Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
File: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft (raw, json)
Hash identifier: S66W0tJkp+5oaObXKDja5sGGwwMoi4MqQE7wqwqPW4k=
Subject key identifier: D6:7E:1C:E6:1A:EF:66:BB:26:25:FD:9B:2B:CB:35:18:BC:1B:24:2D
Authority key identifier: 06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
Certificate issuer: /CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Certificate serial: 01976CCF9B223ABDAA3C4642EB6E0F364C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
Manifest number: 111D
Signing time: Sat 14 Jun 2025 05:00:34 +0000
Manifest this update: Sat 14 Jun 2025 05:00:34 +0000
Manifest next update: Sun 15 Jun 2025 05:00:34 +0000
Files and hashes: 1: 1GqtXlpLHOQrMWA32pTa86lAWYQ.roa (hash: tnU3CSzBIjcvcUTrt2DgQBxjNJjtnLH3C2y91tIJFC8=)
2: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl (hash: LgwXWhGJiWFgwrqMcBlJRaVVFDj/4xm0nCS6jEuAPlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:9b:22:3a:bd:aa:3c:46:42:eb:6e:0f:36:4c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Validity
Not Before: Jun 14 05:00:34 2025 GMT
Not After : Jun 15 05:00:34 2025 GMT
Subject: CN=d67e1ce61aef66bb2625fd9b2bcb3518bc1b242d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:3f:a1:f7:6e:e2:5c:58:00:09:80:83:15:
df:48:b1:79:fb:84:00:a5:f8:64:0c:43:70:03:8d:
21:eb:b8:6b:32:1d:2f:1f:4e:e6:bb:c7:f2:55:10:
4b:cf:32:75:a2:57:57:58:2f:e8:14:c0:02:5e:55:
b0:52:e9:ea:ed:4e:5d:a9:12:40:94:0d:69:4e:58:
30:70:33:3a:fa:87:96:cb:50:29:92:f8:09:57:3f:
44:49:12:e3:43:ad:24:43:98:48:63:7f:bc:06:3f:
5b:b0:37:dc:5c:55:83:b4:6b:71:ca:b2:2f:f2:6b:
8c:57:32:ba:fe:36:db:b9:86:8b:2f:00:35:7d:a6:
0a:ed:1f:75:90:55:eb:36:86:26:9d:5e:13:94:bd:
e5:37:db:e2:74:c6:f6:46:c6:1b:06:95:e3:27:a3:
41:22:f0:ad:6e:d2:94:5b:cd:cf:c9:f7:de:ed:34:
ce:4b:ad:f0:d0:bc:48:42:1d:03:2e:2a:2d:68:10:
b9:fb:ea:eb:d0:db:6c:34:2c:82:49:5c:88:3b:3b:
ad:0b:68:22:29:f5:19:9d:41:3e:07:9d:d5:ff:c4:
49:64:6a:bb:9d:c0:6b:4e:f6:42:11:ea:f5:f7:de:
cc:b2:bb:ef:10:72:b6:23:90:bc:3c:a3:c3:9a:e9:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7E:1C:E6:1A:EF:66:BB:26:25:FD:9B:2B:CB:35:18:BC:1B:24:2D
X509v3 Authority Key Identifier:
keyid:06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:24:db:2f:1f:4c:97:86:84:02:3d:69:f4:fb:2b:0e:cf:0b:
65:f8:4c:53:b2:68:44:22:ec:cc:b1:3c:81:88:c8:0c:e3:64:
6d:98:57:11:a4:07:5e:f4:a8:fd:5c:7d:76:6b:82:83:fe:90:
71:72:15:60:09:b4:41:ad:c5:1f:c2:c1:f8:39:5c:9c:98:6f:
f0:11:29:29:a5:ed:83:9e:8d:58:12:3d:86:4d:0a:9a:f4:30:
66:b6:e0:f1:c0:38:65:81:55:1f:a9:48:78:f5:4e:e7:36:cd:
c7:7f:d6:07:47:08:24:47:9a:57:ed:a5:1a:dc:b9:ec:35:78:
14:3b:12:29:83:2d:77:5a:8e:29:a8:26:90:48:96:f5:60:5a:
df:e2:16:22:03:23:9c:9c:e6:f7:91:58:87:35:a6:36:c1:62:
32:95:21:d2:d7:ec:fc:a5:d5:10:3c:1e:d9:a5:d7:d7:ba:e5:
fd:20:52:1f:bb:9f:f5:83:fd:bc:ff:dc:0b:60:79:37:f2:3d:
73:a4:bc:5b:6f:87:0f:e6:c4:cf:36:55:5f:dc:53:1a:24:f6:
e1:23:94:8b:c5:ce:51:31:b7:65:e0:f7:2a:89:9c:70:a0:2e:
60:d2:a2:02:e3:fb:90:21:dc:fe:5d:66:5d:33:7a:55:1e:9d:
66:3f:53:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz5siOr2qPEZC624PNkyOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2N2RjZjU3NzY1NGRjYTE3YTYxMGI5YWY0ZjJjYTc0MjFk
Y2JiODEwHhcNMjUwNjE0MDUwMDM0WhcNMjUwNjE1MDUwMDM0WjAzMTEwLwYDVQQD
EyhkNjdlMWNlNjFhZWY2NmJiMjYyNWZkOWIyYmNiMzUxOGJjMWIyNDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCI/ofdu4lxYAAmAgxXfSLF5+4QA
pfhkDENwA40h67hrMh0vH07mu8fyVRBLzzJ1oldXWC/oFMACXlWwUunq7U5dqRJA
lA1pTlgwcDM6+oeWy1ApkvgJVz9ESRLjQ60kQ5hIY3+8Bj9bsDfcXFWDtGtxyrIv
8muMVzK6/jbbuYaLLwA1faYK7R91kFXrNoYmnV4TlL3lN9vidMb2RsYbBpXjJ6NB
IvCtbtKUW83Pyffe7TTOS63w0LxIQh0DLiotaBC5++rr0NtsNCyCSVyIOzutC2gi
KfUZnUE+B53V/8RJZGq7ncBrTvZCEer1997MsrvvEHK2I5C8PKPDmulDdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZ+HOYa72a7JiX9myvLNRi8GyQtMB8GA1UdIwQY
MBaAFAZ9z1d2VNyhemELmvTyynQh3LuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm4zUFYzWlUzS0Y2WVF1YTlQTEtkQ0hjdTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yOWNiMmUtNDY4MC00YTM2LWIwYTUt
OTg1MTgyMDAxZTkyLzEvQm4zUFYzWlUzS0Y2WVF1YTlQTEtkQ0hjdTRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yOWNiMmUtNDY4MC00YTM2LWIwYTUtOTg1MTgyMDAxZTky
LzEvQm4zUFYzWlUzS0Y2WVF1YTlQTEtkQ0hjdTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCTbLx9M
l4aEAj1p9PsrDs8LZfhMU7JoRCLszLE8gYjIDONkbZhXEaQHXvSo/Vx9dmuCg/6Q
cXIVYAm0Qa3FH8LB+DlcnJhv8BEpKaXtg56NWBI9hk0KmvQwZrbg8cA4ZYFVH6lI
ePVO5zbNx3/WB0cIJEeaV+2lGty57DV4FDsSKYMtd1qOKagmkEiW9WBa3+IWIgMj
nJzm95FYhzWmNsFiMpUh0tfs/KXVEDwe2aXX17rl/SBSH7uf9YP9vP/cC2B5N/I9
c6S8W2+HD+bEzzZVX9xTGiT24SOUi8XOUTG3ZeD3KomccKAuYNKiAuP7kCHc/l1m
XTN6VR6dZj9TLw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:06:21 2025 by rpki-client