Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
File: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json)
Hash identifier: NwYc5k0x6CKes5T6yeq7fLboqSNvSf5srjZ2qMg67J0=
Subject key identifier: D4:8D:17:21:1F:C8:F4:83:DB:D3:A1:F4:F7:44:C2:ED:87:34:E2:B4
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial: 0198D4734B1CEC4002C80E0AAE03278B66C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
Manifest number: 11A3
Signing time: Sat 23 Aug 2025 01:03:02 +0000
Manifest this update: Sat 23 Aug 2025 01:03:02 +0000
Manifest next update: Sun 24 Aug 2025 01:03:02 +0000
Files and hashes: 1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: bpQvRmkt3hJucmBmGdVWXQjqMoM903kltaMwN7BCsbE=)
2: xewq6JL7wUlqxM-_oFBJPbWzZVw.roa (hash: gGSE6S3F5awwRunu5t2dFHcZlnB1N7Se7jB7GkE6lSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:4b:1c:ec:40:02:c8:0e:0a:ae:03:27:8b:66:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Validity
Not Before: Aug 23 01:03:02 2025 GMT
Not After : Aug 24 01:03:02 2025 GMT
Subject: CN=d48d17211fc8f483dbd3a1f4f744c2ed8734e2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e0:ea:ab:c9:3d:7f:60:da:47:95:0a:3f:e5:
88:0f:22:e1:30:ae:f8:63:cf:39:ae:21:1a:8f:64:
61:db:cb:cd:39:55:fb:a0:03:a1:c2:c6:ca:88:6b:
4d:ac:e4:c4:90:59:c1:74:a5:9c:4d:a6:9a:7a:63:
5c:2d:ca:50:5a:c0:1d:ec:ac:43:28:1f:e5:9d:f9:
e9:87:3f:36:a9:9c:e7:af:9e:a8:b1:2a:df:fb:13:
59:b4:c0:5c:a9:5b:be:1e:ef:a0:c1:9d:62:33:50:
f8:37:9c:13:ee:10:de:eb:15:97:26:30:66:2b:4d:
0a:27:10:aa:68:82:99:f8:a4:0a:b2:3b:f2:b8:c8:
4e:7b:87:d0:52:05:8d:a9:dc:eb:37:40:66:7c:33:
19:44:da:6f:62:4a:af:70:b4:e7:1e:f1:c2:40:9c:
90:bb:5d:92:9e:ed:a4:de:0b:f6:4f:3e:cb:21:49:
a8:9f:29:f6:3e:d1:d3:80:61:a9:50:a0:58:eb:eb:
17:4b:ef:b3:59:4f:49:c4:21:ed:bc:07:3d:91:32:
3a:5e:27:d8:73:a5:1d:18:3c:28:7c:62:25:0a:c4:
f8:ae:41:5d:89:0b:e6:7c:3f:dc:37:b6:4b:1d:8e:
ca:c2:fb:64:6f:b1:d4:ee:79:6e:82:36:d8:14:9d:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8D:17:21:1F:C8:F4:83:DB:D3:A1:F4:F7:44:C2:ED:87:34:E2:B4
X509v3 Authority Key Identifier:
keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b3:b1:22:88:c8:73:df:19:4c:d2:a0:16:56:df:07:86:9d:
1f:83:6b:dc:57:bb:17:5c:db:c7:8b:5e:2c:d6:e7:76:12:c5:
7c:f7:3d:e2:ac:14:06:95:de:8a:83:22:5c:4a:20:5e:ca:4f:
04:d8:26:79:09:53:fe:32:2a:e2:7e:28:76:9a:ca:e4:63:a1:
19:56:c8:eb:ad:cc:b7:06:da:51:0d:89:1b:1c:e1:c1:e3:d7:
b4:48:c4:37:8f:52:ae:e2:d2:36:ae:e8:e6:16:72:8f:fb:3a:
2a:f1:d3:c3:60:3d:39:2b:81:54:dd:76:a1:93:da:e7:f2:64:
a1:94:d8:26:0f:77:87:30:63:49:d9:ca:5c:8f:73:90:62:2b:
17:a0:5d:64:a9:fe:fd:a9:3a:c6:19:00:0f:9e:e3:02:16:32:
6c:49:41:08:82:e6:4d:75:ee:57:86:5c:e0:48:ad:11:6c:17:
f7:a2:f1:9c:9a:87:18:5e:71:74:2e:92:a9:7c:30:70:80:d3:
d4:2f:3f:15:19:50:b4:23:77:7e:b4:3c:dd:06:06:b4:83:bf:
3b:da:a2:50:b0:fd:84:ae:cb:1a:26:01:14:e6:6f:86:e7:8c:
8f:77:37:84:8b:cf:be:75:6a:a8:ab:20:2e:27:9c:6f:e4:46:
c8:f5:9c:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc0sc7EACyA4KrgMni2bJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Y2YxOWUxOTdiZGFmOTRlNjEwMGUwZTE3ODA4ZTEzZDQ4
NTRmOWMwHhcNMjUwODIzMDEwMzAyWhcNMjUwODI0MDEwMzAyWjAzMTEwLwYDVQQD
EyhkNDhkMTcyMTFmYzhmNDgzZGJkM2ExZjRmNzQ0YzJlZDg3MzRlMmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuDqq8k9f2DaR5UKP+WIDyLhMK74
Y885riEaj2Rh28vNOVX7oAOhwsbKiGtNrOTEkFnBdKWcTaaaemNcLcpQWsAd7KxD
KB/lnfnphz82qZznr56osSrf+xNZtMBcqVu+Hu+gwZ1iM1D4N5wT7hDe6xWXJjBm
K00KJxCqaIKZ+KQKsjvyuMhOe4fQUgWNqdzrN0BmfDMZRNpvYkqvcLTnHvHCQJyQ
u12Snu2k3gv2Tz7LIUmonyn2PtHTgGGpUKBY6+sXS++zWU9JxCHtvAc9kTI6XifY
c6UdGDwofGIlCsT4rkFdiQvmfD/cN7ZLHY7Kwvtkb7HU7nlugjbYFJ10gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSNFyEfyPSD29Oh9PdEwu2HNOK0MB8GA1UdIwQY
MBaAFAbPGeGXva+U5hAODheAjhPUhU+cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi85OGQ2MjAtMTU5OS00ODYzLTk2Mjkt
MzU2NTA1MzAzYzQ5LzEvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi85OGQ2MjAtMTU5OS00ODYzLTk2MjktMzU2NTA1MzAzYzQ5
LzEvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbOxIojI
c98ZTNKgFlbfB4adH4Nr3Fe7F1zbx4teLNbndhLFfPc94qwUBpXeioMiXEogXspP
BNgmeQlT/jIq4n4odprK5GOhGVbI663MtwbaUQ2JGxzhwePXtEjEN49SruLSNq7o
5hZyj/s6KvHTw2A9OSuBVN12oZPa5/JkoZTYJg93hzBjSdnKXI9zkGIrF6BdZKn+
/ak6xhkAD57jAhYybElBCILmTXXuV4Zc4EitEWwX96LxnJqHGF5xdC6SqXwwcIDT
1C8/FRlQtCN3frQ83QYGtIO/O9qiULD9hK7LGiYBFOZvhueMj3c3hIvPvnVqqKsg
Liecb+RGyPWcWg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:54:55 2025 by rpki-client