Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
File: B0ejbXdop7MKTuy7aWTIwjfXRAE.mft (raw, json)
Hash identifier: zql+jpg/eavIiZ5msIPoJxlaRqurnuksJIsIIG0uoIo=
Subject key identifier: 2E:8D:71:E1:BF:5B:C5:B1:AF:97:05:E7:84:A3:58:9F:BB:EC:A5:63
Authority key identifier: 07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
Certificate issuer: /CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Certificate serial: 0198D4A821AD961023EAA8AF63D4CE0BBF3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 02:00:44 +0000
Manifest this update: Sat 23 Aug 2025 02:00:44 +0000
Manifest next update: Sun 24 Aug 2025 02:00:44 +0000
Files and hashes: 1: 2CIwVa2guH9I9mE05PyNSk_zLJw.roa (hash: 6WMXH3mPe6YH5cQJoRqeEOdgwx8H7f+4sGKrej+Vxnc=)
2: B0ejbXdop7MKTuy7aWTIwjfXRAE.crl (hash: mfHRTVyf4fcf1x7mw9++IzhwEjzk0sYHUMTuNGC5v58=)
3: U9ESt7XkFJMxc8hDKsx2ew3J7YE.roa (hash: IAjM9oVyj8oid2QGC8YSaV020xf4N3UKnDXpYd0lkxk=)
4: o1r9uGgWSMkBr8TYtqeKLaE5QOE.roa (hash: 7RzPsp3uHfpDYCSJda3tVfo5/SCH0Ae2ssPUnQ5pNnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:21:ad:96:10:23:ea:a8:af:63:d4:ce:0b:bf:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Validity
Not Before: Aug 23 02:00:44 2025 GMT
Not After : Aug 24 02:00:44 2025 GMT
Subject: CN=2e8d71e1bf5bc5b1af9705e784a3589fbbeca563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:10:f5:07:28:bc:7e:9a:61:87:62:67:69:
49:32:be:68:27:32:61:88:be:02:f6:d7:15:dc:c0:
b9:05:e6:49:74:0c:af:67:52:ce:d9:8b:dc:f9:33:
24:bc:97:03:bf:7f:93:5c:a0:b3:80:6b:16:df:7f:
7e:88:3f:b7:52:62:fe:59:1c:95:70:93:4a:2e:db:
d9:94:26:dc:7f:13:2b:68:ae:df:eb:c1:96:6f:bc:
bb:3c:68:1f:d1:dc:43:41:78:bb:5e:d3:5d:07:06:
79:8e:8a:c4:40:2d:94:23:3f:c9:dc:c5:f9:c2:d9:
aa:8c:2a:39:f7:55:5a:60:04:e4:cc:5f:00:e1:c4:
85:76:45:37:61:65:9c:36:2c:0c:52:e7:f4:f7:47:
91:50:bd:c7:a7:db:dc:22:5b:3c:09:81:a3:bb:5f:
19:4d:8f:5c:fd:3c:8a:9f:9e:20:e0:af:9a:78:47:
e9:bc:2b:c5:8f:b9:fb:25:03:78:31:3e:26:cc:3f:
61:ce:a4:c5:2f:fd:51:07:fd:2f:d9:fc:f6:4c:29:
87:f8:60:b0:92:7a:b2:6f:f3:11:4b:a4:a7:6e:ec:
88:a6:83:de:5d:7e:ec:c4:26:2b:04:73:77:a0:86:
41:4c:4c:70:78:1f:cd:aa:ba:ac:f9:c6:f5:24:f1:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8D:71:E1:BF:5B:C5:B1:AF:97:05:E7:84:A3:58:9F:BB:EC:A5:63
X509v3 Authority Key Identifier:
keyid:07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7c:d2:58:95:7d:02:8e:be:c8:cf:1c:cd:0a:12:59:53:8b:
