Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
File: BFYL6jkur2kgircF70Bc94aEF2s.mft (raw, json)
Hash identifier: 8/podGfGZrcYrLGhgHQik1Elerq1qJMIg3Q7/6FBNyU=
Subject key identifier: B0:27:CA:A0:E0:16:78:A9:88:93:92:BD:D9:11:7B:A1:4E:4F:E7:32
Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
Certificate issuer: /CN=04560bea392eaf69208ab705ef405cf78684176b
Certificate serial: 01987450476F75AA276655E68AC8BB6BB136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
Manifest number: 161C
Signing time: Mon 04 Aug 2025 09:01:14 +0000
Manifest this update: Mon 04 Aug 2025 09:01:14 +0000
Manifest next update: Tue 05 Aug 2025 09:01:14 +0000
Files and hashes: 1: 8kdm1ZAPNcZedXP01TafIjBXKRs.roa (hash: itb59cI824fq1EKKCsVfc6XjwoFA0+TxsZlQLnTiMW4=)
2: BFYL6jkur2kgircF70Bc94aEF2s.crl (hash: yUa4Hj6T4eFA3Qk0GKP0A8B9+KyfVo58Q2nN+Ia1a2A=)
3: NyItizXaNDYcIoRvpNc_5Mkg2Qg.roa (hash: 6BsyUuSqs5SSPqJlfjsNi68lsr8Mj9jzzqX6MyZpWe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:47:6f:75:aa:27:66:55:e6:8a:c8:bb:6b:b1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b
Validity
Not Before: Aug 4 09:01:14 2025 GMT
Not After : Aug 5 09:01:14 2025 GMT
Subject: CN=b027caa0e01678a9889392bdd9117ba14e4fe732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:d9:3a:e4:2f:85:6e:28:45:49:87:b0:39:
24:60:65:d6:86:1f:98:11:74:07:45:93:e0:24:40:
8e:55:fe:78:a9:83:0f:a4:99:f4:62:97:6a:80:2b:
83:0a:d4:ff:23:14:62:39:03:24:e0:a6:fe:46:af:
6c:d7:1c:ff:e8:75:22:46:bc:02:e9:5a:9c:2f:06:
4b:60:42:ea:61:8e:f9:0c:a2:2d:4a:d6:dd:0c:34:
58:95:44:fa:8d:1b:53:dd:38:42:40:04:23:17:01:
2b:2c:6f:26:06:6e:6d:97:9a:49:f8:87:c2:e0:9c:
39:52:11:b4:21:64:62:ed:ac:87:b1:f7:9e:28:cc:
72:30:cc:87:79:aa:e1:e8:8f:7d:97:b8:d0:3b:86:
08:0c:bf:82:bf:f5:5f:e5:f8:60:de:68:d8:b2:c5:
60:ac:e4:6e:94:97:e5:41:2c:05:ae:0f:ed:ec:f0:
15:04:0e:0f:12:aa:d2:5b:64:15:2e:59:34:1f:c2:
50:5d:ab:a7:86:06:4d:99:cf:73:e5:0d:28:ec:24:
06:a6:23:b6:52:f1:65:36:f7:e5:66:f1:47:44:fa:
f9:b4:32:43:d4:50:bc:0a:3d:4d:69:26:80:a7:82:
a7:fa:29:1a:51:08:0e:68:ba:17:e5:48:75:73:bf:
b6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:27:CA:A0:E0:16:78:A9:88:93:92:BD:D9:11:7B:A1:4E:4F:E7:32
X509v3 Authority Key Identifier:
keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:58:29:04:57:91:0a:20:41:db:1b:f9:75:31:f3:df:68:d6:
