Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
File: bM82Dfmh9h4jMn2g0sCREuCpvWk.mft (raw, json)
Hash identifier: vGs7nyZCbCkKPMQlTNE6KsWEddPIin8MdEu/CK4f3WY=
Subject key identifier: 65:FD:42:3B:D0:89:9A:A7:9A:68:67:67:14:74:47:9C:0A:2C:42:7E
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 0197B6A1111FF42849118F0905C488504A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
Manifest number: 151C
Signing time: Sat 28 Jun 2025 13:01:38 +0000
Manifest this update: Sat 28 Jun 2025 13:01:38 +0000
Manifest next update: Sun 29 Jun 2025 13:01:38 +0000
Files and hashes: 1: 3Q1VmGfeCFKvj2X0IlJ_cfpSuFg.roa (hash: JjwgsPIb16RE+EQ2ebpqagyCholGk7446OO7mOE3TPE=)
2: TiOnGSVAxjnW1xfYOuanwRUmLJM.roa (hash: 3xvtqoDbtk/9ZQerINt7CnIoQUKYTDb5i/O7RCY86lE=)
3: UZv1ymCovb-i08X3fkZv3jT2Y3I.roa (hash: Ngck0j9G5utiQaFVWOCDxHnx1F9yWaCjfOLfVg8Hhxk=)
4: bM82Dfmh9h4jMn2g0sCREuCpvWk.crl (hash: rbnztwvJdlOzzuJN5uPBlrpwzVIVPrqBqCCObQr/03Y=)
5: d3EPcUHwT-eSSFHDekbKgpmD0zI.roa (hash: 3ir0iA/sdHESvEm5pfGD8XuZyzc0Szw0kMT36A+NUSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:11:1f:f4:28:49:11:8f:09:05:c4:88:50:4a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Jun 28 13:01:38 2025 GMT
Not After : Jun 29 13:01:38 2025 GMT
Subject: CN=65fd423bd0899aa79a6867671474479c0a2c427e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3b:11:ef:54:fe:4e:1a:ba:30:4d:0e:8b:b6:
e1:24:54:f2:c1:71:0b:1c:9b:01:9a:d8:fe:b0:5f:
e2:80:4c:8b:19:00:98:4c:a4:0a:f6:a7:11:ce:8c:
df:0e:97:17:46:62:fc:e9:01:01:f7:8d:3f:6b:5b:
e9:b0:46:17:eb:cf:1e:ca:90:1d:35:db:1c:2a:bb:
54:97:91:f2:4e:14:4f:cf:38:d2:30:a2:5f:9a:06:
87:5f:a3:4e:a2:b8:32:a2:32:3f:36:26:50:32:f0:
33:d1:4f:b5:ce:c7:75:f1:05:8a:22:40:4e:ad:ae:
53:a2:72:ef:31:5a:84:1f:98:7e:87:19:8e:1c:fa:
a8:0a:0d:42:e1:f4:a1:7b:3f:0b:7a:a4:70:12:d2:
6a:7a:c7:00:ba:0a:a8:ef:e0:75:36:a0:71:0e:0f:
79:83:51:e7:50:35:36:27:da:b1:e7:b6:3a:be:11:
99:63:1a:28:b5:05:b7:cb:61:cd:33:49:31:b4:ec:
53:57:e4:2d:fb:53:ef:b9:a3:89:37:f9:a3:dc:03:
0e:4c:8a:1d:4f:df:c1:61:d4:74:71:ad:7f:a9:11:
9e:08:cb:62:4c:0d:24:34:89:e9:57:03:51:cb:c0:
29:67:b3:39:80:86:55:c0:43:71:9d:3e:b3:e7:01:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FD:42:3B:D0:89:9A:A7:9A:68:67:67:14:74:47:9C:0A:2C:42:7E
