Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
File: BgyexdQFhu0yVfD8T8sxV3FN2hU.mft (raw, json)
Hash identifier: qhA/n1vJLRdkcMQ1hFTEA082WHfLsCqv4CMO+PZp+BQ=
Subject key identifier: 47:B0:42:63:ED:7F:DF:C6:62:D1:F7:26:1C:D1:DD:A7:B1:0F:47:91
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 0197B7B356A3CD0CEC8FD7CEBDD1E91F67DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
Manifest number: 112D
Signing time: Sat 28 Jun 2025 18:01:13 +0000
Manifest this update: Sat 28 Jun 2025 18:01:13 +0000
Manifest next update: Sun 29 Jun 2025 18:01:13 +0000
Files and hashes: 1: BgyexdQFhu0yVfD8T8sxV3FN2hU.crl (hash: Hrpy2j0E0OgrOd4gn3dLGSNc+SOZqIoorr0x/1hD5kg=)
2: SvCn28QlY3H7uObVMGkQTVr8wro.roa (hash: lT4aO9UNqW5C6eAiY2SG9UDFdzGqTUCShh77rO3OfDs=)
3: zXLcc16Hl_V98UU7l_AMl_ZR3t0.roa (hash: zI4peklfsSU0BwGnCgTYFkA1twl5bd7IR0aRBdIFj54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:56:a3:cd:0c:ec:8f:d7:ce:bd:d1:e9:1f:67:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Jun 28 18:01:13 2025 GMT
Not After : Jun 29 18:01:13 2025 GMT
Subject: CN=47b04263ed7fdfc662d1f7261cd1dda7b10f4791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:cf:10:76:48:49:1a:7e:a1:b5:ac:e2:34:
b8:32:bc:d1:d7:51:cf:ca:53:79:9f:65:0a:d7:0a:
c1:51:d2:3d:cf:c1:82:fa:62:fb:bb:9f:23:8f:94:
e2:25:4a:02:54:b0:f7:67:bf:91:6f:e1:1e:16:5c:
c6:b0:01:d1:24:c9:e8:e2:21:76:ec:67:5f:9b:ec:
87:37:7b:27:98:e2:b5:cd:32:f5:83:05:ac:73:dc:
fd:42:6e:4f:0d:02:a8:7e:40:36:ad:14:c3:ea:44:
09:ae:d2:42:de:26:2d:e6:88:c9:43:b7:59:ab:36:
ea:a8:b2:1f:a1:f9:c2:9a:e3:8b:d4:39:fe:9b:97:
74:db:68:65:58:3b:d7:3f:54:85:6c:c7:31:13:ff:
62:9a:c3:a6:d8:4d:77:b5:b4:bb:eb:c2:64:ec:e3:
b1:e2:76:08:6e:b1:ef:c9:c8:9f:aa:6c:7d:e1:2f:
0a:60:e7:8c:65:70:fe:0a:98:83:e8:35:a7:24:0e:
1e:74:75:5a:3a:d9:29:8e:d4:ac:a6:ed:c9:5b:b9:
64:24:ac:24:ca:b7:6e:38:06:6b:fc:e9:7a:18:2e:
f5:3c:11:a2:ac:2d:81:a0:f6:a7:36:f7:37:04:f5:
ae:d5:19:9a:87:b3:93:41:d7:64:2a:e1:5f:fa:77:
ea:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B0:42:63:ED:7F:DF:C6:62:D1:F7:26:1C:D1:DD:A7:B1:0F:47:91
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b8:c7:11:48:69:8d:d4:8a:ae:20:ec:a2:ee:fe:04:10:24:
96:8a:6d:83:56:27:cc:6c:7a:3d:60:de:35:83:87:c2:4a:c9:
c1:f9:0e:74:84:8a:2d:0a:c9:4f:41:9b:42:75:42:af:1c:72:
6f:5e:9f:5e:6d:ca:03:4d:42:a4:ec:66:95:c3:37:be:41:d3:
1d:53:df:8b:fd:77:73:54:de:f3:3e:4f:fc:8b:51:14:c6:77:
30:59:ed:12:99:39:c3:d9:74:11:4e:62:05:ee:01:53:c8:77:
2d:34:8a:41:b3:a5:35:b8:57:61:8e:47:7c:c7:de:c2:02:5a:
99:ce:b2:fe:10:dc:fe:b2:c1:c0:bd:e9:72:47:27:23:0a:05:
14:76:63:a5:92:dd:26:19:9f:85:fc:81:74:0c:3c:e4:1e:46:
c5:c1:12:0a:75:0f:ec:18:51:91:93:aa:1a:81:27:0b:89:7e:
7f:5b:8d:4c:a5:88:b7:38:2d:6d:aa:d0:f6:fb:ad:00:4a:20:
61:38:4e:66:16:3a:34:7e:9e:64:4e:b0:a1:2d:88:95:2b:4a:
b0:50:b3:4f:fb:03:3a:72:27:be:d3:a9:47:0b:e1:25:35:6b:
ff:d1:dd:0f:8e:f2:aa:9d:96:21:d5:29:a2:db:5a:6a:8b:15:
38:1a:ed:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s1ajzQzsj9fOvdHpH2fbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MGM5ZWM1ZDQwNTg2ZWQzMjU1ZjBmYzRmY2IzMTU3NzE0
ZGRhMTUwHhcNMjUwNjI4MTgwMTEzWhcNMjUwNjI5MTgwMTEzWjAzMTEwLwYDVQQD
Eyg0N2IwNDI2M2VkN2ZkZmM2NjJkMWY3MjYxY2QxZGRhN2IxMGY0NzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/vPEHZISRp+obWs4jS4MrzR11HP
ylN5n2UK1wrBUdI9z8GC+mL7u58jj5TiJUoCVLD3Z7+Rb+EeFlzGsAHRJMno4iF2
7Gdfm+yHN3snmOK1zTL1gwWsc9z9Qm5PDQKofkA2rRTD6kQJrtJC3iYt5ojJQ7dZ
qzbqqLIfofnCmuOL1Dn+m5d022hlWDvXP1SFbMcxE/9imsOm2E13tbS768Jk7OOx
4nYIbrHvycifqmx94S8KYOeMZXD+CpiD6DWnJA4edHVaOtkpjtSspu3JW7lkJKwk
yrduOAZr/Ol6GC71PBGirC2BoPanNvc3BPWu1Rmah7OTQddkKuFf+nfqhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEewQmPtf9/GYtH3JhzR3aexD0eRMB8GA1UdIwQY
MBaAFAYMnsXUBYbtMlXw/E/LMVdxTdoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmd5ZXhkUUZodTB5VmZEOFQ4c3hWM0ZOMmhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hZTNhM2UtMmMwYy00MDVlLWJjZDct
OWUwYTUxM2RlZWYyLzEvQmd5ZXhkUUZodTB5VmZEOFQ4c3hWM0ZOMmhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hZTNhM2UtMmMwYy00MDVlLWJjZDctOWUwYTUxM2RlZWYy
LzEvQmd5ZXhkUUZodTB5VmZEOFQ4c3hWM0ZOMmhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbjHEUhp
jdSKriDsou7+BBAkloptg1YnzGx6PWDeNYOHwkrJwfkOdISKLQrJT0GbQnVCrxxy
b16fXm3KA01CpOxmlcM3vkHTHVPfi/13c1Te8z5P/ItRFMZ3MFntEpk5w9l0EU5i
Be4BU8h3LTSKQbOlNbhXYY5HfMfewgJamc6y/hDc/rLBwL3pckcnIwoFFHZjpZLd
JhmfhfyBdAw85B5GxcESCnUP7BhRkZOqGoEnC4l+f1uNTKWItzgtbarQ9vutAEog
YThOZhY6NH6eZE6woS2IlStKsFCzT/sDOnInvtOpRwvhJTVr/9HdD47yqp2WIdUp
ottaaosVOBrttA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:38 2025 by rpki-client