Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
File: bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft (raw, json)
Hash identifier: 9u4LgxlxW7XSIp3IzrGkbbLxL51RxYrvdviJIlmEhX8=
Subject key identifier: 7D:40:DE:8C:C0:D5:8E:EB:32:99:16:5C:C9:80:FF:67:FD:3E:79:4B
Authority key identifier: 6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
Certificate issuer: /CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Certificate serial: 0197684DD5A2F4A045395709D91F7C07FA38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
Manifest number: 1592
Signing time: Fri 13 Jun 2025 08:00:20 +0000
Manifest this update: Fri 13 Jun 2025 08:00:20 +0000
Manifest next update: Sat 14 Jun 2025 08:00:20 +0000
Files and hashes: 1: bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl (hash: 5S+N2pRVo7hUvGl5AbmNaIhJ5JumAM03RsBPdyscg/w=)
2: f0mlI3uPHkGxNxppJH1FzET7hkE.roa (hash: fzr3RtH6R3YRfxpidUV64dO9I/Erlus13YAGX+wIcwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:d5:a2:f4:a0:45:39:57:09:d9:1f:7c:07:fa:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Validity
Not Before: Jun 13 08:00:20 2025 GMT
Not After : Jun 14 08:00:20 2025 GMT
Subject: CN=7d40de8cc0d58eeb3299165cc980ff67fd3e794b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:f7:0e:f9:00:3c:11:cc:d0:65:23:9b:8e:
e9:02:e9:73:f6:41:16:18:4c:31:a8:ad:3d:83:c3:
24:c8:e3:c7:67:da:8d:b2:45:d6:3e:c9:56:8c:39:
54:1c:47:5c:84:18:c0:0b:87:fa:2d:b1:f6:e3:98:
08:42:22:ad:6d:3d:cf:0f:68:b1:53:f0:b4:84:e3:
ea:21:e0:08:c4:6f:8c:39:7e:45:b9:4e:cc:c3:2e:
2d:cc:9d:7c:da:45:d6:fa:50:ec:b3:86:21:ca:ea:
82:ee:46:b1:b8:a9:40:10:b4:ee:31:f3:9f:76:af:
c0:69:56:45:fe:7d:05:5a:c0:f1:94:c7:9e:6c:f4:
7a:e8:18:55:63:33:31:5d:11:5b:6d:e9:59:49:d5:
2a:a1:ab:2a:e5:5d:87:1a:90:6a:d5:5c:92:78:0b:
8e:6a:15:4e:84:6e:fb:95:dd:69:97:12:88:a1:b6:
9c:26:bd:99:62:41:0b:80:0d:0b:ef:04:d6:3f:96:
e3:44:e0:ed:f7:2e:8c:16:00:37:b5:cc:88:3c:d6:
4f:2e:2c:db:dd:0b:5c:ed:30:f8:37:92:c5:a6:b2:
70:bc:12:a1:b3:d3:c3:68:10:19:fd:ad:99:39:5b:
18:a0:b9:68:a8:92:69:4b:b0:99:e7:9c:84:00:5e:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:40:DE:8C:C0:D5:8E:EB:32:99:16:5C:C9:80:FF:67:FD:3E:79:4B
X509v3 Authority Key Identifier:
keyid:6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e6:63:41:3e:17:08:b1:33:41:e9:6b:bf:4a:fc:8c:02:03:
9e:c5:3a:74:a7:1e:85:24:82:85:2e:b7:9f:c7:fa:15:19:5e:
a9:57:fe:60:e6:e8:f8:d7:60:c2:33:38:74:7a:2b:4c:02:a4:
08:97:2f:03:20:61:a6:17:1b:32:57:bb:dc:d8:13:3b:d1:2f:
2d:ea:3f:06:d0:d4:f5:03:d4:39:83:62:d8:3f:6b:ff:e2:ef:
c2:5c:86:15:d2:2b:8d:e5:84:94:f1:47:06:b6:17:43:f5:ec:
b7:4e:d6:61:cf:ac:40:b3:d2:75:cc:2d:65:c7:b9:83:03:f9:
36:34:f8:97:8c:74:c3:75:ab:35:12:e5:e1:65:99:33:6d:56:
fd:ff:59:24:a6:70:42:23:ff:94:12:90:1b:9a:40:c3:ba:4e:
ad:7b:1a:5a:8c:70:9f:4e:f7:d3:28:32:25:a3:7a:85:6d:59:
1d:c6:a8:e0:f8:04:c7:69:e4:0f:1c:0f:41:89:1c:e1:33:b3:
d0:d8:30:33:f1:01:4e:7c:08:dc:77:4c:02:75:36:d7:dc:3c:
d3:d8:e9:37:a7:f4:9d:ab:b5:f3:25:f6:ea:29:9e:54:b5:08:
87:87:08:9e:66:61:5b:eb:a9:18:48:8d:f0:49:e9:ae:f0:12:
4b:9f:8d:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoTdWi9KBFOVcJ2R98B/o4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNDNkNTJjZjVjNzIxNjE2NjM4YTFhYjljM2Q4OWZhOWE5
N2RjNmQwHhcNMjUwNjEzMDgwMDIwWhcNMjUwNjE0MDgwMDIwWjAzMTEwLwYDVQQD
Eyg3ZDQwZGU4Y2MwZDU4ZWViMzI5OTE2NWNjOTgwZmY2N2ZkM2U3OTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxT3DvkAPBHM0GUjm47pAulz9kEW
GEwxqK09g8MkyOPHZ9qNskXWPslWjDlUHEdchBjAC4f6LbH245gIQiKtbT3PD2ix
U/C0hOPqIeAIxG+MOX5FuU7Mwy4tzJ182kXW+lDss4YhyuqC7kaxuKlAELTuMfOf
dq/AaVZF/n0FWsDxlMeebPR66BhVYzMxXRFbbelZSdUqoasq5V2HGpBq1VySeAuO
ahVOhG77ld1plxKIobacJr2ZYkELgA0L7wTWP5bjRODt9y6MFgA3tcyIPNZPLizb
3Qtc7TD4N5LFprJwvBKhs9PDaBAZ/a2ZOVsYoLloqJJpS7CZ55yEAF7okwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1A3ozA1Y7rMpkWXMmA/2f9PnlLMB8GA1UdIwQY
MBaAFG5D1Sz1xyFhZjihq5w9ifqal9xtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmtQVkxQWEhJV0ZtT0tHcm5EMkotcHFYM0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ZDAzZWEtODcwMi00YjRjLWExMTct
NmIxYzgyY2U3MTZkLzEvYmtQVkxQWEhJV0ZtT0tHcm5EMkotcHFYM0cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83ZDAzZWEtODcwMi00YjRjLWExMTctNmIxYzgyY2U3MTZk
LzEvYmtQVkxQWEhJV0ZtT0tHcm5EMkotcHFYM0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+ZjQT4X
CLEzQelrv0r8jAIDnsU6dKcehSSChS63n8f6FRleqVf+YObo+NdgwjM4dHorTAKk
CJcvAyBhphcbMle73NgTO9EvLeo/BtDU9QPUOYNi2D9r/+LvwlyGFdIrjeWElPFH
BrYXQ/Xst07WYc+sQLPSdcwtZce5gwP5NjT4l4x0w3WrNRLl4WWZM21W/f9ZJKZw
QiP/lBKQG5pAw7pOrXsaWoxwn0730ygyJaN6hW1ZHcao4PgEx2nkDxwPQYkc4TOz
0NgwM/EBTnwI3HdMAnU219w809jpN6f0nau18yX26imeVLUIh4cInmZhW+upGEiN
8EnprvASS5+Nyg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:03:24 2025 by rpki-client