Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
File: v60IrIYttq4LsLiArsBV7by7gvw.mft (raw, json)
Hash identifier: 0qJ0tenD84KmN9ttf+MmaAce8LKmwE5hnKOfW4GsnEw=
Subject key identifier: 3B:C6:25:2C:68:C9:5C:33:1A:7B:E6:7F:64:B2:C3:F1:74:E4:53:DB
Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
Certificate issuer: /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Certificate serial: 0197CDCDDC691AFF0010E4CEFF82AEE537B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
Manifest number: 0D9B
Signing time: Thu 03 Jul 2025 01:01:49 +0000
Manifest this update: Thu 03 Jul 2025 01:01:49 +0000
Manifest next update: Fri 04 Jul 2025 01:01:49 +0000
Files and hashes: 1: CZZ5ipuaAOE-Yr5zJDMCRrkyVSA.roa (hash: iFc83ywiMJmrxS1NXOM6QWOY3OsVmvxahP4mNSEaMZM=)
2: v60IrIYttq4LsLiArsBV7by7gvw.crl (hash: jb/lPTnKxUUmu7H1cXHcnI62beEQIucSCW5+lsOHXbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:dc:69:1a:ff:00:10:e4:ce:ff:82:ae:e5:37:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Validity
Not Before: Jul 3 01:01:49 2025 GMT
Not After : Jul 4 01:01:49 2025 GMT
Subject: CN=3bc6252c68c95c331a7be67f64b2c3f174e453db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:9b:bb:c2:a8:72:c8:c7:89:c2:2a:4c:e6:
10:c6:82:26:59:d4:17:5f:a9:c4:b5:d7:d3:66:87:
6f:0a:6e:1d:a0:0c:e2:21:0b:63:be:ac:da:cc:a5:
cf:84:5e:08:5d:82:08:24:dc:c2:90:d0:75:3c:ac:
9f:d5:be:65:49:46:79:94:58:43:4c:ea:f3:70:55:
ee:98:ba:b3:b6:70:48:b2:45:05:b7:35:ed:bc:6b:
cd:0a:f8:5d:42:20:c5:32:a7:5c:d8:e5:1d:2e:ea:
bb:a0:da:fe:3e:55:25:11:a1:16:50:ce:04:bd:a1:
0b:60:3d:21:aa:76:6b:45:ff:da:82:7b:cd:f6:9e:
d7:68:51:54:cf:bf:4b:d9:45:c1:17:b8:d2:a7:e1:
d1:1b:53:a4:a6:7f:93:b9:7b:ae:00:98:04:c5:2d:
ef:f8:4e:f2:81:ee:59:37:79:45:1f:86:72:99:07:
4d:c9:08:53:76:f3:89:df:71:2f:ad:58:5e:4a:50:
80:2c:e7:dd:c1:82:64:41:16:63:ac:d7:fc:52:87:
39:ba:0b:68:b5:a0:d6:6e:e1:7b:31:7b:8f:8f:31:
4b:3f:2b:6c:37:a9:ef:b0:56:21:e6:f3:91:53:48:
26:da:66:be:81:6d:c1:6c:ed:03:7d:3a:74:4c:74:
a2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C6:25:2C:68:C9:5C:33:1A:7B:E6:7F:64:B2:C3:F1:74:E4:53:DB
X509v3 Authority Key Identifier:
keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:59:6b:70:bc:cb:39:f1:b0:6c:34:d0:6e:5a:72:f5:fb:fc:
eb:b4:6b:e7:7c:49:d0:d9:c3:0e:7b:eb:43:8e:d6:a3:94:10:
16:2d:6e:df:34:aa:89:06:a6:76:99:f6:f8:60:d0:b5:d5:2e:
6b:f5:e6:cd:3a:81:7d:1d:39:59:3d:27:cd:94:f2:de:7a:da:
c8:fc:7f:d0:dc:21:a8:8d:88:98:21:36:09:22:17:46:c2:01:
a4:36:7e:d3:c3:75:ad:0d:52:49:79:ff:da:ed:0a:ec:dc:43:
36:3f:d2:50:f8:ea:1e:f3:6d:37:a3:48:a5:0b:e1:5b:3f:6b:
b8:f3:80:dc:da:0a:f2:3e:90:c0:25:86:fb:59:ac:b7:8c:8e:
15:d3:fa:1c:37:0f:8f:bb:fc:bb:4e:ef:90:dd:36:80:26:c8:
92:35:09:ca:ab:2e:0e:9b:eb:34:b6:81:89:b4:68:4e:f7:17:
07:58:62:f8:4e:10:0d:44:32:be:fb:e2:b8:09:6a:4e:a0:a5:
00:97:9c:ba:c5:d0:9c:64:32:ee:fe:a5:c0:e1:ea:2b:d8:d8:
86:18:bf:cf:2b:90:2b:c9:1c:84:58:b6:de:32:72:cb:a3:26:
17:f8:af:c2:85:8b:d6:00:40:f1:05:d1:8a:dc:ae:03:41:b1:
59:6b:2c:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfNzdxpGv8AEOTO/4Ku5Te0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYWQwOGFjODYyZGI2YWUwYmIwYjg4MGFlYzA1NWVkYmNi
YjgyZmMwHhcNMjUwNzAzMDEwMTQ5WhcNMjUwNzA0MDEwMTQ5WjAzMTEwLwYDVQQD
EygzYmM2MjUyYzY4Yzk1YzMzMWE3YmU2N2Y2NGIyYzNmMTc0ZTQ1M2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWObu8KocsjHicIqTOYQxoImWdQX
X6nEtdfTZodvCm4doAziIQtjvqzazKXPhF4IXYIIJNzCkNB1PKyf1b5lSUZ5lFhD
TOrzcFXumLqztnBIskUFtzXtvGvNCvhdQiDFMqdc2OUdLuq7oNr+PlUlEaEWUM4E
vaELYD0hqnZrRf/agnvN9p7XaFFUz79L2UXBF7jSp+HRG1Okpn+TuXuuAJgExS3v
+E7yge5ZN3lFH4ZymQdNyQhTdvOJ33EvrVheSlCALOfdwYJkQRZjrNf8Uoc5ugto
taDWbuF7MXuPjzFLPytsN6nvsFYh5vORU0gm2ma+gW3BbO0DfTp0THSiZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvGJSxoyVwzGnvmf2Syw/F05FPbMB8GA1UdIwQY
MBaAFL+tCKyGLbauC7C4gK7AVe28u4L8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNWRjNjEtODgyYi00NjM2LWFmZjEt
MWZiM2Y4MTc2MDhmLzEvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kNWRjNjEtODgyYi00NjM2LWFmZjEtMWZiM2Y4MTc2MDhm
LzEvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVlrcLzL
OfGwbDTQblpy9fv867Rr53xJ0NnDDnvrQ47Wo5QQFi1u3zSqiQamdpn2+GDQtdUu
a/XmzTqBfR05WT0nzZTy3nrayPx/0NwhqI2ImCE2CSIXRsIBpDZ+08N1rQ1SSXn/
2u0K7NxDNj/SUPjqHvNtN6NIpQvhWz9ruPOA3NoK8j6QwCWG+1mst4yOFdP6HDcP
j7v8u07vkN02gCbIkjUJyqsuDpvrNLaBibRoTvcXB1hi+E4QDUQyvvviuAlqTqCl
AJecusXQnGQy7v6lwOHqK9jYhhi/zyuQK8kchFi23jJyy6MmF/ivwoWL1gBA8QXR
ityuA0GxWWssMQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 06:55:06 2025 by rpki-client