Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File: B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier: SKJlZ12A1H9dvvjo0LyG3Ji7szgivcLwSe2J4vNdry8=
Subject key identifier: 23:8B:08:4E:E4:BE:8E:FA:2B:B8:A8:8E:E9:6E:A1:8F:F3:6C:A2:14
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial: 0197B6A040A99578DDD4C51BB0B7986A2A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number: 08F9
Signing time: Sat 28 Jun 2025 13:00:44 +0000
Manifest this update: Sat 28 Jun 2025 13:00:44 +0000
Manifest next update: Sun 29 Jun 2025 13:00:44 +0000
Files and hashes: 1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: RWlWaRdMG3J/ct65p7DU/x98qKPVrzsYGHL8sISsZqg=)
2: s5r9yap3tom_HtotpIwIYRM_tQI.roa (hash: nsesgmnToPnc+rmcM0u9Mw7MgCf2v2fzdAWiv7iq1Wc=)
3: y-daVj-enHGwMoAEp3dFw-2QKEo.roa (hash: 0URxQ+7I2C4N/tzneV2QeiIUIu31rOBP14ZL34RLUMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:40:a9:95:78:dd:d4:c5:1b:b0:b7:98:6a:2a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Validity
Not Before: Jun 28 13:00:44 2025 GMT
Not After : Jun 29 13:00:44 2025 GMT
Subject: CN=238b084ee4be8efa2bb8a88ee96ea18ff36ca214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:e6:0b:f9:43:50:16:c4:bc:e9:be:e5:af:
33:33:61:c8:fb:df:f4:59:75:98:ae:cc:f8:90:ee:
1a:4e:1b:81:ac:72:ae:63:39:8b:a2:8d:ea:26:1e:
c9:28:b1:28:50:09:21:7c:64:2e:d1:8f:10:a2:5f:
44:b3:5e:53:91:a2:bd:1a:0f:df:5c:a9:dc:70:cc:
22:6e:b7:5b:f3:74:4a:e1:58:5e:48:76:7e:4e:be:
58:b7:da:74:e5:06:57:f7:4f:9b:37:21:b8:ed:dc:
02:0e:41:66:92:c0:1c:67:36:b4:2c:a7:09:28:e0:
26:d0:ec:7c:fe:f5:47:6a:c8:81:8a:e5:39:7f:53:
69:23:8f:15:9c:b7:c3:c5:27:31:92:f0:65:bf:50:
53:cf:02:49:0d:2f:a0:af:7c:67:ce:49:80:45:0a:
14:7a:2a:a9:93:09:0d:34:d7:7c:36:a5:fc:94:f6:
ed:07:85:73:43:a6:09:8e:0d:8e:fc:d4:f1:ce:66:
1d:c5:43:0b:24:ce:70:09:87:2d:de:5e:1c:04:c5:
8c:62:c2:84:2f:50:24:99:9a:4b:0f:9e:f0:01:4a:
d8:10:26:a0:ea:a0:e4:92:b9:56:be:03:2c:3c:8d:
a0:fb:54:d6:df:f8:45:26:ac:a7:8f:8c:fd:b8:27:
82:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8B:08:4E:E4:BE:8E:FA:2B:B8:A8:8E:E9:6E:A1:8F:F3:6C:A2:14
X509v3 Authority Key Identifier:
keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:aa:6f:fe:00:dd:9f:ad:21:d6:3c:0c:7e:d3:9c:68:db:47:
9d:82:d2:ba:42:25:58:91:fb:6f:1a:18:33:a2:b4:66:b3:c2:
d3:ff:84:3d:0d:1a:1a:53:67:59:92:68:fe:f9:d3:a2:c7:b0:
c6:ca:7e:95:53:16:7b:c1:68:f0:78:73:a3:e8:1d:a8:12:1e:
9e:a1:64:62:7f:5f:3e:5f:65:ec:9f:a7:dc:0f:5b:c5:12:44:
d1:69:78:de:fa:e1:0a:2f:c9:72:2a:d3:25:93:a0:2f:23:2b:
c3:49:09:08:53:f6:ea:19:b4:d1:11:78:7d:88:74:79:48:c3:
2b:b6:c3:24:50:6b:70:54:ae:40:ed:d7:e8:7d:ac:1d:26:47:
ee:a0:4c:8b:01:72:4c:e4:7d:1d:99:4d:ac:8f:17:04:2f:26:
cb:4f:f2:52:64:19:e4:0c:b8:0a:2d:f9:ec:b6:a5:11:55:19:
fe:9f:fa:4a:9f:5c:c6:6d:6e:2c:fd:07:83:9a:54:60:a0:1c:
28:25:a4:24:fc:60:81:d0:88:3a:6a:e3:32:63:ca:8e:59:0c:
e1:de:36:60:0e:49:19:aa:5e:7a:67:aa:43:c8:fd:e6:d8:8c:
29:3d:94:83:38:89:df:80:85:d6:d7:48:52:f9:53:f6:01:13:
25:d0:d4:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oECplXjd1MUbsLeYaioPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NWZkYjBkZTQwNTEzNDdhMjFlOTYyOGFjNDE3MzY3MzRj
YjRmMmIwHhcNMjUwNjI4MTMwMDQ0WhcNMjUwNjI5MTMwMDQ0WjAzMTEwLwYDVQQD
EygyMzhiMDg0ZWU0YmU4ZWZhMmJiOGE4OGVlOTZlYTE4ZmYzNmNhMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ7mC/lDUBbEvOm+5a8zM2HI+9/0
WXWYrsz4kO4aThuBrHKuYzmLoo3qJh7JKLEoUAkhfGQu0Y8Qol9Es15TkaK9Gg/f
XKnccMwibrdb83RK4VheSHZ+Tr5Yt9p05QZX90+bNyG47dwCDkFmksAcZza0LKcJ
KOAm0Ox8/vVHasiBiuU5f1NpI48VnLfDxScxkvBlv1BTzwJJDS+gr3xnzkmARQoU
eiqpkwkNNNd8NqX8lPbtB4VzQ6YJjg2O/NTxzmYdxUMLJM5wCYct3l4cBMWMYsKE
L1AkmZpLD57wAUrYECag6qDkkrlWvgMsPI2g+1TW3/hFJqynj4z9uCeCIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOLCE7kvo76K7iojuluoY/zbKIUMB8GA1UdIwQY
MBaAFAdf2w3kBRNHoh6WKKxBc2c0y08rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUt
Zjc1MzFhMmI2MjQ3LzEvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUtZjc1MzFhMmI2MjQ3
LzEvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKpv/gDd
n60h1jwMftOcaNtHnYLSukIlWJH7bxoYM6K0ZrPC0/+EPQ0aGlNnWZJo/vnTosew
xsp+lVMWe8Fo8Hhzo+gdqBIenqFkYn9fPl9l7J+n3A9bxRJE0Wl43vrhCi/JcirT
JZOgLyMrw0kJCFP26hm00RF4fYh0eUjDK7bDJFBrcFSuQO3X6H2sHSZH7qBMiwFy
TOR9HZlNrI8XBC8my0/yUmQZ5Ay4Ci357LalEVUZ/p/6Sp9cxm1uLP0Hg5pUYKAc
KCWkJPxggdCIOmrjMmPKjlkM4d42YA5JGapeemeqQ8j95tiMKT2UgziJ34CF1tdI
UvlT9gETJdDUfg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:17 2025 by rpki-client