Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
File: saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json)
Hash identifier: 8v1W5/fuUczg3TWvuIUr+WzjM5EHAXgYFFYW8DTHKM4=
Subject key identifier: 21:BF:AB:C1:B4:0C:4A:54:BE:08:E5:D8:CB:8F:1D:01:0D:0C:15:AC
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 0197B9D8F587530E3D4177CCBA07CA5290F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
Manifest number: 0E25
Signing time: Sun 29 Jun 2025 04:01:32 +0000
Manifest this update: Sun 29 Jun 2025 04:01:32 +0000
Manifest next update: Mon 30 Jun 2025 04:01:32 +0000
Files and hashes: 1: cAAFdZGeVooBzCSUhqsDEyrnbqI.roa (hash: gbj8YLQEZGk70onIHa1ffFfmO4WgyObojVI+6+is2V4=)
2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: sfuEq/76J4BOXcOqNghsCro1gaQYAousjbnVE011bd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:f5:87:53:0e:3d:41:77:cc:ba:07:ca:52:90:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Jun 29 04:01:32 2025 GMT
Not After : Jun 30 04:01:32 2025 GMT
Subject: CN=21bfabc1b40c4a54be08e5d8cb8f1d010d0c15ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:d9:a2:04:92:82:59:38:08:54:6f:61:87:
69:ec:26:a6:82:0b:93:22:14:8d:72:3d:bb:1d:d3:
c4:4d:b3:db:08:a7:a9:2b:ce:3f:ee:83:64:68:09:
a4:26:fe:26:62:ac:86:3a:bc:9a:8d:1e:f7:05:d2:
5c:5c:f8:b9:ba:9a:88:79:f0:8f:c4:fb:8e:af:95:
53:da:70:54:76:17:b0:2b:d9:59:c4:ed:76:b9:cf:
a1:f1:60:31:6b:e0:59:74:20:6e:c5:6f:55:a2:23:
7d:f7:f3:ce:2d:7d:46:8c:ed:8e:30:c4:71:29:f0:
73:51:48:49:10:e1:64:aa:22:a5:43:a3:e4:e7:bd:
ef:81:e3:af:ea:8e:a6:99:1a:02:75:23:01:16:48:
b2:ad:cb:5d:b0:82:b8:69:76:bd:33:36:1b:88:b0:
1a:cc:20:c6:85:04:aa:36:96:d8:f5:f3:ea:00:52:
9f:d4:8d:ea:0e:f3:c6:5d:6a:e1:2d:1a:f7:c6:15:
87:63:bc:5f:1a:63:19:e5:8a:c4:20:b9:84:24:5d:
3f:bc:24:a1:9d:f3:b5:77:73:85:1d:93:53:c8:26:
9d:a4:7d:c5:40:98:c6:c6:db:d5:70:ed:67:93:a4:
cb:15:87:2c:18:89:a7:bc:67:a8:69:43:5f:ad:98:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BF:AB:C1:B4:0C:4A:54:BE:08:E5:D8:CB:8F:1D:01:0D:0C:15:AC
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9a:30:52:12:c2:d0:bc:5f:b9:f9:0e:a6:32:54:ee:db:61:
50:de:e3:da:0d:30:12:e4:a7:18:6a:2d:15:9c:e9:57:23:ea:
04:26:6a:b0:76:9d:81:88:84:88:a3:d8:09:f4:ca:59:55:ce:
65:be:eb:b4:fe:bf:d3:20:48:cf:65:fd:07:9f:92:8d:28:d4:
14:1a:58:b5:7f:98:37:69:68:38:c0:4b:50:25:c4:ae:bb:68:
5a:8e:bf:e1:97:30:f0:f0:00:53:6a:ce:fb:3b:84:00:41:fe:
92:d2:1f:c6:72:cc:5f:2e:d4:3b:19:98:35:d7:5a:3b:08:b8:
50:50:7b:5f:02:14:ea:ee:db:3e:64:ba:6b:1f:aa:ad:b2:ae:
52:32:0b:c6:56:09:86:74:0e:01:f1:06:0e:e4:ba:53:c0:10:
4d:f1:65:f7:2c:49:8b:eb:29:53:c0:f4:25:bf:2c:38:07:cf:
b2:da:f5:0a:f2:4f:a6:0b:63:7d:c6:77:85:5b:9e:82:ac:e1:
be:03:86:c9:39:3c:62:04:64:d2:96:ce:32:a2:21:fc:3f:a3:
88:6d:52:42:7b:ac:31:7d:9b:b8:7e:1b:dc:64:2c:9e:3b:99:
53:9f:cb:82:51:aa:62:01:5d:a0:26:aa:4c:57:92:75:62:d2:
3e:dc:22:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe52PWHUw49QXfMugfKUpDzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTg5YjY3YzY2ZGViZjVkZWQzZjI4ODBiYjQ5NDFkMzA0
MTEyNTcwHhcNMjUwNjI5MDQwMTMyWhcNMjUwNjMwMDQwMTMyWjAzMTEwLwYDVQQD
EygyMWJmYWJjMWI0MGM0YTU0YmUwOGU1ZDhjYjhmMWQwMTBkMGMxNWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUzZogSSglk4CFRvYYdp7CamgguT
IhSNcj27HdPETbPbCKepK84/7oNkaAmkJv4mYqyGOryajR73BdJcXPi5upqIefCP
xPuOr5VT2nBUdhewK9lZxO12uc+h8WAxa+BZdCBuxW9VoiN99/POLX1GjO2OMMRx
KfBzUUhJEOFkqiKlQ6Pk573vgeOv6o6mmRoCdSMBFkiyrctdsIK4aXa9MzYbiLAa
zCDGhQSqNpbY9fPqAFKf1I3qDvPGXWrhLRr3xhWHY7xfGmMZ5YrEILmEJF0/vCSh
nfO1d3OFHZNTyCadpH3FQJjGxtvVcO1nk6TLFYcsGImnvGeoaUNfrZhO1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCG/q8G0DEpUvgjl2MuPHQENDBWsMB8GA1UdIwQY
MBaAFLGom2fGbev13tPyiAu0lB0wQRJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTct
MjEwMGJmMGYxNDBhLzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTctMjEwMGJmMGYxNDBh
LzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJowUhLC
0LxfufkOpjJU7tthUN7j2g0wEuSnGGotFZzpVyPqBCZqsHadgYiEiKPYCfTKWVXO
Zb7rtP6/0yBIz2X9B5+SjSjUFBpYtX+YN2loOMBLUCXErrtoWo6/4Zcw8PAAU2rO
+zuEAEH+ktIfxnLMXy7UOxmYNddaOwi4UFB7XwIU6u7bPmS6ax+qrbKuUjILxlYJ
hnQOAfEGDuS6U8AQTfFl9yxJi+spU8D0Jb8sOAfPstr1CvJPpgtjfcZ3hVuegqzh
vgOGyTk8YgRk0pbOMqIh/D+jiG1SQnusMX2buH4b3GQsnjuZU5/LglGqYgFdoCaq
TFeSdWLSPtwiEw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:53:11 2025 by rpki-client