Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
File: b87cvaA8OzbNfXA36tM5vLiMmiQ.mft (raw, json)
Hash identifier: 4Ds4YFe214uVEY/mrqXfrtt/g2SZ9nlif/3wz0puvow=
Subject key identifier: BA:EB:50:0F:4E:E1:10:AE:E8:42:E1:4A:C9:9B:FE:17:C5:07:DC:9C
Authority key identifier: 6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
Certificate issuer: /CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Certificate serial: 0197B77C70FE64ADEBC149F386E68B3CDACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
Manifest number: 0979
Signing time: Sat 28 Jun 2025 17:01:15 +0000
Manifest this update: Sat 28 Jun 2025 17:01:15 +0000
Manifest next update: Sun 29 Jun 2025 17:01:15 +0000
Files and hashes: 1: b87cvaA8OzbNfXA36tM5vLiMmiQ.crl (hash: M79x1LTwKioilPe5iQhLe08AGnlW+eCp4N1cox/LeQY=)
2: pMbs7XGdo_xSX6txJyvIyBbRMlo.roa (hash: 98SgzoxY6svU/NSUJNYIa8/zWjIUUc01QOY2lQs4JFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:70:fe:64:ad:eb:c1:49:f3:86:e6:8b:3c:da:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Validity
Not Before: Jun 28 17:01:15 2025 GMT
Not After : Jun 29 17:01:15 2025 GMT
Subject: CN=baeb500f4ee110aee842e14ac99bfe17c507dc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:00:3b:f4:5b:b7:96:7d:cc:48:23:c9:ea:58:
a6:b9:2d:18:f0:f5:64:5f:79:31:47:7d:ea:dd:d3:
d0:6f:8b:38:bf:7c:33:25:6c:d3:20:ab:db:ea:e0:
42:18:7e:23:da:6b:3f:4d:25:48:a6:fd:dc:33:e2:
4f:ab:19:a1:35:5f:03:b6:96:90:8e:c2:01:2c:45:
7f:b2:55:c9:56:87:e8:16:53:d3:ae:6b:93:bc:12:
67:0e:a4:38:34:3d:0e:0f:9b:3a:d2:53:08:52:78:
d3:96:da:87:4f:15:31:93:8c:91:7f:9c:0a:cb:c1:
a3:53:51:8a:33:2a:40:57:40:c0:66:6a:63:d0:9f:
97:aa:2c:68:c7:bc:2e:eb:7a:51:d4:70:9f:5f:e7:
33:da:b6:b5:e1:9f:c2:55:a6:0b:89:bd:1c:70:08:
25:92:51:7d:23:06:a3:bd:26:fb:c9:a1:c1:16:fb:
d5:cc:b0:4b:4a:e9:73:a7:d4:4a:8b:c6:fe:2d:72:
82:6e:6d:7b:99:6c:be:00:8d:83:16:0d:57:26:8b:
65:9c:e9:97:20:39:ca:95:79:1e:a7:45:fe:7d:ff:
e2:64:4b:69:59:1b:40:e3:e8:88:1a:3b:57:73:a8:
30:0f:0b:d0:dd:0b:35:85:00:c6:6b:6d:57:8a:cb:
1e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EB:50:0F:4E:E1:10:AE:E8:42:E1:4A:C9:9B:FE:17:C5:07:DC:9C
X509v3 Authority Key Identifier:
keyid:6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bb:54:d7:30:94:1c:30:86:54:ed:5c:12:90:fe:b3:79:35:
1c:66:23:47:91:8a:00:be:92:d5:d7:07:71:2f:bf:91:d5:08:
f8:d8:25:06:75:1b:c6:21:ff:58:4b:5c:c8:2a:e2:2c:42:f6:
f3:c1:45:7b:f7:82:a9:60:e0:ef:e0:94:a3:63:37:dc:f6:86:
82:44:83:33:3b:fe:01:09:55:82:c7:ae:99:6f:19:be:e5:cf:
88:b7:c8:42:9d:c0:c9:3a:35:fa:53:48:70:9a:1e:72:02:08:
fd:a3:c7:60:00:e0:c1:83:f4:2e:48:3d:e5:53:83:3f:e7:09:
c8:41:52:48:ad:14:62:ee:0a:ad:bd:d0:8f:e5:a9:41:24:2d:
14:56:7c:9d:2f:89:73:68:90:01:82:ac:a8:8e:3c:47:40:0c:
00:3e:a8:f5:11:c4:51:5c:74:5d:5d:29:75:ba:da:0d:be:76:
d4:ac:28:11:ed:a7:39:46:df:62:82:eb:1b:80:b7:a6:13:75:
1b:dc:8a:f8:c0:9c:74:86:b8:fe:c6:a6:87:ce:52:a5:3b:18:
f9:ea:dc:d8:78:d2:be:fa:8f:0d:a7:be:93:a2:87:2b:b9:8f:
43:65:24:06:f4:cc:0b:93:fd:53:ae:84:41:1c:de:c7:d2:f0:
59:d3:40:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fHD+ZK3rwUnzhuaLPNrNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmY2VkY2JkYTAzYzNiMzZjZDdkNzAzN2VhZDMzOWJjYjg4
YzlhMjQwHhcNMjUwNjI4MTcwMTE1WhcNMjUwNjI5MTcwMTE1WjAzMTEwLwYDVQQD
EyhiYWViNTAwZjRlZTExMGFlZTg0MmUxNGFjOTliZmUxN2M1MDdkYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AA79Fu3ln3MSCPJ6limuS0Y8PVk
X3kxR33q3dPQb4s4v3wzJWzTIKvb6uBCGH4j2ms/TSVIpv3cM+JPqxmhNV8DtpaQ
jsIBLEV/slXJVofoFlPTrmuTvBJnDqQ4ND0OD5s60lMIUnjTltqHTxUxk4yRf5wK
y8GjU1GKMypAV0DAZmpj0J+Xqixox7wu63pR1HCfX+cz2ra14Z/CVaYLib0ccAgl
klF9IwajvSb7yaHBFvvVzLBLSulzp9RKi8b+LXKCbm17mWy+AI2DFg1XJotlnOmX
IDnKlXkep0X+ff/iZEtpWRtA4+iIGjtXc6gwDwvQ3Qs1hQDGa21XissekwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrrUA9O4RCu6ELhSsmb/hfFB9ycMB8GA1UdIwQY
MBaAFG/O3L2gPDs2zX1wN+rTOby4jJokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82YjYzMzUtMDQzOS00N2YyLWFlMzQt
NzQyNGZkZWUyMTBlLzEvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC82YjYzMzUtMDQzOS00N2YyLWFlMzQtNzQyNGZkZWUyMTBl
LzEvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLtU1zCU
HDCGVO1cEpD+s3k1HGYjR5GKAL6S1dcHcS+/kdUI+NglBnUbxiH/WEtcyCriLEL2
88FFe/eCqWDg7+CUo2M33PaGgkSDMzv+AQlVgseumW8ZvuXPiLfIQp3AyTo1+lNI
cJoecgII/aPHYADgwYP0Lkg95VODP+cJyEFSSK0UYu4Krb3Qj+WpQSQtFFZ8nS+J
c2iQAYKsqI48R0AMAD6o9RHEUVx0XV0pdbraDb521KwoEe2nOUbfYoLrG4C3phN1
G9yK+MCcdIa4/samh85SpTsY+erc2HjSvvqPDae+k6KHK7mPQ2UkBvTMC5P9U66E
QRzex9LwWdNAXg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:27 2025 by rpki-client