
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
File: bMI2cPl4nALYO6fC5-TG6e3lL3o.mft (raw, json)
Hash identifier: uIVwHDW5yv0f7YYm/m2uMxTDONn7bN4PhofshOqQjOk=
Subject key identifier: 20:74:2F:94:8C:1C:00:D2:73:11:1A:F9:C9:95:65:BB:A8:DE:B3:D2
Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Certificate serial: 01976F2C12C3506F65B50176423AD0F18AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
Manifest number: 0727
Signing time: Sat 14 Jun 2025 16:00:48 +0000
Manifest this update: Sat 14 Jun 2025 16:00:48 +0000
Manifest next update: Sun 15 Jun 2025 16:00:48 +0000
Files and hashes: 1: FN9RGBMyQ31Y_fViha13qkky7DI.roa (hash: gAmFRHmRCLI//ymFZDIrqygKx6kT7sxILKZQSxKuAic=)
2: Nbw4t5MC6gHkh4rPXeeWfUQIVkw.roa (hash: GCKq7nx6vmgGBar49yig7d/ID2EW6TSR2OyxNnCG15Q=)
3: bMI2cPl4nALYO6fC5-TG6e3lL3o.crl (hash: g++kSZWP1r/mGyoIj79buRl5r7Qvu3YANUmLEnp2EIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:12:c3:50:6f:65:b5:01:76:42:3a:d0:f1:8a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Validity
Not Before: Jun 14 16:00:48 2025 GMT
Not After : Jun 15 16:00:48 2025 GMT
Subject: CN=20742f948c1c00d273111af9c99565bba8deb3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:46:07:69:fc:5f:af:37:76:af:67:b1:9e:e5:
61:77:84:2f:8a:aa:56:19:23:2e:4a:ae:d8:01:06:
e2:f4:f8:f9:b9:b0:e8:8b:32:51:ed:b9:2f:70:de:
93:66:ed:e6:f5:2a:cd:0f:c5:72:51:24:72:6d:3e:
d8:de:70:a5:7c:55:e8:cf:17:fd:e3:28:e3:7a:28:
b2:9f:c8:36:e7:b0:95:99:2a:70:0e:4c:6d:bd:10:
a7:cd:c9:b5:db:0e:2a:b4:47:d5:8f:3f:67:49:ff:
87:38:ca:ae:f3:22:e1:1e:0d:52:2a:16:d0:f8:a7:
94:13:f4:20:20:1b:4f:aa:b6:2f:4c:e8:7e:cd:7f:
5a:4b:f7:1e:59:d8:55:5f:cd:46:cd:c9:89:80:de:
b5:06:d4:48:15:4b:43:3c:06:66:75:7e:ca:e0:a2:
b3:93:a9:cd:46:e0:be:61:44:5b:3c:9b:0a:b3:91:
a2:b0:c1:66:83:f3:e3:ec:54:af:b3:4f:ac:28:5e:
8c:20:af:90:37:82:92:1d:9f:dd:23:70:7b:74:31:
0c:69:17:e0:9e:4b:30:be:9c:7e:6e:f6:41:f9:31:
c9:2d:e5:fd:01:b8:48:31:e2:83:1b:91:62:5a:f4:
78:c9:89:74:e0:e2:92:74:1a:b8:b1:d7:f5:14:bb:
25:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:74:2F:94:8C:1C:00:D2:73:11:1A:F9:C9:95:65:BB:A8:DE:B3:D2
X509v3 Authority Key Identifier:
keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:df:73:e8:13:6a:07:ed:f2:58:51:a2:3b:98:80:28:02:b2:
