Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
File: b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json)
Hash identifier: nCLts4DJxAR+NUYT1c6WYje+8XBggpShwi9ri2JDMZc=
Subject key identifier: 41:FD:4A:6C:52:F3:2B:F6:FB:E0:85:9C:30:A2:9C:73:51:51:55:FA
Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Certificate serial: 0197B89027575489AEDE300EF0880F9E0E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 22:02:24 +0000
Manifest this update: Sat 28 Jun 2025 22:02:24 +0000
Manifest next update: Sun 29 Jun 2025 22:02:24 +0000
Files and hashes: 1: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: iXtyHduUtKDBCcL+5oR9+2bA9kCxypZgkbr3Xzj2M5M=)
2: hyaj4NlGFcmb8YwdQipnGWLkuvI.roa (hash: SKjD8sW68Pq2JQ38fUsoQi7UbT3rU+TDmMqbwOOA0i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:27:57:54:89:ae:de:30:0e:f0:88:0f:9e:0e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Validity
Not Before: Jun 28 22:02:24 2025 GMT
Not After : Jun 29 22:02:24 2025 GMT
Subject: CN=41fd4a6c52f32bf6fbe0859c30a29c73515155fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:3d:28:77:39:2a:45:83:cc:3e:1c:fd:62:
14:f5:c5:9e:a8:40:77:5a:cb:2e:88:d1:91:63:23:
7f:5f:f4:8e:d7:bc:04:fe:72:8e:53:81:94:45:f3:
8c:33:9c:35:1a:60:e6:ac:7b:60:70:e3:67:bd:64:
ad:4e:f2:f1:39:c6:bd:0a:25:f8:17:49:5d:50:27:
05:65:50:1d:b9:c5:cf:f6:2f:61:4b:48:64:34:a6:
df:b2:bb:be:8d:25:28:a6:48:11:dc:b7:2d:72:98:
5a:94:db:b0:52:a2:82:8d:b6:4b:af:32:3b:67:c7:
7a:01:1f:fe:5b:66:92:6b:3c:55:00:37:ec:1a:8d:
93:3e:5d:6c:6c:61:ab:6a:53:c1:a8:a1:cf:eb:ce:
5f:1e:07:ff:bd:57:b5:ed:85:9f:c9:a4:60:dc:bc:
48:d8:5f:06:0a:aa:bd:ca:93:a5:71:7b:ca:87:9d:
e3:97:6c:ff:39:4a:94:56:b4:7c:bf:16:9d:16:0e:
03:31:7b:2b:62:22:bc:50:32:d9:40:55:ae:2e:bd:
25:6a:89:bf:47:ce:f0:99:4f:54:4d:23:80:7c:b6:
a1:71:99:89:aa:16:6d:38:7b:b1:f8:0a:2a:5b:53:
e5:b4:40:5c:86:b0:5f:05:d9:8c:f5:df:21:11:fc:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FD:4A:6C:52:F3:2B:F6:FB:E0:85:9C:30:A2:9C:73:51:51:55:FA
X509v3 Authority Key Identifier:
keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:bf:62:03:b8:62:ad:57:5d:1d:42:39:21:27:10:5b:45:bd:
f1:bd:fc:d8:6b:e3:79:1f:47:07:94:3e:a6:8d:a0:da:3f:d4:
86:f8:9c:5e:fc:d1:68:22:72:55:86:be:71:1f:d3:7e:f4:6d:
cd:31:32:6c:c5:9a:cf:ec:30:2d:cb:f8:33:39:b6:34:73:28:
7b:b6:ba:89:d9:51:4a:d1:9c:de:eb:d2:57:af:0c:11:6d:ef:
0a:f2:69:80:00:2c:06:69:6c:9a:22:c7:45:34:f2:69:49:2b:
33:e6:eb:a4:30:3e:62:67:93:ef:24:b1:c4:99:5a:a3:5c:15:
11:e6:bb:29:25:66:b9:aa:77:f0:2a:2d:1e:4a:4a:21:af:b3:
87:80:1a:2c:d8:60:ea:fe:6b:18:fd:af:6f:b8:47:5d:84:e5:
c6:90:27:ba:d1:e7:cf:7b:47:6b:1d:1e:98:f4:2d:c4:19:55:
cd:5f:98:fe:fc:06:ac:61:7e:5a:be:3f:3b:57:d2:d2:f4:e9:
36:c5:7f:a9:76:44:15:30:dc:73:b2:80:55:1c:36:1d:1f:5b:
de:00:fa:1a:12:b2:7f:17:57:66:a0:6d:df:db:d5:9d:7d:1a:
6b:cb:1d:01:97:ee:44:c4:1e:1f:0c:a2:34:83:8c:cd:c3:43:
3d:ee:39:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kCdXVImu3jAO8IgPng4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYmJiNWVjMTI3YTA2MzJkMjI2YWYwN2ZhYzljNGQyODRi
ZDFiYWMwHhcNMjUwNjI4MjIwMjI0WhcNMjUwNjI5MjIwMjI0WjAzMTEwLwYDVQQD
Eyg0MWZkNGE2YzUyZjMyYmY2ZmJlMDg1OWMzMGEyOWM3MzUxNTE1NWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFw9KHc5KkWDzD4c/WIU9cWeqEB3
WssuiNGRYyN/X/SO17wE/nKOU4GURfOMM5w1GmDmrHtgcONnvWStTvLxOca9CiX4
F0ldUCcFZVAducXP9i9hS0hkNKbfsru+jSUopkgR3LctcphalNuwUqKCjbZLrzI7
Z8d6AR/+W2aSazxVADfsGo2TPl1sbGGralPBqKHP685fHgf/vVe17YWfyaRg3LxI
2F8GCqq9ypOlcXvKh53jl2z/OUqUVrR8vxadFg4DMXsrYiK8UDLZQFWuLr0laom/
R87wmU9UTSOAfLahcZmJqhZtOHux+AoqW1PltEBchrBfBdmM9d8hEfzqAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEH9SmxS8yv2++CFnDCinHNRUVX6MB8GA1UdIwQY
MBaAFG+7tewSegYy0iavB/rJxNKEvRusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zNjRlMjctNTdmMC00NmE3LTkzOWEt
NjU0OTA4Mzg0ZGQ4LzEvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zNjRlMjctNTdmMC00NmE3LTkzOWEtNjU0OTA4Mzg0ZGQ4
LzEvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkb9iA7hi
rVddHUI5IScQW0W98b382GvjeR9HB5Q+po2g2j/UhvicXvzRaCJyVYa+cR/TfvRt
zTEybMWaz+wwLcv4Mzm2NHMoe7a6idlRStGc3uvSV68MEW3vCvJpgAAsBmlsmiLH
RTTyaUkrM+brpDA+YmeT7ySxxJlao1wVEea7KSVmuap38CotHkpKIa+zh4AaLNhg
6v5rGP2vb7hHXYTlxpAnutHnz3tHax0emPQtxBlVzV+Y/vwGrGF+Wr4/O1fS0vTp
NsV/qXZEFTDcc7KAVRw2HR9b3gD6GhKyfxdXZqBt39vVnX0aa8sdAZfuRMQeHwyi
NIOMzcNDPe45GQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:15 2025 by rpki-client