Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
File: v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json)
Hash identifier: XlW7htqU8G8/2Y7t6WcAEc+I83IBM4Jyks7qlPaRctU=
Subject key identifier: C6:53:73:26:85:0E:9E:55:56:53:C8:F0:8C:E5:91:1F:A1:B3:13:0A
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial: 01987FE71F6898E5C934ECC9842445F40982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
Manifest number: 1622
Signing time: Wed 06 Aug 2025 15:01:49 +0000
Manifest this update: Wed 06 Aug 2025 15:01:49 +0000
Manifest next update: Thu 07 Aug 2025 15:01:49 +0000
Files and hashes: 1: BbPU1Bnn4njLoJyEV_1fon0xq_M.roa (hash: hSofywL/61c+ycaV0QrJyYDUafrPsowFjsTpxS/wPU8=)
2: idgepXLlrREH-xoC6R-XHWqyAro.roa (hash: m88a+GTZ/SRnSaetSuTlX6BeBnowd2dvflLVRuisI/M=)
3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: 9b/+2b6gnLQbXT8PzOa+5ymkYQEllI0hQopG0LDWxq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e7:1f:68:98:e5:c9:34:ec:c9:84:24:45:f4:09:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Validity
Not Before: Aug 6 15:01:49 2025 GMT
Not After : Aug 7 15:01:49 2025 GMT
Subject: CN=c6537326850e9e555653c8f08ce5911fa1b3130a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8f:2d:bf:57:ab:ae:6d:e2:f9:67:7e:ac:e5:
1a:95:ef:26:23:85:98:ca:ac:e5:90:7e:a4:29:eb:
fb:8f:1f:66:15:e4:5b:d8:94:23:10:1d:8e:86:d4:
44:07:7c:1a:e9:b6:7a:0e:0f:68:0a:da:cf:42:43:
a0:ab:d1:fa:63:cd:19:46:66:46:54:bb:17:26:a3:
7a:e8:76:34:59:a0:0c:de:af:f2:12:51:b7:14:23:
2b:cf:18:bc:c7:7b:5b:46:b8:7a:e6:51:29:2e:7d:
df:bc:b5:94:2e:49:ca:4e:ca:62:08:0b:ca:2e:27:
83:f5:98:61:c8:eb:82:93:36:be:f9:59:0e:b0:19:
d1:0d:c6:42:44:93:5f:54:b4:47:ad:d5:cb:4f:1b:
06:4e:b1:b7:23:2f:d7:6f:4d:0e:eb:3e:73:93:d6:
b3:1b:a3:be:c1:b3:dd:c1:c1:86:dc:da:e1:19:9e:
09:44:f3:fb:56:4f:4f:44:f2:b8:b9:78:80:0d:af:
0c:7d:1c:2c:4b:9f:bd:61:13:52:28:61:a9:17:64:
ab:59:d5:d5:f2:48:12:ac:4f:f9:88:d9:8d:12:be:
32:84:9f:81:3b:fb:df:b4:55:64:ca:be:b5:ee:68:
2c:81:92:7e:3c:e2:14:dc:c4:bf:6a:07:3f:dc:11:
c9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:53:73:26:85:0E:9E:55:56:53:C8:F0:8C:E5:91:1F:A1:B3:13:0A
X509v3 Authority Key Identifier:
keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:34:b1:1b:2f:e2:85:64:10:01:44:bc:71:ca:b8:d0:cb:3c:
ba:da:b6:94:e5:15:b6:ff:4b:20:20:0c:c3:24:67:4d:ea:41:
b2:48:ca:1a:82:65:8a:87:53:7e:86:fd:06:dc:8f:69:80:b8:
8f:60:00:c0:38:78:de:92:77:76:a5:f0:7b:a9:d0:47:d9:3c:
55:fa:ac:ec:15:c6:60:1d:5c:06:bb:e5:6f:a1:40:c3:61:f8:
f5:52:8b:c3:d0:4c:c2:a0:4f:c4:fc:b7:62:bf:54:b8:ef:15:
5d:8d:73:f1:5d:22:3a:10:93:ea:a0:62:5a:61:27:af:ce:c9:
05:d9:50:65:2e:7d:e7:19:b4:41:88:51:07:eb:b6:99:63:42:
5f:41:c7:13:04:f3:de:7b:77:c5:83:14:90:56:12:d3:4c:84:
81:50:c3:20:53:ed:14:83:28:fb:b7:39:34:28:5c:5d:a9:8f:
92:5a:49:b2:fc:4b:2a:c2:de:74:8e:68:5d:1f:3d:a7:9e:7e:
e7:e2:a8:b2:06:11:50:8e:a5:cc:b4:51:f5:66:9b:3f:3e:1e:
1b:6f:0b:37:3b:d8:fe:81:f9:f2:23:ab:98:39:78:ed:e6:df:
eb:be:34:bc:18:38:47:70:2d:e2:56:06:4f:c5:c0:c9:4a:e9:
26:16:32:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/5x9omOXJNOzJhCRF9AmCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZTZmYzc2OGFkNDdiOTY4ZTBhMjU5ZmVjYzhhM2RhMzJm
YWM1ZWEwHhcNMjUwODA2MTUwMTQ5WhcNMjUwODA3MTUwMTQ5WjAzMTEwLwYDVQQD
EyhjNjUzNzMyNjg1MGU5ZTU1NTY1M2M4ZjA4Y2U1OTExZmExYjMxMzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Y8tv1errm3i+Wd+rOUale8mI4WY
yqzlkH6kKev7jx9mFeRb2JQjEB2OhtREB3wa6bZ6Dg9oCtrPQkOgq9H6Y80ZRmZG
VLsXJqN66HY0WaAM3q/yElG3FCMrzxi8x3tbRrh65lEpLn3fvLWULknKTspiCAvK
LieD9ZhhyOuCkza++VkOsBnRDcZCRJNfVLRHrdXLTxsGTrG3Iy/Xb00O6z5zk9az
G6O+wbPdwcGG3NrhGZ4JRPP7Vk9PRPK4uXiADa8MfRwsS5+9YRNSKGGpF2SrWdXV
8kgSrE/5iNmNEr4yhJ+BO/vftFVkyr617mgsgZJ+POIU3MS/agc/3BHJ6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZTcyaFDp5VVlPI8IzlkR+hsxMKMB8GA1UdIwQY
MBaAFL/m/HaK1HuWjgoln+zIo9oy+sXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wMGM3MTEtMGMyOS00MzAxLTk0YmMt
ZWE1N2NiZTM2ODExLzEvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wMGM3MTEtMGMyOS00MzAxLTk0YmMtZWE1N2NiZTM2ODEx
LzEvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDSxGy/i
hWQQAUS8ccq40Ms8utq2lOUVtv9LICAMwyRnTepBskjKGoJliodTfob9BtyPaYC4
j2AAwDh43pJ3dqXwe6nQR9k8Vfqs7BXGYB1cBrvlb6FAw2H49VKLw9BMwqBPxPy3
Yr9UuO8VXY1z8V0iOhCT6qBiWmEnr87JBdlQZS595xm0QYhRB+u2mWNCX0HHEwTz
3nt3xYMUkFYS00yEgVDDIFPtFIMo+7c5NChcXamPklpJsvxLKsLedI5oXR89p55+
5+KosgYRUI6lzLRR9WabPz4eG28LNzvY/oH58iOrmDl47ebf6740vBg4R3At4lYG
T8XAyUrpJhYyBQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 18:49:12 2025 by rpki-client