Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
File: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json)
Hash identifier: yNfAUio/dSaxIMoGsSp44mM/lJTDz4xr1j1SctKeiPI=
Subject key identifier: 03:54:E4:C5:5D:77:EA:73:AC:AA:A0:47:42:FE:FC:C9:E2:5E:F6:48
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 019872CFE2017F7C85C5D2A34C50F68C032F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
Manifest number: 0995
Signing time: Mon 04 Aug 2025 02:01:23 +0000
Manifest this update: Mon 04 Aug 2025 02:01:23 +0000
Manifest next update: Tue 05 Aug 2025 02:01:23 +0000
Files and hashes: 1: 1uAuKLt072-ZQlDEaEvJ4cVZt0U.roa (hash: VxasM346e46c28SKyluMBsYSF6rJX7VQBKo0/PUfiM8=)
2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: 8xd+zIFOhdKduS81tzrekBC3SAyiwf5hO2DZkhkqadQ=)
3: FOTPh9BPoJbjEvO_XqYw0Ecj8wo.roa (hash: Tk8RIwgbHfyEByRiqFBz9C7JpjarILl3F0YIF0cWF/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:e2:01:7f:7c:85:c5:d2:a3:4c:50:f6:8c:03:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: Aug 4 02:01:23 2025 GMT
Not After : Aug 5 02:01:23 2025 GMT
Subject: CN=0354e4c55d77ea73acaaa04742fefcc9e25ef648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:24:81:81:14:7b:eb:c1:2c:b6:5d:5c:62:
fb:44:70:14:28:f9:50:d6:65:6b:07:64:53:f0:12:
bc:f8:f2:71:f8:fc:67:c2:2a:d5:69:46:7c:66:7b:
3c:af:e0:e2:f8:da:00:ef:05:c3:d1:1b:17:38:30:
a0:36:07:42:e8:47:36:c8:ac:36:59:1a:75:b6:85:
2f:c0:29:d7:62:c3:ef:7f:4f:11:2b:36:f0:3c:41:
1b:cd:26:44:f2:c3:5d:a6:60:81:84:2b:6d:d4:d3:
05:6f:46:38:e5:d9:af:3f:ea:bd:5c:34:5c:4f:83:
bc:0b:b2:a2:b3:f3:11:a9:bc:c6:36:c8:a7:16:2c:
b1:a4:7f:fc:57:da:31:ca:fd:31:a8:d2:95:33:1d:
0f:71:1c:4f:0e:e5:ca:f8:b4:77:14:dc:ec:a2:40:
02:4c:0a:a5:32:63:1f:29:59:f4:d3:ca:29:2e:f3:
e9:0d:a7:f6:b6:96:de:42:34:01:71:0f:e5:1a:a2:
a9:d7:85:81:33:68:af:1a:fe:ba:53:39:bc:37:b8:
cb:1f:de:b6:03:40:95:9c:6d:78:59:50:74:cc:49:
84:ff:89:27:cb:78:fe:70:70:60:45:d5:cd:90:c4:
c6:85:2b:d8:08:33:79:ff:9a:1f:c5:46:5a:56:30:
6e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:54:E4:C5:5D:77:EA:73:AC:AA:A0:47:42:FE:FC:C9:E2:5E:F6:48
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:08:cf:34:fc:7a:59:9f:b9:ba:9f:7a:28:1b:ef:9b:20:f8:
18:bd:de:61:79:25:65:8c:6e:7f:1e:e6:24:9d:84:34:08:25:
fa:ba:62:0f:5d:22:39:06:7c:13:74:5f:bd:1a:00:97:45:75:
