Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
File: BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json)
Hash identifier: r5FFRYzG44ZYJAFeW7rErwBmHR29UMQRLnYakvVJS9c=
Subject key identifier: D6:02:A3:4F:66:ED:98:5B:3D:86:85:CD:FA:CC:BC:06:F9:7D:65:EA
Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
Certificate issuer: /CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Certificate serial: 019873E2F4AD70570C46208AD9D22BDF5B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
Manifest number: 104B
Signing time: Mon 04 Aug 2025 07:01:50 +0000
Manifest this update: Mon 04 Aug 2025 07:01:50 +0000
Manifest next update: Tue 05 Aug 2025 07:01:50 +0000
Files and hashes: 1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: qZukwP3CsJwy1HTipr+3Wnnu2ZXH7FpUpPtgvMp7oQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:f4:ad:70:57:0c:46:20:8a:d9:d2:2b:df:5b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Validity
Not Before: Aug 4 07:01:50 2025 GMT
Not After : Aug 5 07:01:50 2025 GMT
Subject: CN=d602a34f66ed985b3d8685cdfaccbc06f97d65ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:bf:b4:cd:77:d7:b5:7b:20:4c:3d:6e:73:
49:22:d0:bb:f0:be:2d:8e:14:29:b8:56:6d:d6:3a:
4d:f6:d8:48:0d:16:f2:86:34:da:45:92:da:28:52:
33:db:de:31:9f:ae:7f:d2:42:f8:bb:8f:85:1e:d1:
9f:9b:bd:bb:96:fa:4e:4d:a0:3a:92:1f:6f:6a:c9:
31:cc:13:a7:84:96:e0:1e:03:a0:b9:ab:c4:b7:69:
4f:67:bc:97:2b:50:04:2a:7d:7e:1b:74:e6:96:37:
8c:ea:f6:1d:57:98:33:ee:83:18:c6:74:fd:1e:75:
3f:82:02:f5:52:ed:01:e2:3a:26:0e:f4:06:9a:c1:
22:25:80:64:55:b7:8b:c4:d3:57:d3:bc:26:29:09:
ce:32:8a:6d:96:3f:5a:6d:b3:e0:a7:8b:29:23:b3:
6d:0f:31:5e:98:8a:1c:03:e5:8b:e5:54:4e:3d:21:
78:2c:b6:2e:af:2e:15:9a:81:a2:0d:ff:d0:ff:37:
41:ca:c3:9a:30:67:cc:1e:de:a9:0a:7d:9b:5e:c5:
f9:b7:05:75:46:fe:63:24:1e:e1:d4:dd:f3:a4:52:
b9:eb:0c:34:33:95:74:6b:cb:d5:37:b1:30:b2:00:
a7:70:2e:26:1a:30:2d:2c:07:1f:f6:be:9e:53:fe:
43:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:02:A3:4F:66:ED:98:5B:3D:86:85:CD:FA:CC:BC:06:F9:7D:65:EA
X509v3 Authority Key Identifier:
keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b4:4e:05:0f:40:76:9c:f3:0e:a7:c2:69:43:15:54:4e:a4:
42:b3:1b:8e:08:1b:bf:e7:ce:76:9e:f7:2b:20:2c:f4:95:ce:
5f:29:03:8b:6b:0e:d4:d3:0c:25:51:8c:4e:16:91:db:f5:d6:
df:fa:91:0d:66:24:b7:15:cf:cd:f5:7b:93:b3:59:46:61:4a:
18:27:c3:bc:55:c4:ab:a4:ce:a0:66:e9:eb:ea:61:48:fc:b7:
5a:68:ed:32:90:4a:52:d5:da:6c:96:cd:0a:ff:7d:dd:99:bb:
9c:1a:66:db:82:2f:07:de:a6:76:7d:dd:75:63:ff:a5:19:74:
01:33:01:7a:0a:d2:90:cd:e7:57:b6:bf:09:e7:bf:6b:45:ae:
07:4c:15:88:aa:a2:a5:9c:fb:7c:57:17:47:5c:a5:7d:92:d7:
2f:87:ef:27:df:e8:8a:5f:6f:e1:35:1e:1b:47:65:50:df:53:
f3:15:da:49:cb:f6:c7:89:2e:f9:31:23:e5:93:a8:b9:6a:71:
ef:9d:e0:4b:21:72:05:25:de:89:08:f1:1b:80:a6:90:46:4f:
87:5c:58:a2:c5:26:7f:36:44:7d:66:3c:4d:d8:2d:19:4f:67:
4f:62:2f:1d:fc:74:af:ff:61:ef:a0:cc:7c:99:e4:9f:46:d3:
40:6f:c6:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4vStcFcMRiCK2dIr31sGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzJmNzM1ZjcxNDVmNzBkMjcwMjYwMmVlOGM4MTU2NDll
YjJlNDUwHhcNMjUwODA0MDcwMTUwWhcNMjUwODA1MDcwMTUwWjAzMTEwLwYDVQQD
EyhkNjAyYTM0ZjY2ZWQ5ODViM2Q4Njg1Y2RmYWNjYmMwNmY5N2Q2NWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7C/tM1317V7IEw9bnNJItC78L4t
jhQpuFZt1jpN9thIDRbyhjTaRZLaKFIz294xn65/0kL4u4+FHtGfm727lvpOTaA6
kh9vaskxzBOnhJbgHgOguavEt2lPZ7yXK1AEKn1+G3TmljeM6vYdV5gz7oMYxnT9
HnU/ggL1Uu0B4jomDvQGmsEiJYBkVbeLxNNX07wmKQnOMoptlj9abbPgp4spI7Nt
DzFemIocA+WL5VROPSF4LLYury4VmoGiDf/Q/zdBysOaMGfMHt6pCn2bXsX5twV1
Rv5jJB7h1N3zpFK56ww0M5V0a8vVN7EwsgCncC4mGjAtLAcf9r6eU/5D4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYCo09m7ZhbPYaFzfrMvAb5fWXqMB8GA1UdIwQY
MBaAFAbC9zX3FF9w0nAmAu6MgVZJ6y5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNMM05mY1VYM0RTY0NZQzdveUJWa25yTGtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTczMjgtNzdjNi00Y2EzLThiNmQt
MWZmNjMwYzM1MGZmLzEvQnNMM05mY1VYM0RTY0NZQzdveUJWa25yTGtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9hNTczMjgtNzdjNi00Y2EzLThiNmQtMWZmNjMwYzM1MGZm
LzEvQnNMM05mY1VYM0RTY0NZQzdveUJWa25yTGtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7ROBQ9A
dpzzDqfCaUMVVE6kQrMbjggbv+fOdp73KyAs9JXOXykDi2sO1NMMJVGMThaR2/XW
3/qRDWYktxXPzfV7k7NZRmFKGCfDvFXEq6TOoGbp6+phSPy3WmjtMpBKUtXabJbN
Cv993Zm7nBpm24IvB96mdn3ddWP/pRl0ATMBegrSkM3nV7a/Cee/a0WuB0wViKqi
pZz7fFcXR1ylfZLXL4fvJ9/oil9v4TUeG0dlUN9T8xXaScv2x4ku+TEj5ZOouWpx
753gSyFyBSXeiQjxG4CmkEZPh1xYosUmfzZEfWY8TdgtGU9nT2IvHfx0r/9h76DM
fJnkn0bTQG/Gew==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:13:09 2025 by rpki-client