Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
File: bM82Dfmh9h4jMn2g0sCREuCpvWk.mft (raw, json)
Hash identifier: XzS7f0gsDGBC25/KVtOgMnn32YajmlQMXXVO5BmBOMc=
Subject key identifier: 9E:07:2B:61:39:39:D1:DD:0B:29:5F:1B:D2:DD:D9:98:9C:48:FD:1E
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 0198D8500016F04F2A75770D004BB79DC203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
Manifest number: 15B2
Signing time: Sat 23 Aug 2025 19:02:58 +0000
Manifest this update: Sat 23 Aug 2025 19:02:58 +0000
Manifest next update: Sun 24 Aug 2025 19:02:58 +0000
Files and hashes: 1: 3Q1VmGfeCFKvj2X0IlJ_cfpSuFg.roa (hash: JjwgsPIb16RE+EQ2ebpqagyCholGk7446OO7mOE3TPE=)
2: TiOnGSVAxjnW1xfYOuanwRUmLJM.roa (hash: 3xvtqoDbtk/9ZQerINt7CnIoQUKYTDb5i/O7RCY86lE=)
3: UZv1ymCovb-i08X3fkZv3jT2Y3I.roa (hash: Ngck0j9G5utiQaFVWOCDxHnx1F9yWaCjfOLfVg8Hhxk=)
4: bM82Dfmh9h4jMn2g0sCREuCpvWk.crl (hash: zWzhziCwN+Thu0Arud/HBSho/ytEFv690v14sN+vsXk=)
5: d3EPcUHwT-eSSFHDekbKgpmD0zI.roa (hash: 3ir0iA/sdHESvEm5pfGD8XuZyzc0Szw0kMT36A+NUSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:00:16:f0:4f:2a:75:77:0d:00:4b:b7:9d:c2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Aug 23 19:02:58 2025 GMT
Not After : Aug 24 19:02:58 2025 GMT
Subject: CN=9e072b613939d1dd0b295f1bd2ddd9989c48fd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:ce:d6:2c:c2:94:b2:66:31:d0:21:c1:78:
fc:5d:2c:01:9f:2c:bc:35:aa:89:3b:fe:9c:2b:2f:
a2:af:5f:cc:db:1d:04:c7:6c:c3:b5:51:7e:dc:52:
bd:d9:0e:e8:5e:32:44:32:fd:68:29:8f:cb:f0:9c:
af:46:96:2e:6c:82:3f:d8:a3:ab:ee:da:0a:4f:9b:
13:8e:ad:8c:cc:16:19:71:84:16:2c:1a:8f:6e:04:
36:cf:ca:b3:1d:87:05:ba:83:23:87:90:fd:29:c5:
ce:d5:f3:4b:b9:d6:2e:0a:bb:73:4a:0d:14:2f:ad:
a1:90:8a:f3:c0:04:be:4f:56:d3:23:1b:94:f4:3f:
12:76:44:d8:e6:2b:5b:e3:ff:d2:72:30:3c:70:39:
4f:67:11:1c:4b:a0:17:7a:f2:91:c3:1a:07:e4:49:
ab:bb:64:95:9b:93:c1:98:7a:0f:7d:ed:61:da:5c:
92:bb:98:6b:70:49:54:36:59:a4:70:f9:36:12:9d:
9d:32:92:fe:50:30:2d:33:63:e3:bc:56:d7:b4:29:
53:cc:5b:66:37:21:2b:bb:d3:e2:5a:3d:ce:4f:c6:
07:dd:00:05:c6:bd:cc:b2:30:3e:7a:85:65:61:93:
ea:7b:a6:a4:cd:61:2f:4a:95:aa:59:61:b0:2a:57:
72:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:07:2B:61:39:39:D1:DD:0B:29:5F:1B:D2:DD:D9:98:9C:48:FD:1E
