Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json)
Hash identifier: VZI2BZboUQ3JEW6xpzDNBoVgvKmXvo3m3Fp/Ab4biXc=
Subject key identifier: 41:FB:CB:06:52:59:0D:5B:DA:78:09:7B:BD:D4:2A:43:BA:3E:14:FB
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 0198D4E0810942144E803D51BBCAA60B8330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
Manifest number: 0C13
Signing time: Sat 23 Aug 2025 03:02:19 +0000
Manifest this update: Sat 23 Aug 2025 03:02:19 +0000
Manifest next update: Sun 24 Aug 2025 03:02:19 +0000
Files and hashes: 1: U_3B74ujhAJrCWsRNX6BqqwgnVw.roa (hash: t7MohkwWoi0EopfC0Tnorl6v62Y4aRFAg2yz8Q6y9x8=)
2: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: nfOL9dVEyh9xDFiMkBUt5shjta3xDwV0UFPE7IFUHSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:81:09:42:14:4e:80:3d:51:bb:ca:a6:0b:83:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: Aug 23 03:02:19 2025 GMT
Not After : Aug 24 03:02:19 2025 GMT
Subject: CN=41fbcb0652590d5bda78097bbdd42a43ba3e14fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:c2:dd:30:16:bc:bb:95:80:c6:05:7a:41:
26:aa:43:bd:8e:c5:d3:11:a4:32:5f:31:78:7e:1e:
24:82:8d:fe:b3:3b:c2:78:31:e4:1f:3d:f5:2d:c0:
74:51:1d:5b:75:df:24:eb:dc:e4:ff:e5:24:9b:23:
69:03:d1:96:56:87:1b:0c:d0:4a:96:13:c9:1c:f2:
2f:af:99:d5:92:10:6a:e7:45:3e:a7:b1:8b:54:22:
6c:22:b7:6c:83:10:3d:33:da:d9:32:07:ad:51:3d:
8c:a2:f9:f6:25:88:82:c8:26:82:22:06:b1:68:b5:
2b:6d:e8:45:8a:56:23:4a:01:01:34:ac:35:3d:78:
52:c5:a9:50:83:7f:84:fc:b6:76:b6:f7:81:ba:99:
cc:65:9b:fe:ce:84:66:4d:e9:48:66:ab:23:79:ca:
16:ab:65:b5:c2:d2:80:61:7a:18:85:70:ad:8a:8f:
db:c0:22:bd:1c:df:58:b8:c3:c5:98:c6:c0:bb:bb:
ad:33:e2:dc:e7:11:b4:05:6e:22:b8:22:f3:cb:fc:
ff:53:6c:51:0f:9a:8d:01:84:3a:cb:8d:c6:2b:69:
54:f3:6a:5c:af:76:fc:a1:ae:ba:0b:eb:ac:ec:72:
62:02:ee:d4:9d:87:47:7c:3c:27:a1:52:dc:12:ff:
91:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FB:CB:06:52:59:0D:5B:DA:78:09:7B:BD:D4:2A:43:BA:3E:14:FB
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2b:8d:23:3c:bc:3e:bd:3e:28:a4:20:97:27:2d:63:d2:6a:
77:0e:a6:7f:e0:aa:88:01:58:bf:e2:41:26:3d:d3:e1:94:c5:
cf:d0:e9:c7:bb:76:10:3b:88:49:8f:b3:3b:d3:75:3b:60:d0:
a9:f0:17:65:11:93:63:d8:43:01:33:7d:53:b1:b4:45:23:8d:
e3:29:62:e4:ce:4c:69:f4:88:34:73:5b:ce:a4:ea:32:e0:79:
6b:71:46:57:96:25:0e:70:5b:50:67:33:27:e7:aa:31:6e:4e:
ec:dd:a3:db:f5:14:43:9a:f7:c8:39:f2:bc:d5:a6:d2:ca:ee:
57:78:9b:25:cb:a3:bf:8f:52:b6:cd:55:8a:1d:71:0c:7f:27:
cf:c0:ef:42:97:39:37:ec:6b:9b:5c:e0:5c:f0:b1:6b:c7:58:
9c:77:28:31:68:21:6d:e9:b7:b9:92:ac:f8:86:73:e5:fb:0d:
79:90:d8:80:d0:82:a9:27:c1:f2:fc:74:5c:d9:62:df:2b:46:
cd:8a:dc:c2:25:9b:fb:a5:97:f4:94:64:75:b8:7e:ba:0b:8a:
ac:9b:58:51:df:6b:66:4b:d0:8a:bd:d1:a1:24:3e:0d:6e:78:
40:60:22:4f:05:5d:7f:de:16:71:fc:9b:9c:c9:f8:a2:3d:b5:
a4:08:db:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4IEJQhROgD1Ru8qmC4MwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYTk0NGVhYTljN2Y2ZDQ1NzQwNmYxNDJjNmUyOGNmNWFj
YzZhYzgwHhcNMjUwODIzMDMwMjE5WhcNMjUwODI0MDMwMjE5WjAzMTEwLwYDVQQD
Eyg0MWZiY2IwNjUyNTkwZDViZGE3ODA5N2JiZGQ0MmE0M2JhM2UxNGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydTC3TAWvLuVgMYFekEmqkO9jsXT
EaQyXzF4fh4kgo3+szvCeDHkHz31LcB0UR1bdd8k69zk/+UkmyNpA9GWVocbDNBK
lhPJHPIvr5nVkhBq50U+p7GLVCJsIrdsgxA9M9rZMgetUT2Movn2JYiCyCaCIgax
aLUrbehFilYjSgEBNKw1PXhSxalQg3+E/LZ2tveBupnMZZv+zoRmTelIZqsjecoW
q2W1wtKAYXoYhXCtio/bwCK9HN9YuMPFmMbAu7utM+Lc5xG0BW4iuCLzy/z/U2xR
D5qNAYQ6y43GK2lU82pcr3b8oa66C+us7HJiAu7UnYdHfDwnoVLcEv+RIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEH7ywZSWQ1b2ngJe73UKkO6PhT7MB8GA1UdIwQY
MBaAFGypROqpx/bUV0BvFCxuKM9azGrIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8wZWRjMGItN2ViYi00NzBhLWIwNTYt
M2RlNDRmYzhiM2I1LzEvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8wZWRjMGItN2ViYi00NzBhLWIwNTYtM2RlNDRmYzhiM2I1
LzEvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqiuNIzy8
Pr0+KKQglyctY9Jqdw6mf+CqiAFYv+JBJj3T4ZTFz9Dpx7t2EDuISY+zO9N1O2DQ
qfAXZRGTY9hDATN9U7G0RSON4yli5M5MafSINHNbzqTqMuB5a3FGV5YlDnBbUGcz
J+eqMW5O7N2j2/UUQ5r3yDnyvNWm0sruV3ibJcujv49Sts1Vih1xDH8nz8DvQpc5
N+xrm1zgXPCxa8dYnHcoMWghbem3uZKs+IZz5fsNeZDYgNCCqSfB8vx0XNli3ytG
zYrcwiWb+6WX9JRkdbh+uguKrJtYUd9rZkvQir3RoSQ+DW54QGAiTwVdf94Wcfyb
nMn4oj21pAjbiw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:19 2025 by rpki-client