ad:97:72:42:11:0d:26:53:0f:51:76:77:43:b9:8a:9f:7a:7e:
1c:c1:c5:8b:11:f7:96:60:84:03:e0:17:9f:ad:64:39:6b:99:
a9:5c:c2:7d:5e:46:21:43:0f:48:a7:6d:69:2b:ec:41:f7:69:
78:25:cc:2a:de:53:4c:09:b7:78:bf:35:c4:aa:d3:b4:91:69:
3c:d1:94:af:ee:3d:5e:50:b0:22:54:3c:65:d0:43:15:3f:cf:
82:e0:b0:36:c8:6e:5b:ce:2b:ce:f8:25:0f:5d:10:97:9e:72:
bd:ec:6d:e0:d3:3f:84:8c:5c:15:8d:b2:29:24:0f:a4:ce:98:
18:e8:e4:4c:47:f1:4b:9d:52:a6:1e:34:f8:b6:6e:11:5e:be:
ba:fb:45:0f:5b:c4:4c:30:f8:a8:ea:0c:02:1c:dc:18:54:f7:
50:91:92:f6:3d:2c:16:61:d2:25:c6:6c:1d:fb:56:45:c1:a5:
60:56:f7:73:ef:6e:bf:95:14:2b:e8:bb:0d:99:72:f0:54:56:
0e:f1:03:b6:1d:e5:5b:4c:91:0b:58:1f:4c:ac:ef:79:b7:69:
c6:bb:2e:d1:5e:d8:35:b2:b7:82:0a:5d:63:e9:d8:38:1e:ed:
2e:af:25:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqCGtlhAj6qivY9TOC78/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NDdhMzZkNzc2OGE3YjMwYTRlZWNiYjY5NjRjOGMyMzdk
NzQ0MDEwHhcNMjUwODIzMDIwMDQ0WhcNMjUwODI0MDIwMDQ0WjAzMTEwLwYDVQQD
EygyZThkNzFlMWJmNWJjNWIxYWY5NzA1ZTc4NGEzNTg5ZmJiZWNhNTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjwQ9QcovH6aYYdiZ2lJMr5oJzJh
iL4C9tcV3MC5BeZJdAyvZ1LO2Yvc+TMkvJcDv3+TXKCzgGsW339+iD+3UmL+WRyV
cJNKLtvZlCbcfxMraK7f68GWb7y7PGgf0dxDQXi7XtNdBwZ5jorEQC2UIz/J3MX5
wtmqjCo591VaYATkzF8A4cSFdkU3YWWcNiwMUuf090eRUL3Hp9vcIls8CYGju18Z
TY9c/TyKn54g4K+aeEfpvCvFj7n7JQN4MT4mzD9hzqTFL/1RB/0v2fz2TCmH+GCw
knqyb/MRS6SnbuyIpoPeXX7sxCYrBHN3oIZBTExweB/Nqrqs+cb1JPFfrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6NceG/W8Wxr5cF54SjWJ+77KVjMB8GA1UdIwQY
MBaAFAdHo213aKezCk7su2lkyMI310QBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjBlamJYZG9wN01LVHV5N2FXVEl3amZYUkFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85ZWFmMWUtYzllYy00NjZkLTgzNzEt
YWFiYWRkMDcxOWJhLzEvQjBlamJYZG9wN01LVHV5N2FXVEl3amZYUkFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi85ZWFmMWUtYzllYy00NjZkLTgzNzEtYWFiYWRkMDcxOWJh
LzEvQjBlamJYZG9wN01LVHV5N2FXVEl3amZYUkFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoHzSWJV9
Ao6+yM8czQoSWVOLrZdyQhENJlMPUXZ3Q7mKn3p+HMHFixH3lmCEA+AXn61kOWuZ
qVzCfV5GIUMPSKdtaSvsQfdpeCXMKt5TTAm3eL81xKrTtJFpPNGUr+49XlCwIlQ8
ZdBDFT/PguCwNshuW84rzvglD10Ql55yvext4NM/hIxcFY2yKSQPpM6YGOjkTEfx
S51Sph40+LZuEV6+uvtFD1vETDD4qOoMAhzcGFT3UJGS9j0sFmHSJcZsHftWRcGl
YFb3c+9uv5UUK+i7DZly8FRWDvEDth3lW0yRC1gfTKzvebdpxrsu0V7YNbK3ggpd
Y+nYOB7tLq8lyA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:59 2025 by rpki-client