c9:57:81:1d:6b:9f:d1:4b:87:d7:ef:bc:a3:d2:76:b3:00:a1:
df:85:08:f6:bf:f2:6a:e2:ad:1b:4b:fb:28:62:bd:2d:e1:84:
10:07:69:23:fe:da:5f:cc:fc:96:d8:ae:b9:28:0d:dc:1c:fe:
3c:ce:4e:8d:b9:8f:89:c1:3f:09:11:af:49:5c:71:ab:ab:6a:
9a:04:16:89:c0:36:54:66:56:a7:92:90:20:d6:c3:16:66:5a:
bf:8b:93:90:5b:2c:dd:82:43:93:ad:b4:8b:69:b5:0c:67:87:
b5:28:ec:37:c0:48:08:dc:e5:f7:2e:c7:fe:7c:00:ab:f8:b7:
43:e6:80:b6:d3:ac:02:22:12:2d:01:82:d4:8e:41:31:2e:e0:
cd:5d:d6:89:47:d9:dc:8b:c7:24:44:6f:9a:13:6e:00:d7:b2:
35:64:bd:7f:8b:59:da:3b:8c:b0:d6:d6:6f:2f:24:17:f9:bc:
e3:cb:ab:e1:aa:d3:87:1b:11:69:0f:d9:50:81:c8:bf:7e:49:
c3:be:9c:c1:05:cd:d3:04:81:e7:72:13:af:a1:3d:75:8b:b3:
b2:1b:4d:bb:c9:11:de:34:35:97:3c:27:b4:3a:a4:5e:7a:c7:
80:c7:69:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UEdvdaonZlXmisi7a7E2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NTYwYmVhMzkyZWFmNjkyMDhhYjcwNWVmNDA1Y2Y3ODY4
NDE3NmIwHhcNMjUwODA0MDkwMTE0WhcNMjUwODA1MDkwMTE0WjAzMTEwLwYDVQQD
EyhiMDI3Y2FhMGUwMTY3OGE5ODg5MzkyYmRkOTExN2JhMTRlNGZlNzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmLZOuQvhW4oRUmHsDkkYGXWhh+Y
EXQHRZPgJECOVf54qYMPpJn0YpdqgCuDCtT/IxRiOQMk4Kb+Rq9s1xz/6HUiRrwC
6VqcLwZLYELqYY75DKItStbdDDRYlUT6jRtT3ThCQAQjFwErLG8mBm5tl5pJ+IfC
4Jw5UhG0IWRi7ayHsfeeKMxyMMyHearh6I99l7jQO4YIDL+Cv/Vf5fhg3mjYssVg
rORulJflQSwFrg/t7PAVBA4PEqrSW2QVLlk0H8JQXaunhgZNmc9z5Q0o7CQGpiO2
UvFlNvflZvFHRPr5tDJD1FC8Cj1NaSaAp4Kn+ikaUQgOaLoX5Uh1c7+2NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAnyqDgFnipiJOSvdkRe6FOT+cyMB8GA1UdIwQY
MBaAFARWC+o5Lq9pIIq3Be9AXPeGhBdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9jZTRhNGUtYjFhMy00NWY0LWEyN2Mt
ZTFhY2EwMTA2MmZmLzEvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9jZTRhNGUtYjFhMy00NWY0LWEyN2MtZTFhY2EwMTA2MmZm
LzEvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFgpBFeR
CiBB2xv5dTHz32jWyVeBHWuf0UuH1++8o9J2swCh34UI9r/yauKtG0v7KGK9LeGE
EAdpI/7aX8z8ltiuuSgN3Bz+PM5OjbmPicE/CRGvSVxxq6tqmgQWicA2VGZWp5KQ
INbDFmZav4uTkFss3YJDk620i2m1DGeHtSjsN8BICNzl9y7H/nwAq/i3Q+aAttOs
AiISLQGC1I5BMS7gzV3WiUfZ3IvHJERvmhNuANeyNWS9f4tZ2juMsNbWby8kF/m8
48ur4arThxsRaQ/ZUIHIv35Jw76cwQXN0wSB53ITr6E9dYuzshtNu8kR3jQ1lzwn
tDqkXnrHgMdphA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:15 2025 by rpki-client