Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
File: bXt5YErx85CPSBeVZiY1Pub_wfQ.mft (raw, json)
Hash identifier: dJJgV/SNjWdbBkefT/IqbhYZBprTHvdabBW1JD0rZC4=
Subject key identifier: 8A:E0:F0:45:51:48:4B:89:89:01:9E:17:46:CA:3A:47:A2:3C:12:EA
Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
Certificate issuer: /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Certificate serial: 019873742FAB8275C82C6B73A1D5DFDF18D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 05:00:50 +0000
Manifest this update: Mon 04 Aug 2025 05:00:50 +0000
Manifest next update: Tue 05 Aug 2025 05:00:50 +0000
Files and hashes: 1: A15OC13YGMvTmICTCy1AZnVK3To.roa (hash: PwsIGkVItakh2uZVvAdvG2pZjqN/gexEPiOMZusjdcA=)
2: bXt5YErx85CPSBeVZiY1Pub_wfQ.crl (hash: ihBbGkd/GqShf5D5fMigkow6q8fjEYT3qG4kZuSV4r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:2f:ab:82:75:c8:2c:6b:73:a1:d5:df:df:18:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Validity
Not Before: Aug 4 05:00:50 2025 GMT
Not After : Aug 5 05:00:50 2025 GMT
Subject: CN=8ae0f04551484b8989019e1746ca3a47a23c12ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:d7:85:4c:c5:08:51:72:3b:db:45:38:27:
fe:8f:85:4a:a7:1d:85:c2:bd:8e:30:b3:3a:61:37:
13:de:c0:5e:a6:de:08:86:3b:6d:9a:ed:8b:02:f4:
21:c5:07:d5:52:30:30:62:51:31:ea:41:f4:ad:9d:
22:c1:8a:55:68:94:46:1f:68:09:aa:e4:91:d9:3d:
8f:c6:c9:e1:9a:cf:35:f4:73:d3:16:92:2e:51:4c:
7e:d1:24:31:02:98:5c:e7:b6:de:c4:0e:a1:c6:d3:
f9:60:eb:d9:7f:ef:54:c2:dd:08:34:71:ce:83:66:
69:8e:d3:47:5c:ac:9a:90:63:32:af:75:52:08:1c:
19:b1:c1:96:68:07:dd:d7:68:df:02:fa:6f:9a:35:
c6:33:cf:45:9e:e2:41:73:38:0d:be:f2:fd:ce:97:
f4:86:69:7d:87:36:e2:87:f0:6f:df:31:c2:66:21:
5a:12:d6:28:a6:fe:2f:55:c9:1c:14:83:2d:aa:2e:
53:2c:c9:b3:6b:f1:9f:f8:e7:c7:47:b6:6e:13:36:
19:37:79:8b:c8:e7:2b:c6:85:70:85:18:6f:6f:f9:
f6:cc:82:6e:e6:d8:2f:85:40:e7:30:ab:45:e2:31:
9d:8a:e5:86:62:4d:7e:d4:70:2a:1b:a1:23:88:31:
d1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E0:F0:45:51:48:4B:89:89:01:9E:17:46:CA:3A:47:A2:3C:12:EA
X509v3 Authority Key Identifier:
keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:78:9e:f1:6d:55:e4:41:e9:60:a8:03:89:12:ab:ac:02:fa:
ae:cd:5d:5c:70:73:3e:6d:a1:64:6d:df:34:17:92:eb:63:04:
34:2d:36:5b:9d:80:a9:79:4f:09:56:d7:28:9d:89:2c:bb:15:
4b:92:06:f3:e9:4b:4b:c0:66:93:50:d2:f8:07:2b:e8:6c:87:
09:32:4a:a2:6a:56:44:b1:91:1e:45:c0:23:ef:48:2c:3e:9e:
4e:ec:d2:01:df:0c:9e:10:57:cc:90:11:70:df:80:c8:f0:9b:
bc:d5:15:43:9b:50:54:c8:3f:29:44:f8:41:f4:5c:e8:68:82:
00:bc:63:20:96:c8:98:ca:37:5a:6f:c4:97:b5:5b:0d:4e:ca:
11:9c:09:f9:6e:27:13:e6:0a:61:f1:8e:17:6e:e8:e4:32:1c:
74:35:83:2f:e0:4d:54:55:41:78:af:d3:7c:08:a3:44:85:c0:
e1:a0:4b:41:f4:de:8e:69:f6:c2:dd:20:4c:1b:81:c0:3c:69:
1b:74:9d:74:5a:05:64:2d:dd:d6:f1:e7:11:1e:de:4e:f6:56:
d0:4a:bd:8a:28:30:4b:cd:e3:75:6e:54:ad:b0:ff:12:6d:5d:
26:42:d1:88:ad:40:3a:36:2b:54:d8:12:c2:e6:58:6b:7a:84:
d4:b6:64:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdC+rgnXILGtzodXf3xjXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkN2I3OTYwNGFmMWYzOTA4ZjQ4MTc5NTY2MjYzNTNlZTZm
ZmMxZjQwHhcNMjUwODA0MDUwMDUwWhcNMjUwODA1MDUwMDUwWjAzMTEwLwYDVQQD
Eyg4YWUwZjA0NTUxNDg0Yjg5ODkwMTllMTc0NmNhM2E0N2EyM2MxMmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApavXhUzFCFFyO9tFOCf+j4VKpx2F
wr2OMLM6YTcT3sBept4Ihjttmu2LAvQhxQfVUjAwYlEx6kH0rZ0iwYpVaJRGH2gJ
quSR2T2Pxsnhms819HPTFpIuUUx+0SQxAphc57bexA6hxtP5YOvZf+9Uwt0INHHO
g2ZpjtNHXKyakGMyr3VSCBwZscGWaAfd12jfAvpvmjXGM89FnuJBczgNvvL9zpf0
hml9hzbih/Bv3zHCZiFaEtYopv4vVckcFIMtqi5TLMmza/Gf+OfHR7ZuEzYZN3mL
yOcrxoVwhRhvb/n2zIJu5tgvhUDnMKtF4jGdiuWGYk1+1HAqG6EjiDHRRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrg8EVRSEuJiQGeF0bKOkeiPBLqMB8GA1UdIwQY
MBaAFG17eWBK8fOQj0gXlWYmNT7m/8H0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85M2E3MzQtM2NiNy00MTJjLWI0NWYt
Mjc1YjZlOWZiYzYzLzEvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85M2E3MzQtM2NiNy00MTJjLWI0NWYtMjc1YjZlOWZiYzYz
LzEvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXie8W1V
5EHpYKgDiRKrrAL6rs1dXHBzPm2hZG3fNBeS62MENC02W52AqXlPCVbXKJ2JLLsV
S5IG8+lLS8Bmk1DS+Acr6GyHCTJKompWRLGRHkXAI+9ILD6eTuzSAd8MnhBXzJAR
cN+AyPCbvNUVQ5tQVMg/KUT4QfRc6GiCALxjIJbImMo3Wm/El7VbDU7KEZwJ+W4n
E+YKYfGOF27o5DIcdDWDL+BNVFVBeK/TfAijRIXA4aBLQfTejmn2wt0gTBuBwDxp
G3SddFoFZC3d1vHnER7eTvZW0Eq9iigwS83jdW5UrbD/Em1dJkLRiK1AOjYrVNgS
wuZYa3qE1LZkUQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:59 2025 by rpki-client