e1:8b:65:f7:62:06:19:67:1b:df:44:39:e3:24:4b:7c:78:26:
4f:4e:08:8f:16:37:b8:5c:12:b0:e7:c7:e8:99:32:d4:96:3d:
38:60:3f:76:23:f3:76:21:61:ad:ca:f6:49:51:d3:37:13:8c:
1c:49:3d:ed:1e:d2:88:26:ff:e0:60:18:b0:71:c4:fd:b4:f4:
c9:48:01:23:56:00:19:b3:4e:90:53:e7:99:50:e4:af:26:f8:
33:d6:0e:ec:31:89:b1:b0:5a:21:66:11:f4:c8:f0:5e:59:81:
c8:d4:bb:6a:2b:27:d2:1c:c8:b5:b6:fd:c0:af:e8:29:8a:1c:
1d:a9:e5:4f:85:05:dd:49:5d:89:35:4c:14:8b:c4:b2:25:28:
36:23:dc:4d:e7:a4:cb:54:80:6f:6a:c5:2e:71:fe:4c:4b:df:
04:7e:9b:79:62:40:7a:11:2a:bb:15:6d:20:67:fc:12:eb:9f:
3f:93:21:06:d9:ae:1e:6f:df:5a:aa:1f:06:95:1e:5e:7b:44:
4e:ac:32:b2:60:27:b5:a1:f1:5f:47:27:8a:cb:1e:ff:bb:19:
3c:6a:b3:97:6b:03:73:fc:eb:ea:a1:e5:3c:23:31:02:8d:65:
3b:83:c9:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLBLDUG9ltQF2QjrQ8YrYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYzIzNjcwZjk3ODljMDJkODNiYTdjMmU3ZTRjNmU5ZWRl
NTJmN2EwHhcNMjUwNjE0MTYwMDQ4WhcNMjUwNjE1MTYwMDQ4WjAzMTEwLwYDVQQD
EygyMDc0MmY5NDhjMWMwMGQyNzMxMTFhZjljOTk1NjViYmE4ZGViM2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50YHafxfrzd2r2exnuVhd4QviqpW
GSMuSq7YAQbi9Pj5ubDoizJR7bkvcN6TZu3m9SrND8VyUSRybT7Y3nClfFXozxf9
4yjjeiiyn8g257CVmSpwDkxtvRCnzcm12w4qtEfVjz9nSf+HOMqu8yLhHg1SKhbQ
+KeUE/QgIBtPqrYvTOh+zX9aS/ceWdhVX81GzcmJgN61BtRIFUtDPAZmdX7K4KKz
k6nNRuC+YURbPJsKs5GisMFmg/Pj7FSvs0+sKF6MIK+QN4KSHZ/dI3B7dDEMaRfg
nkswvpx+bvZB+THJLeX9AbhIMeKDG5FiWvR4yYl04OKSdBq4sdf1FLslAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCB0L5SMHADScxEa+cmVZbuo3rPSMB8GA1UdIwQY
MBaAFGzCNnD5eJwC2Dunwufkxunt5S96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85ZmQyMGUtMzRkNy00OTQ5LWEzMDct
OTA4N2UwZmYzZDM2LzEvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85ZmQyMGUtMzRkNy00OTQ5LWEzMDctOTA4N2UwZmYzZDM2
LzEvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIN9z6BNq
B+3yWFGiO5iAKAKy4Ytl92IGGWcb30Q54yRLfHgmT04IjxY3uFwSsOfH6Jky1JY9
OGA/diPzdiFhrcr2SVHTNxOMHEk97R7SiCb/4GAYsHHE/bT0yUgBI1YAGbNOkFPn
mVDkryb4M9YO7DGJsbBaIWYR9MjwXlmByNS7aisn0hzItbb9wK/oKYocHanlT4UF
3UldiTVMFIvEsiUoNiPcTeeky1SAb2rFLnH+TEvfBH6beWJAehEquxVtIGf8Euuf
P5MhBtmuHm/fWqofBpUeXntETqwysmAntaHxX0cnisse/7sZPGqzl2sDc/zr6qHl
PCMxAo1lO4PJBw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:58:39 2025 by rpki-client