad399c508ed88df5b66dc4ed90c93806c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:58:88:ef:78:88:59:1a:0d:7c:04:e9:34:
c3:e7:85:ae:8d:a7:06:09:30:b0:b5:84:2a:f5:4a:
d5:8a:2c:95:a9:7e:19:af:32:8f:6e:f2:65:3e:b6:
85:1a:50:53:44:6a:c5:eb:54:02:e2:18:7d:5a:f9:
aa:4a:46:0b:52:92:db:5c:c2:ea:a0:2d:c5:53:b4:
8f:3a:04:06:f6:85:54:e3:d6:c0:d8:8f:cc:ca:e5:
79:76:e0:43:67:4a:d9:29:37:17:71:f0:ad:4c:97:
b1:ec:b4:09:57:de:67:6a:d8:ef:ab:cb:29:0b:b3:
b4:7b:a2:7c:a5:69:86:cd:1d:3b:17:bf:2f:8c:65:
20:25:a8:e9:2c:17:65:88:cc:ad:8b:ae:86:c2:53:
a4:23:9a:e7:c6:0e:40:ac:af:03:88:15:2c:06:f5:
ec:54:09:ef:fa:70:40:b1:9e:0a:df:c3:9a:b0:f6:
ac:c9:0e:11:c9:d7:2a:66:b6:25:fd:f7:a3:e5:39:
56:e5:93:9b:c1:4f:f7:ff:29:61:ff:86:0a:70:b8:
2e:aa:90:bf:5c:99:28:97:f5:64:40:50:24:5b:ce:
16:42:c1:d7:16:0c:51:1e:d0:af:89:4a:ee:fa:0e:
f8:a0:d6:4b:0e:b8:ec:9a:b2:5b:54:26:73:5f:24:
18:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8C:C6:AD:39:9C:50:8E:D8:8D:F5:B6:6D:C4:ED:90:C9:38:06:C5
X509v3 Authority Key Identifier:
keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4a:87:68:f5:76:2e:31:7d:ce:eb:80:9b:59:8e:d1:66:f6:
ea:8d:d5:23:09:aa:d0:c2:97:7d:2e:9a:9a:a2:87:f4:7a:9f:
94:cc:7e:94:43:c2:dd:a6:55:1f:7f:de:1f:57:b2:8f:23:dc:
db:ab:7d:42:ac:a1:fc:00:44:c8:f4:1f:75:01:c5:e0:61:83:
fa:9d:49:2d:74:1a:c2:13:24:3a:94:a3:11:f4:ea:b2:dc:e6:
41:8f:26:67:78:f6:e3:2c:92:38:ab:01:98:84:b4:a4:92:a6:
08:93:56:bf:5d:22:7a:b7:ee:27:1d:60:63:b9:1b:af:a2:ab:
5c:76:1d:66:4e:a7:f5:6e:c9:c3:eb:1c:86:03:bd:57:ec:19:
7e:ff:94:cb:8e:01:1b:44:cd:24:9b:96:96:e6:99:5e:97:53:
c1:6a:df:02:83:d2:a4:bc:3f:d1:12:14:03:79:16:cf:30:a3:
da:0a:12:26:0d:c8:36:af:82:80:85:9f:be:c4:32:88:29:9c:
3b:9b:cd:4c:94:f8:e0:ef:00:de:6d:c9:c0:b5:16:11:6d:05:
ee:25:b5:28:91:48:27:11:57:6c:9e:52:53:79:92:ea:85:92:
56:75:b5:d3:b5:8c:fe:c5:c9:48:b1:8d:a4:96:fa:c8:c5:71:
98:d4:74:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiS/0I+6Xj1zfUR8uDVem9LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OTA5MTNkYmJlZWRhZGRlOTVkY2U0NzA0NTI2Mjg0ZTdh
ZTdjY2EwHhcNMjUwODEwMDgwMDU4WhcNMjUwODExMDgwMDU4WjAzMTEwLwYDVQQD
Eyg3NzhjYzZhZDM5OWM1MDhlZDg4ZGY1YjY2ZGM0ZWQ5MGM5MzgwNmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsepYiO94iFkaDXwE6TTD54WujacG
CTCwtYQq9UrViiyVqX4ZrzKPbvJlPraFGlBTRGrF61QC4hh9WvmqSkYLUpLbXMLq
oC3FU7SPOgQG9oVU49bA2I/MyuV5duBDZ0rZKTcXcfCtTJex7LQJV95natjvq8sp
C7O0e6J8pWmGzR07F78vjGUgJajpLBdliMyti66GwlOkI5rnxg5ArK8DiBUsBvXs
VAnv+nBAsZ4K38OasPasyQ4RydcqZrYl/fej5TlW5ZObwU/3/ylh/4YKcLguqpC/
XJkol/VkQFAkW84WQsHXFgxRHtCviUru+g74oNZLDrjsmrJbVCZzXyQYEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeMxq05nFCO2I31tm3E7ZDJOAbFMB8GA1UdIwQY
MBaAFAaQkT277trd6V3ORwRSYoTnrnzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnBDUlBidnUydDNwWGM1SEJGSmloT2V1Zk1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mYWI5MTgtOGY0ZC00ZWRlLWJhZDEt
MzFiOTUwMjcwNTM2LzEvQnBDUlBidnUydDNwWGM1SEJGSmloT2V1Zk1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mYWI5MTgtOGY0ZC00ZWRlLWJhZDEtMzFiOTUwMjcwNTM2
LzEvQnBDUlBidnUydDNwWGM1SEJGSmloT2V1Zk1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0qHaPV2
LjF9zuuAm1mO0Wb26o3VIwmq0MKXfS6amqKH9HqflMx+lEPC3aZVH3/eH1eyjyPc
26t9Qqyh/ABEyPQfdQHF4GGD+p1JLXQawhMkOpSjEfTqstzmQY8mZ3j24yySOKsB
mIS0pJKmCJNWv10ierfuJx1gY7kbr6KrXHYdZk6n9W7Jw+schgO9V+wZfv+Uy44B
G0TNJJuWluaZXpdTwWrfAoPSpLw/0RIUA3kWzzCj2goSJg3INq+CgIWfvsQyiCmc
O5vNTJT44O8A3m3JwLUWEW0F7iW1KJFIJxFXbJ5SU3mS6oWSVnW107WM/sXJSLGN
pJb6yMVxmNR0ZA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:59:14 2025 by rpki-client