Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json)
Hash identifier: TQfOb9c9rCkN5y3hZZ3rYq58CVkZSKLjDAn8KJXPHqI=
Subject key identifier: AE:BC:9A:FF:CE:26:47:B0:73:2B:BE:4C:9E:15:5E:9F:72:02:0B:A5
Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Certificate serial: 0198D62988EB197E0D25F8D28944C42DDE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
Manifest number: 07F8
Signing time: Sat 23 Aug 2025 09:01:42 +0000
Manifest this update: Sat 23 Aug 2025 09:01:42 +0000
Manifest next update: Sun 24 Aug 2025 09:01:42 +0000
Files and hashes: 1: 2WHBj7nv7xMvbv08rHniyjR0Fos.roa (hash: NBxIqPQUMGuLMFXfKzH7d1UwTfg7bcWtx2M9b2UcFWM=)
2: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: Cn6n/V/4vVSyVVdZsfSMOSqKi2xa5VTDVWL13hlLP6s=)
3: cq_1j-d1kfo1p9Be3sTMytcMD24.roa (hash: JNpsnNRxrePb5e9Un324eWpFZYp8SbD0XvG6AqlNJIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:88:eb:19:7e:0d:25:f8:d2:89:44:c4:2d:de:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Validity
Not Before: Aug 23 09:01:42 2025 GMT
Not After : Aug 24 09:01:42 2025 GMT
Subject: CN=aebc9affce2647b0732bbe4c9e155e9f72020ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:da:b6:ff:db:d2:10:ad:3e:f9:66:c5:a0:a1:
6e:b6:82:6b:7c:9a:62:a7:d3:ec:ea:ee:13:c1:fb:
41:10:eb:03:f5:d0:8a:bd:ff:80:c0:69:60:3c:5e:
62:82:c5:bd:7c:3b:eb:44:74:84:3b:17:d5:da:73:
92:9d:f7:92:ad:e0:c9:b5:ba:e5:de:50:64:15:be:
28:22:6d:89:92:73:ed:b3:c9:ae:17:e3:2b:9a:63:
27:a2:7a:39:7f:7a:b9:b1:13:e5:c5:e0:ac:24:5b:
ec:2f:ff:56:b8:8b:b0:ea:13:78:8c:dd:3e:53:c5:
8b:f9:f0:63:d9:1a:71:28:f6:14:03:02:11:25:48:
0e:cc:fe:5a:78:78:74:45:dd:75:21:d1:00:41:b0:
92:6d:8e:c5:32:43:46:80:94:79:50:43:1c:7d:2c:
65:71:c4:1c:d3:ba:66:12:04:98:8d:d7:1a:ec:23:
2a:4c:91:0f:9f:a5:3a:28:81:d4:60:92:ea:6e:ba:
5b:dd:b3:5f:df:5f:4d:d7:81:1d:16:68:66:ab:45:
16:f7:1c:3b:c5:ba:08:20:51:87:5b:e6:91:eb:b7:
bb:d4:5a:4b:1c:be:95:87:e7:23:7e:22:84:af:67:
3c:c0:76:e5:3e:cf:be:cd:75:96:1e:f7:a8:e7:43:
4e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BC:9A:FF:CE:26:47:B0:73:2B:BE:4C:9E:15:5E:9F:72:02:0B:A5
X509v3 Authority Key Identifier:
keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e9:a1:ed:f8:69:a7:de:e3:40:95:9d:fe:1d:4b:0d:53:9f:
f7:0b:9c:0f:e4:82:b4:12:95:71:b1:fb:96:8f:1c:22:99:6e:
b8:06:80:ca:3e:0a:86:1d:73:4b:78:cc:e5:4d:d9:84:2e:1f:
a1:22:9e:75:27:18:6f:fb:cb:52:e6:a3:e6:d8:b9:6c:e4:30:
98:01:4b:36:50:76:96:a6:2c:1d:a9:03:ca:78:62:12:09:da:
48:73:3f:a8:da:d8:65:63:06:d0:3d:7b:c7:44:b2:2c:ec:ed:
1b:91:e8:24:6a:1a:2d:bd:de:82:53:f6:16:25:13:c4:54:14:
d0:d8:b9:53:63:86:5a:ff:eb:ac:df:fb:fc:a7:e9:b2:96:a9:
28:63:af:d2:46:50:8c:a7:c3:93:fd:3a:16:b4:66:47:3f:62:
7d:30:d0:c9:ef:e3:38:5e:ae:6b:c4:98:53:34:52:ee:f9:e3:
c2:87:5c:4a:00:06:7a:11:f1:33:dd:3c:a7:f3:60:2b:2b:8c:
14:9a:b6:96:fc:2c:f0:4e:0e:0c:59:15:c8:ef:cf:cc:4d:b0:
0e:c4:c9:69:d9:be:61:e3:ac:de:fc:a1:37:bc:91:f4:e8:2d:
f6:1d:da:e2:f9:99:bc:73:fe:de:0e:d1:38:6b:9d:3d:1d:ef:
28:3f:94:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWKYjrGX4NJfjSiUTELd5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMzdhMTBhNGEwMjczZjQxZmFjZjc0NDBkNTlmMzlhZDVl
YWY2NGIwHhcNMjUwODIzMDkwMTQyWhcNMjUwODI0MDkwMTQyWjAzMTEwLwYDVQQD
EyhhZWJjOWFmZmNlMjY0N2IwNzMyYmJlNGM5ZTE1NWU5ZjcyMDIwYmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitq2/9vSEK0++WbFoKFutoJrfJpi
p9Ps6u4TwftBEOsD9dCKvf+AwGlgPF5igsW9fDvrRHSEOxfV2nOSnfeSreDJtbrl
3lBkFb4oIm2JknPts8muF+MrmmMnono5f3q5sRPlxeCsJFvsL/9WuIuw6hN4jN0+
U8WL+fBj2RpxKPYUAwIRJUgOzP5aeHh0Rd11IdEAQbCSbY7FMkNGgJR5UEMcfSxl
ccQc07pmEgSYjdca7CMqTJEPn6U6KIHUYJLqbrpb3bNf319N14EdFmhmq0UW9xw7
xboIIFGHW+aR67e71FpLHL6Vh+cjfiKEr2c8wHblPs++zXWWHveo50NOoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK68mv/OJkewcyu+TJ4VXp9yAgulMB8GA1UdIwQY
MBaAFG43oQpKAnP0H6z3RA1Z85rV6vZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mMGFlZjMtMjYzZC00ZjQxLTg4NTMt
MThiN2ViOTIzYTk5LzEvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9mMGFlZjMtMjYzZC00ZjQxLTg4NTMtMThiN2ViOTIzYTk5
LzEvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOmh7fhp
p97jQJWd/h1LDVOf9wucD+SCtBKVcbH7lo8cIpluuAaAyj4Khh1zS3jM5U3ZhC4f
oSKedScYb/vLUuaj5ti5bOQwmAFLNlB2lqYsHakDynhiEgnaSHM/qNrYZWMG0D17
x0SyLOztG5HoJGoaLb3eglP2FiUTxFQU0Ni5U2OGWv/rrN/7/KfpspapKGOv0kZQ
jKfDk/06FrRmRz9ifTDQye/jOF6ua8SYUzRS7vnjwodcSgAGehHxM908p/NgKyuM
FJq2lvws8E4ODFkVyO/PzE2wDsTJadm+YeOs3vyhN7yR9Ogt9h3a4vmZvHP+3g7R
OGudPR3vKD+UIA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:11 2025 by rpki-client