Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
File: BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json)
Hash identifier: qUQawevULKU4k4lOYcjLQcumNEh/Dk1umT+4Ty+2O0Y=
Subject key identifier: 2C:DA:89:70:D9:99:A7:B2:DE:7D:28:B7:B7:A0:AD:1F:57:FB:AA:F0
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Certificate issuer: /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial: 0197B632B283A72AF3228332CB5C9A2CA1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
Manifest number: 07C4
Signing time: Sat 28 Jun 2025 11:01:05 +0000
Manifest this update: Sat 28 Jun 2025 11:01:05 +0000
Manifest next update: Sun 29 Jun 2025 11:01:05 +0000
Files and hashes: 1: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: v0buCO+dgzmSDBsTOOLkISuCcUmuWwGKRADticZuvW4=)
2: WLEkgsNLxhLL76J5KjgZ5ke2MzY.roa (hash: RM1foKQFE5R9Jao+pHN3ZInAMoldAOTi6T7jSW4GCSU=)
3: oZ7M5J6HpPSme6D2TdfG5_Zm_5g.roa (hash: 8k6SZEwbSYAoh3FpUOBzIDoo9yUrmYt/XSxxWhqtR38=)
4: yySGGL88ifuhtX4UWyplsao1PEY.roa (hash: PUZ7Y080pWmyPRE6f/sxnztUsgX4TTtPZlKlNa3Vh2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:b2:83:a7:2a:f3:22:83:32:cb:5c:9a:2c:a1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Validity
Not Before: Jun 28 11:01:05 2025 GMT
Not After : Jun 29 11:01:05 2025 GMT
Subject: CN=2cda8970d999a7b2de7d28b7b7a0ad1f57fbaaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:97:29:20:4b:40:7c:4d:17:fb:f2:fd:58:
3d:0f:11:48:3d:43:d0:d8:b7:28:2f:01:50:68:f4:
54:8b:dd:ef:22:fe:e4:3d:3a:01:b1:4e:93:cf:a2:
c3:8b:49:d7:80:76:ea:f5:23:01:fc:63:dd:be:3b:
2a:8e:c6:3c:53:0a:4b:13:09:7f:1c:ca:84:c4:31:
3a:ea:dd:c9:0a:ed:63:22:ca:f0:d6:9f:92:47:2f:
2b:00:f5:be:79:91:ff:ec:5d:61:c3:9a:12:5f:1f:
13:4c:8d:69:41:47:4c:2c:ef:cd:b1:62:75:ae:15:
19:b0:d8:97:bb:be:5f:a8:c2:38:dc:01:63:6e:72:
0a:d0:91:d6:d4:41:aa:19:ef:cd:a3:57:2e:0a:ad:
ee:73:94:68:93:8e:3d:bb:c6:26:02:89:83:c7:20:
64:83:e4:b1:4b:34:08:9d:69:c7:25:a5:63:82:e0:
d1:3a:b0:5a:47:21:62:97:5c:26:1f:59:df:60:c1:
f7:5c:cf:fc:4a:bd:91:82:ef:dc:fb:8b:27:91:9d:
0c:cc:51:2c:bb:ac:d9:a7:96:08:fe:6b:eb:cd:d3:
7e:2a:f7:7d:ff:5c:70:1a:07:3c:a0:57:dc:78:ea:
cb:9a:89:60:59:e0:d8:6c:46:20:d9:0e:4b:5a:81:
f9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DA:89:70:D9:99:A7:B2:DE:7D:28:B7:B7:A0:AD:1F:57:FB:AA:F0
X509v3 Authority Key Identifier:
keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:eb:10:d3:a0:58:16:87:69:da:93:be:c3:f3:64:05:cb:a2:
f1:10:4d:83:4a:92:c7:88:b7:c3:a1:86:74:5e:c0:ff:4a:07:
b8:fb:7d:f9:cb:e8:fd:fe:db:01:f9:2b:02:10:16:c0:d5:7e:
d6:e9:d1:72:e8:2f:75:3c:90:d9:5c:99:d0:a3:a5:61:49:ec:
57:e5:2a:80:0e:35:e9:03:cd:30:5c:24:f9:b0:b1:a1:5c:1e:
69:31:80:36:11:a4:3b:4d:88:d8:63:8d:04:9f:72:bd:f5:86:
bb:10:55:24:1d:41:03:cd:5b:39:4f:fa:39:15:7c:51:dc:a7:
1a:02:eb:85:fa:8a:bc:9c:05:ca:36:ab:a8:94:46:0d:80:21:
c3:1e:70:08:00:95:b3:a4:37:6a:2f:76:ab:d4:79:06:b0:92:
c0:25:cf:57:6f:54:75:c4:f5:32:c7:cc:12:45:6f:b8:af:b0:
1b:c1:20:05:60:ff:51:6c:70:aa:88:e2:2c:c3:c2:41:12:34:
d5:5e:67:37:82:c2:67:f1:e5:91:42:cc:68:32:da:c1:29:53:
67:2e:46:6d:b3:31:59:03:47:40:aa:87:92:8e:0e:f6:cc:b9:
2c:79:87:68:11:0f:55:62:e9:7e:53:bb:f9:6e:69:e0:5d:3a:
67:1c:23:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MrKDpyrzIoMyy1yaLKHJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZjQ2YWY4ODVkMWNjYmIwYzA5YjA2ODcwNzg1YjVlNjkx
Nzg3ZTEwHhcNMjUwNjI4MTEwMTA1WhcNMjUwNjI5MTEwMTA1WjAzMTEwLwYDVQQD
EygyY2RhODk3MGQ5OTlhN2IyZGU3ZDI4YjdiN2EwYWQxZjU3ZmJhYWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MuXKSBLQHxNF/vy/Vg9DxFIPUPQ
2LcoLwFQaPRUi93vIv7kPToBsU6Tz6LDi0nXgHbq9SMB/GPdvjsqjsY8UwpLEwl/
HMqExDE66t3JCu1jIsrw1p+SRy8rAPW+eZH/7F1hw5oSXx8TTI1pQUdMLO/NsWJ1
rhUZsNiXu75fqMI43AFjbnIK0JHW1EGqGe/No1cuCq3uc5Rok449u8YmAomDxyBk
g+SxSzQInWnHJaVjguDROrBaRyFil1wmH1nfYMH3XM/8Sr2Rgu/c+4snkZ0MzFEs
u6zZp5YI/mvrzdN+Kvd9/1xwGgc8oFfceOrLmolgWeDYbEYg2Q5LWoH5TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzaiXDZmaey3n0ot7egrR9X+6rwMB8GA1UdIwQY
MBaAFAT0aviF0cy7DAmwaHB4W15pF4fhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mYjUzZDYtYWRhOC00MjZkLTk5ZmIt
YzVjZjRiM2IxY2E2LzEvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9mYjUzZDYtYWRhOC00MjZkLTk5ZmItYzVjZjRiM2IxY2E2
LzEvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYusQ06BY
Fodp2pO+w/NkBcui8RBNg0qSx4i3w6GGdF7A/0oHuPt9+cvo/f7bAfkrAhAWwNV+
1unRcugvdTyQ2VyZ0KOlYUnsV+UqgA416QPNMFwk+bCxoVweaTGANhGkO02I2GON
BJ9yvfWGuxBVJB1BA81bOU/6ORV8UdynGgLrhfqKvJwFyjarqJRGDYAhwx5wCACV
s6Q3ai92q9R5BrCSwCXPV29UdcT1MsfMEkVvuK+wG8EgBWD/UWxwqojiLMPCQRI0
1V5nN4LCZ/HlkULMaDLawSlTZy5GbbMxWQNHQKqHko4O9sy5LHmHaBEPVWLpflO7
+W5p4F06ZxwjnQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:53 2025 by rpki-client