7e:30:16:4b:db:e0:de:81:f9:31:80:14:db:99:21:4b:41:fc:
93:dd:90:01:28:b2:9b:15:e0:8e:26:bd:de:45:ec:be:ce:f4:
b7:91:3f:5d:5a:2b:8a:b5:9e:f3:84:b3:fc:c9:4b:c0:d3:54:
78:14:7f:16:e2:8b:84:12:05:4e:17:35:99:39:bc:80:0e:3c:
8b:55:37:bd:d4:bb:a4:92:6d:88:0c:25:41:5d:da:9c:e3:58:
ea:8f:49:e4:3b:1f:6c:55:31:df:4c:8d:57:e1:54:8a:6f:86:
a2:7c:93:27:64:5b:dc:ca:5b:1f:2a:6c:95:d6:fe:27:c0:36:
f5:db:4f:4c:e9:2c:b8:ad:bb:05:eb:e8:56:e4:c7:14:f5:65:
60:90:e6:38:84:51:ad:0b:2d:3d:1d:f6:8d:73:33:85:49:35:
ad:ff:ee:09:9d:4b:0c:4f:46:6f:bb:e5:b6:a5:0e:a3:e3:5b:
15:d0:c3:1b:01:7f:dd:fc:a3:c7:97:32:cb:6a:aa:b1:b6:1d:
2c:b6:2a:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz+IBf3yFxdKjTFD2jAMvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MWUyNTU0ZTUyMDM3NzgxZDEwN2M4ZjgzMTljOTNlNTk5
ODZmMDUwHhcNMjUwODA0MDIwMTIzWhcNMjUwODA1MDIwMTIzWjAzMTEwLwYDVQQD
EygwMzU0ZTRjNTVkNzdlYTczYWNhYWEwNDc0MmZlZmNjOWUyNWVmNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZYkgYEUe+vBLLZdXGL7RHAUKPlQ
1mVrB2RT8BK8+PJx+PxnwirVaUZ8Zns8r+Di+NoA7wXD0RsXODCgNgdC6Ec2yKw2
WRp1toUvwCnXYsPvf08RKzbwPEEbzSZE8sNdpmCBhCtt1NMFb0Y45dmvP+q9XDRc
T4O8C7Kis/MRqbzGNsinFiyxpH/8V9oxyv0xqNKVMx0PcRxPDuXK+LR3FNzsokAC
TAqlMmMfKVn008opLvPpDaf2tpbeQjQBcQ/lGqKp14WBM2ivGv66Uzm8N7jLH962
A0CVnG14WVB0zEmE/4kny3j+cHBgRdXNkMTGhSvYCDN5/5ofxUZaVjBuNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANU5MVdd+pzrKqgR0L+/MniXvZIMB8GA1UdIwQY
MBaAFAYeJVTlIDd4HRB8j4MZyT5ZmG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmg0bFZPVWdOM2dkRUh5UGd4bkpQbG1ZYndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mYTZmNDMtN2RkMS00MDViLThkY2Ut
MjliMDM4MDg0YWE2LzEvQmg0bFZPVWdOM2dkRUh5UGd4bkpQbG1ZYndVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mYTZmNDMtN2RkMS00MDViLThkY2UtMjliMDM4MDg0YWE2
LzEvQmg0bFZPVWdOM2dkRUh5UGd4bkpQbG1ZYndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgjPNPx6
WZ+5up96KBvvmyD4GL3eYXklZYxufx7mJJ2ENAgl+rpiD10iOQZ8E3RfvRoAl0V1
fjAWS9vg3oH5MYAU25khS0H8k92QASiymxXgjia93kXsvs70t5E/XVorirWe84Sz
/MlLwNNUeBR/FuKLhBIFThc1mTm8gA48i1U3vdS7pJJtiAwlQV3anONY6o9J5Dsf
bFUx30yNV+FUim+GonyTJ2Rb3MpbHypsldb+J8A29dtPTOksuK27BevoVuTHFPVl
YJDmOIRRrQstPR32jXMzhUk1rf/uCZ1LDE9Gb7vltqUOo+NbFdDDGwF/3fyjx5cy
y2qqsbYdLLYquA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:28 2025 by rpki-client