Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier: AGLvVT8x+WwRM8iuEs1Lb7RT+4/iSV3kn03gXqNfMh0=
Subject key identifier: B6:C9:91:2B:D0:5A:DA:56:30:40:3E:C1:E1:4E:4A:78:A5:01:AD:CB
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial: 01978661AA22780434BD0D5527BD9D22201F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number: 159C
Signing time: Thu 19 Jun 2025 04:10:36 +0000
Manifest this update: Thu 19 Jun 2025 04:10:36 +0000
Manifest next update: Fri 20 Jun 2025 04:10:36 +0000
Files and hashes: 1: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: vZNvRZVY/oE9m6bgqL4wWj9tHqPYCACsfiprrgFQFzk=)
2: gKY4N4flGE3w8VGawvt5MmzbsEY.roa (hash: n6hPnIZKkrQ9PZ3CvwgI/ENozP0XURH/9HKr+aSdN00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:61:aa:22:78:04:34:bd:0d:55:27:bd:9d:22:20:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Validity
Not Before: Jun 19 04:10:36 2025 GMT
Not After : Jun 20 04:10:36 2025 GMT
Subject: CN=b6c9912bd05ada5630403ec1e14e4a78a501adcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fa:15:1e:44:8c:a3:37:a2:98:50:48:7e:ba:
15:25:56:09:5e:0e:e2:be:ac:ac:7e:13:37:fc:40:
5c:68:ff:a3:7b:99:ee:1b:d7:a6:dc:a2:6d:d6:d1:
a9:0c:66:5f:c0:71:47:77:da:c1:16:f4:d9:97:41:
b0:72:e9:1b:53:a9:20:43:dd:df:35:2f:f5:84:4d:
5c:79:68:92:b6:b9:94:4f:3c:7e:95:95:07:be:1c:
ba:17:99:49:d9:15:f2:e3:37:c9:42:64:71:63:cc:
d6:96:a0:73:92:e9:63:4f:ef:21:b0:8a:76:c4:4c:
d4:b8:85:e0:f2:90:56:04:ad:9f:30:04:01:cd:ed:
37:02:10:b9:3a:e7:09:98:fd:e4:e9:e9:1e:e7:48:
56:1b:c7:de:57:f1:86:a6:95:fb:5e:eb:94:b8:ae:
b6:46:6a:9d:3d:2d:0b:30:03:5c:a0:71:1c:5b:cc:
45:d2:3a:a4:d1:39:27:a5:a1:d7:e8:6a:52:6c:03:
11:f3:a0:a9:f4:f0:d8:54:a8:76:56:32:93:39:a6:
1a:47:b2:d9:52:d0:c3:9b:77:1d:60:0f:b1:04:27:
92:3e:27:4d:15:b3:46:d5:a1:9c:62:63:8a:0f:58:
74:02:6c:33:8b:ae:c3:37:0a:ec:b4:5c:16:a3:b8:
52:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C9:91:2B:D0:5A:DA:56:30:40:3E:C1:E1:4E:4A:78:A5:01:AD:CB
X509v3 Authority Key Identifier:
keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:03:01:34:fd:b0:fb:7f:1c:46:ee:f4:9d:37:5e:7d:47:81:
0e:de:29:78:ac:d1:0a:9e:e6:4e:66:1e:5c:fe:22:96:1f:fb:
ba:4c:c6:3b:ed:df:37:76:1e:66:bc:67:56:29:e8:3b:ce:c5:
b7:3f:a3:f9:50:50:07:d1:d2:23:e8:53:c7:d3:44:01:b8:dd:
d2:2e:10:8f:26:f5:ed:40:33:ac:71:f2:7f:41:0e:93:bc:80:
9b:9f:a1:5f:f4:1b:85:e1:ae:fa:ab:e7:c4:dc:c8:25:24:89:
c2:9c:64:4d:4d:71:a1:07:13:df:3e:73:ea:31:f4:19:7f:60:
92:55:39:f9:cc:59:73:e4:78:1e:2b:ec:8c:30:57:01:2c:54:
d3:3a:f6:14:5b:ac:bc:c4:37:f0:f7:f1:62:a5:d4:0c:57:43:
16:86:0f:35:65:61:80:06:ce:d7:fa:07:10:31:27:b5:83:02:
c9:cb:73:16:c2:dd:46:00:ae:65:58:91:b7:19:a5:0f:e4:6e:
fa:81:5b:94:09:dc:13:1b:41:1b:98:5f:24:0c:50:d1:2b:ee:
be:f9:b3:62:fb:d2:64:b7:f6:56:10:50:e4:0c:1c:52:4e:b3:
66:44:b0:e5:45:43:8b:2f:db:76:95:0a:e3:5f:db:fd:72:a6:
d4:c0:1b:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeGYaoieAQ0vQ1VJ72dIiAfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZmYzZDg5OWUyNmZjODRmYjQzNzlmYjMyNWYxNzRiNTA3
NWNlMGQwHhcNMjUwNjE5MDQxMDM2WhcNMjUwNjIwMDQxMDM2WjAzMTEwLwYDVQQD
EyhiNmM5OTEyYmQwNWFkYTU2MzA0MDNlYzFlMTRlNGE3OGE1MDFhZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PoVHkSMozeimFBIfroVJVYJXg7i
vqysfhM3/EBcaP+je5nuG9em3KJt1tGpDGZfwHFHd9rBFvTZl0GwcukbU6kgQ93f
NS/1hE1ceWiStrmUTzx+lZUHvhy6F5lJ2RXy4zfJQmRxY8zWlqBzkuljT+8hsIp2
xEzUuIXg8pBWBK2fMAQBze03AhC5OucJmP3k6eke50hWG8feV/GGppX7XuuUuK62
RmqdPS0LMANcoHEcW8xF0jqk0TknpaHX6GpSbAMR86Cp9PDYVKh2VjKTOaYaR7LZ
UtDDm3cdYA+xBCeSPidNFbNG1aGcYmOKD1h0Amwzi67DNwrstFwWo7hSkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbJkSvQWtpWMEA+weFOSnilAa3LMB8GA1UdIwQY
MBaAFGz/PYmeJvyE+0N5+zJfF0tQdc4NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iMGM4NzUtMjRlMS00NDRkLWIwMWQt
NTQwOGY4ZDlkZmIxLzEvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iMGM4NzUtMjRlMS00NDRkLWIwMWQtNTQwOGY4ZDlkZmIx
LzEvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAMBNP2w
+38cRu70nTdefUeBDt4peKzRCp7mTmYeXP4ilh/7ukzGO+3fN3YeZrxnVinoO87F
tz+j+VBQB9HSI+hTx9NEAbjd0i4Qjyb17UAzrHHyf0EOk7yAm5+hX/QbheGu+qvn
xNzIJSSJwpxkTU1xoQcT3z5z6jH0GX9gklU5+cxZc+R4HivsjDBXASxU0zr2FFus
vMQ38PfxYqXUDFdDFoYPNWVhgAbO1/oHEDEntYMCyctzFsLdRgCuZViRtxmlD+Ru
+oFblAncExtBG5hfJAxQ0SvuvvmzYvvSZLf2VhBQ5AwcUk6zZkSw5UVDiy/bdpUK
41/b/XKm1MAbow==
-----END CERTIFICATE-----
Generated at Thu Jun 19 10:39:15 2025 by rpki-client