Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier: 5uHwdS3BCW9mnu09zhjn50gdsHZLbfPJC8CJVJT8mOU=
Subject key identifier: 0C:59:26:87:E7:40:DF:88:B9:01:DF:B5:82:67:B3:C7:C7:2F:BE:5A
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial: 019880F8C78B926845FC7599D1B26E89AC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number: 1320
Signing time: Wed 06 Aug 2025 20:00:44 +0000
Manifest this update: Wed 06 Aug 2025 20:00:44 +0000
Manifest next update: Thu 07 Aug 2025 20:00:44 +0000
Files and hashes: 1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: 5mtZrJY977eCTsze3lfT4vzEg26Yhn1VnuSrmQVo48Q=)
2: Sj4J_mFP2lQkR8Pqu4-vUWhntlo.roa (hash: OyHUO8zUzkjWGYsEn0Hm1G4SAQZ+8DrBTjWOD/M90zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f8:c7:8b:92:68:45:fc:75:99:d1:b2:6e:89:ac:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Validity
Not Before: Aug 6 20:00:44 2025 GMT
Not After : Aug 7 20:00:44 2025 GMT
Subject: CN=0c592687e740df88b901dfb58267b3c7c72fbe5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:de:25:c6:53:07:01:9e:41:cb:5b:b7:32:
a0:e5:93:68:1c:27:1d:ae:22:bf:de:c1:c3:9c:ad:
b5:7b:b9:62:4d:c8:bf:2c:ac:b2:81:d7:75:03:81:
1f:37:3c:5b:b6:a2:f0:4f:d5:f9:04:04:7a:3c:20:
ea:8b:dd:92:e6:a7:ae:96:b3:e5:11:d7:ae:fa:b8:
28:01:d3:d2:0f:c3:8e:ea:e4:4d:c2:83:4c:bc:b1:
02:3e:e7:a6:05:89:09:d4:9d:8f:44:1c:a3:d6:88:
57:c2:ed:68:02:38:ed:92:a3:8e:a3:84:0c:ac:07:
3b:e6:7c:b6:de:62:04:a3:69:ec:34:ab:f0:4e:2b:
9f:a9:88:77:61:d3:40:58:07:80:0c:da:66:7a:05:
80:90:74:db:c6:0c:f6:73:eb:32:53:e0:53:07:14:
bc:54:6e:c0:98:96:97:15:9f:48:65:a3:1e:cf:8e:
5c:71:d6:a8:45:fe:41:ec:66:73:b3:1c:62:46:53:
77:5e:a9:d3:14:bf:39:7d:e4:05:6f:11:92:2c:e6:
9a:2f:2f:93:71:70:fb:63:a7:a8:d1:3d:6b:6a:07:
cb:c3:bd:93:39:4a:4a:90:10:6f:c8:07:1a:74:2a:
9b:e8:7d:16:f6:02:ba:f1:fd:be:cc:82:22:1f:8c:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:59:26:87:E7:40:DF:88:B9:01:DF:B5:82:67:B3:C7:C7:2F:BE:5A
X509v3 Authority Key Identifier:
keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b2:e8:bd:69:c9:27:c6:58:9f:c8:ec:f9:43:34:d8:06:32:
1a:63:09:7a:d0:d3:52:3f:3e:83:b6:e9:b8:50:9c:a8:92:45:
6b:88:59:5c:07:60:8f:e6:5a:3c:5b:b1:20:29:0f:c6:15:85:
9a:5c:d2:80:7a:b3:ba:c8:43:e4:d1:11:fd:d3:09:8a:c1:74:
30:3a:20:8f:d1:34:78:ad:96:6b:72:88:f4:04:26:0d:25:5a:
6d:a7:1b:9c:0d:44:7b:0e:22:a5:3b:0d:23:29:f2:d2:6c:65:
39:30:04:0f:3f:83:1c:17:9f:2e:81:1e:28:bc:c3:56:fa:30:
4a:a2:7a:5e:8c:e9:75:f1:38:d1:e5:f6:b0:8a:ca:7c:94:9e:
09:43:28:e3:d8:40:bb:68:13:5e:ff:ba:ed:87:fc:a0:01:81:
8d:70:7f:8e:d2:0a:e8:d2:76:f3:ff:35:89:f4:4c:8e:08:da:
91:1a:bc:5b:38:32:f7:75:97:1b:54:33:18:03:46:05:aa:db:
26:88:c1:0e:4f:7e:0e:17:54:4c:5e:1e:f6:5c:b2:2d:53:53:
8f:bf:e8:36:f5:e1:e7:9c:14:bb:45:c9:4a:55:80:5b:b0:2a:
e0:ce:37:b5:64:29:cd:52:bb:ba:ef:88:02:a4:aa:8b:0f:ae:
86:ae:9d:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiA+MeLkmhF/HWZ0bJuiaxvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzEyZTg4OTQ5ZDVhNDM1YTMzZTcwNDBjOWZiN2U3YTgy
NDQzOTUwHhcNMjUwODA2MjAwMDQ0WhcNMjUwODA3MjAwMDQ0WjAzMTEwLwYDVQQD
EygwYzU5MjY4N2U3NDBkZjg4YjkwMWRmYjU4MjY3YjNjN2M3MmZiZTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqPeJcZTBwGeQctbtzKg5ZNoHCcd
riK/3sHDnK21e7liTci/LKyygdd1A4EfNzxbtqLwT9X5BAR6PCDqi92S5qeulrPl
Edeu+rgoAdPSD8OO6uRNwoNMvLECPuemBYkJ1J2PRByj1ohXwu1oAjjtkqOOo4QM
rAc75ny23mIEo2nsNKvwTiufqYh3YdNAWAeADNpmegWAkHTbxgz2c+syU+BTBxS8
VG7AmJaXFZ9IZaMez45ccdaoRf5B7GZzsxxiRlN3XqnTFL85feQFbxGSLOaaLy+T
cXD7Y6eo0T1ragfLw72TOUpKkBBvyAcadCqb6H0W9gK68f2+zIIiH4yNWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxZJofnQN+IuQHftYJns8fHL75aMB8GA1UdIwQY
MBaAFAVxLoiUnVpDWjPnBAyft+eoJEOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yYzk1MGUtN2QzYS00Y2FkLTg0MWYt
MmMwMTRiNzQwYzNiLzEvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yYzk1MGUtN2QzYS00Y2FkLTg0MWYtMmMwMTRiNzQwYzNi
LzEvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7LovWnJ
J8ZYn8js+UM02AYyGmMJetDTUj8+g7bpuFCcqJJFa4hZXAdgj+ZaPFuxICkPxhWF
mlzSgHqzushD5NER/dMJisF0MDogj9E0eK2Wa3KI9AQmDSVabacbnA1Eew4ipTsN
Iyny0mxlOTAEDz+DHBefLoEeKLzDVvowSqJ6XozpdfE40eX2sIrKfJSeCUMo49hA
u2gTXv+67Yf8oAGBjXB/jtIK6NJ28/81ifRMjgjakRq8Wzgy93WXG1QzGANGBarb
JojBDk9+DhdUTF4e9lyyLVNTj7/oNvXh55wUu0XJSlWAW7Aq4M43tWQpzVK7uu+I
AqSqiw+uhq6dNQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:08 2025 by rpki-client