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:36:fd:da:2e:7b:0f:d6:15:b7:f8:77:f5:27:ee:10:e6:3c:
b9:6a:5f:7b:b3:38:26:0f:14:9d:b4:d4:f7:13:a2:29:28:26:
17:2a:20:0d:90:88:fa:47:4e:2c:55:dd:28:6b:d1:d4:52:25:
92:c4:d1:1e:d3:be:48:f6:e9:d6:6a:2a:72:f5:48:90:11:03:
84:55:0a:3b:0e:d3:d1:48:4d:8d:cb:b0:f7:83:0f:a4:68:4b:
6d:0d:7e:e8:c8:bd:10:fc:90:7f:55:b1:be:e4:fe:17:79:2f:
dd:06:50:d9:95:00:98:9d:75:54:a7:ee:24:12:bd:b9:3c:d7:
79:7e:a4:cf:bc:20:15:69:dd:41:40:82:a9:81:ce:6b:fe:c4:
2f:ed:7b:a5:d2:03:38:ba:58:10:5e:ea:84:80:b3:47:c3:05:
8e:1b:a5:b3:78:76:0e:17:48:b2:0d:c1:58:9d:80:dd:68:81:
a5:58:a5:e2:fd:c3:8e:2c:2d:f4:e0:2b:8d:a9:b2:a4:84:d4:
e3:5a:09:e7:7c:01:11:61:a7:40:e0:9f:d3:58:67:b1:27:c5:
5e:d7:05:b6:47:ef:56:bb:5f:cf:b0:66:5b:c3:74:89:75:71:
cf:1f:08:81:57:03:ef:55:5e:a7:5a:a9:c3:57:c0:6d:ec:4c:
26:84:d2:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUAAW8E8qdXcNAEu3ncIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjY2YzNjBkZjlhMWY2MWUyMzMyN2RhMGQyYzA5MTEyZTBh
OWJkNjkwHhcNMjUwODIzMTkwMjU4WhcNMjUwODI0MTkwMjU4WjAzMTEwLwYDVQQD
Eyg5ZTA3MmI2MTM5MzlkMWRkMGIyOTVmMWJkMmRkZDk5ODljNDhmZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudLO1izClLJmMdAhwXj8XSwBnyy8
NaqJO/6cKy+ir1/M2x0Ex2zDtVF+3FK92Q7oXjJEMv1oKY/L8JyvRpYubII/2KOr
7toKT5sTjq2MzBYZcYQWLBqPbgQ2z8qzHYcFuoMjh5D9KcXO1fNLudYuCrtzSg0U
L62hkIrzwAS+T1bTIxuU9D8SdkTY5itb4//ScjA8cDlPZxEcS6AXevKRwxoH5Emr
u2SVm5PBmHoPfe1h2lySu5hrcElUNlmkcPk2Ep2dMpL+UDAtM2PjvFbXtClTzFtm
NyEru9PiWj3OT8YH3QAFxr3MsjA+eoVlYZPqe6akzWEvSpWqWWGwKldyPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4HK2E5OdHdCylfG9Ld2ZicSP0eMB8GA1UdIwQY
MBaAFGzPNg35ofYeIzJ9oNLAkRLgqb1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTIt
NzcxNDBkMDk3ODNjLzEvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTItNzcxNDBkMDk3ODNj
LzEvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITb92i57
D9YVt/h39SfuEOY8uWpfe7M4Jg8UnbTU9xOiKSgmFyogDZCI+kdOLFXdKGvR1FIl
ksTRHtO+SPbp1moqcvVIkBEDhFUKOw7T0UhNjcuw94MPpGhLbQ1+6Mi9EPyQf1Wx
vuT+F3kv3QZQ2ZUAmJ11VKfuJBK9uTzXeX6kz7wgFWndQUCCqYHOa/7EL+17pdID
OLpYEF7qhICzR8MFjhuls3h2DhdIsg3BWJ2A3WiBpVil4v3Djiwt9OArjamypITU
41oJ53wBEWGnQOCf01hnsSfFXtcFtkfvVrtfz7BmW8N0iXVxzx8IgVcD71Vep1qp
w1fAbexMJoTS+w==
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:14:40 2025 by rpki-client