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f1:e6:66:ac:b7:14:6a:5c:14:f7:54:94:c9:54:8d:48:6f:
48:ba:a0:48:e4:38:85:43:00:55:15:a4:fe:70:14:0d:ef:0d:
ce:41:2c:6f:73:b1:c5:67:8f:a2:a4:6c:17:50:8a:5b:5a:15:
3b:fc:dd:0d:4e:da:a2:99:d9:3e:3f:19:b0:c1:ad:b3:9b:34:
12:e8:24:17:0e:31:43:16:36:fc:85:8d:3d:22:35:47:b1:02:
d9:74:33:41:ce:36:89:b4:0f:4f:3a:5e:bb:6b:df:92:2e:12:
d1:b5:2c:8c:31:1a:4b:27:6d:ba:51:f9:01:b6:67:1c:1c:b6:
1d:17:bc:a3:ab:4e:0c:ac:2e:2d:05:c7:80:49:c7:b3:45:ce:
c5:65:a8:5f:cc:7b:b4:a7:dd:a4:c4:2a:33:c6:d6:95:55:4b:
bc:20:56:40:07:80:81:e9:6e:0e:ed:3c:a3:a9:f8:e7:19:a1:
4e:a2:6a:75:b0:91:4d:13:9d:cf:aa:d0:a6:a2:cb:43:e6:82:
3a:ce:01:68:de:94:a3:5a:06:54:6c:8e:f9:e3:42:fa:7a:ce:
e7:04:74:9d:0b:9f:76:fd:34:fb:69:17:b3:48:2c:b4:b8:b4:
5c:7d:52:9d:05:6c:b3:d0:06:c5:8c:40:cb:ec:c7:9d:8a:bc:
72:f4:c4:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oREf9ChJEY8JBcSIUEpTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjY2YzNjBkZjlhMWY2MWUyMzMyN2RhMGQyYzA5MTEyZTBh
OWJkNjkwHhcNMjUwNjI4MTMwMTM4WhcNMjUwNjI5MTMwMTM4WjAzMTEwLwYDVQQD
Eyg2NWZkNDIzYmQwODk5YWE3OWE2ODY3NjcxNDc0NDc5YzBhMmM0MjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzsR71T+Thq6ME0Oi7bhJFTywXEL
HJsBmtj+sF/igEyLGQCYTKQK9qcRzozfDpcXRmL86QEB940/a1vpsEYX688eypAd
NdscKrtUl5HyThRPzzjSMKJfmgaHX6NOorgyojI/NiZQMvAz0U+1zsd18QWKIkBO
ra5TonLvMVqEH5h+hxmOHPqoCg1C4fShez8LeqRwEtJqescAugqo7+B1NqBxDg95
g1HnUDU2J9qx57Y6vhGZYxootQW3y2HNM0kxtOxTV+Qt+1PvuaOJN/mj3AMOTIod
T9/BYdR0ca1/qRGeCMtiTA0kNInpVwNRy8ApZ7M5gIZVwENxnT6z5wGPRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGX9QjvQiZqnmmhnZxR0R5wKLEJ+MB8GA1UdIwQY
MBaAFGzPNg35ofYeIzJ9oNLAkRLgqb1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTIt
NzcxNDBkMDk3ODNjLzEvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTItNzcxNDBkMDk3ODNj
LzEvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPHmZqy3
FGpcFPdUlMlUjUhvSLqgSOQ4hUMAVRWk/nAUDe8NzkEsb3OxxWePoqRsF1CKW1oV
O/zdDU7aopnZPj8ZsMGts5s0EugkFw4xQxY2/IWNPSI1R7EC2XQzQc42ibQPTzpe
u2vfki4S0bUsjDEaSydtulH5AbZnHBy2HRe8o6tODKwuLQXHgEnHs0XOxWWoX8x7
tKfdpMQqM8bWlVVLvCBWQAeAgeluDu08o6n45xmhTqJqdbCRTROdz6rQpqLLQ+aC
Os4BaN6Uo1oGVGyO+eNC+nrO5wR0nQufdv00+2kXs0gstLi0XH1SnQVss9AGxYxA
y+zHnYq8cvTEFg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:21 2025 by rpki-client