Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
File: b1eSq4t1mqdzA42SB3qZvPjYGqA.mft (raw, json)
Hash identifier: RStDa5VXEQWwYO6Uk3ii4qRRdivJe7+ne9m1E0RS4Ow=
Subject key identifier: CB:4C:09:C9:7A:0C:43:50:1A:C0:8F:C2:11:D4:35:59:8E:6B:93:27
Authority key identifier: 6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0
Certificate issuer: /CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
Certificate serial: 0197CB3A25BF39A1A45DE003138B70D0472C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
Manifest number: 0CA1
Signing time: Wed 02 Jul 2025 13:01:14 +0000
Manifest this update: Wed 02 Jul 2025 13:01:14 +0000
Manifest next update: Thu 03 Jul 2025 13:01:14 +0000
Files and hashes: 1: b1eSq4t1mqdzA42SB3qZvPjYGqA.crl (hash: x6EOdW7BuapkmwUowMgQGeFAl9YvHQmxJBbBFvmOl5M=)
2: leDNi0WllP1YqULzb4LrZ9SaXNU.roa (hash: AZ3w2uOyWeGoSd1JRW2Ly2oonBucnhh8DC++gdjBL6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:3a:25:bf:39:a1:a4:5d:e0:03:13:8b:70:d0:47:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
Validity
Not Before: Jul 2 13:01:14 2025 GMT
Not After : Jul 3 13:01:14 2025 GMT
Subject: CN=cb4c09c97a0c43501ac08fc211d435598e6b9327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:a5:71:48:3f:e1:a5:10:22:fc:82:c2:3c:
3e:d7:e5:da:23:01:fb:e8:47:76:10:83:3a:25:63:
9a:eb:12:c7:72:24:5b:c3:49:38:4c:05:43:ce:cf:
a7:5e:35:07:5f:03:7a:79:5e:6b:6e:93:80:18:8f:
32:bf:da:44:d0:58:7a:26:e3:68:ce:82:3f:cc:b9:
16:a7:97:d2:ab:2a:1f:0f:d5:50:1b:cc:3a:7c:a6:
73:98:24:5e:9b:e0:9e:99:31:d6:ea:17:58:96:e4:
ff:74:6f:ea:92:9e:dd:9a:e2:30:71:40:1a:db:b1:
c7:fd:6b:c0:72:8c:0e:ba:15:10:a7:16:1b:c9:3d:
35:a6:81:5f:95:db:31:f9:3c:da:99:7d:e1:7b:21:
82:22:00:57:bf:80:32:50:c3:01:89:ab:1b:16:54:
15:62:6d:c0:a6:3a:8b:58:0e:e9:3a:1d:54:61:37:
81:86:ab:92:bf:95:0d:90:43:b5:d4:4b:c6:ec:6a:
b5:20:3b:63:f9:ef:c4:71:b6:e5:f7:cf:86:16:fa:
66:c8:e1:5e:41:84:c7:46:f1:8d:7a:ba:8d:db:5c:
c9:4c:ea:4a:ea:0a:4a:b9:c6:f0:ac:f0:ff:52:2b:
47:01:d8:df:03:a8:56:13:83:86:ed:e5:2b:38:e0:
fb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4C:09:C9:7A:0C:43:50:1A:C0:8F:C2:11:D4:35:59:8E:6B:93:27
X509v3 Authority Key Identifier:
keyid:6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7e:21:ab:77:d1:3a:33:88:4d:2b:b0:f9:ec:8a:c9:71:a5:
38:77:13:fa:85:54:2f:57:23:6b:41:a4:22:a6:d4:cc:b5:04:
26:68:ad:7c:aa:4b:c5:3d:fb:ca:cd:b3:12:b0:5e:ec:7c:ab:
10:fc:75:40:cc:e4:0b:d6:e4:8f:af:70:c4:21:73:0a:6f:1f:
e9:2d:90:28:a9:de:3c:5f:e9:93:33:a8:58:75:8c:29:62:89:
20:97:f9:1b:a9:8c:b5:c0:ea:1d:dc:ac:62:5d:44:73:1c:6e:
1d:6b:bd:c3:b3:da:ad:6d:17:37:73:4f:d4:37:82:a9:f7:07:
af:8e:1d:da:f7:13:72:38:7e:7d:6c:90:3e:2c:8d:aa:8e:14:
87:ad:04:67:b2:5a:45:86:05:a7:4c:b4:88:9b:53:38:24:86:
94:d9:1d:53:e4:43:3f:66:18:4b:da:5d:1c:8f:3a:14:b9:1d:
9d:19:bd:f4:05:c6:ac:9f:50:0b:89:4d:bf:16:20:dc:3e:87:
45:c8:0e:53:de:0e:d3:eb:b1:d9:06:27:cd:e6:89:a3:c0:3a:
7f:a9:26:57:6f:1b:2f:81:d3:1e:82:3e:3d:b6:7c:3d:23:5d:
16:63:6b:45:c4:8e:e5:09:e8:38:85:53:43:1c:6f:04:d6:ef:
55:fe:fc:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfLOiW/OaGkXeADE4tw0EcsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNTc5MmFiOGI3NTlhYTc3MzAzOGQ5MjA3N2E5OWJjZjhk
ODFhYTAwHhcNMjUwNzAyMTMwMTE0WhcNMjUwNzAzMTMwMTE0WjAzMTEwLwYDVQQD
EyhjYjRjMDljOTdhMGM0MzUwMWFjMDhmYzIxMWQ0MzU1OThlNmI5MzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw62lcUg/4aUQIvyCwjw+1+XaIwH7
6Ed2EIM6JWOa6xLHciRbw0k4TAVDzs+nXjUHXwN6eV5rbpOAGI8yv9pE0Fh6JuNo
zoI/zLkWp5fSqyofD9VQG8w6fKZzmCRem+CemTHW6hdYluT/dG/qkp7dmuIwcUAa
27HH/WvAcowOuhUQpxYbyT01poFfldsx+TzamX3heyGCIgBXv4AyUMMBiasbFlQV
Ym3ApjqLWA7pOh1UYTeBhquSv5UNkEO11EvG7Gq1IDtj+e/Ecbbl98+GFvpmyOFe
QYTHRvGNerqN21zJTOpK6gpKucbwrPD/UitHAdjfA6hWE4OG7eUrOOD7XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtMCcl6DENQGsCPwhHUNVmOa5MnMB8GA1UdIwQY
MBaAFG9XkquLdZqncwONkgd6mbz42BqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83Zjk5NzgtMWZlNC00Yjk5LTgxNDMt
NWQxYjFlY2I5OWJmLzEvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83Zjk5NzgtMWZlNC00Yjk5LTgxNDMtNWQxYjFlY2I5OWJm
LzEvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXH4hq3fR
OjOITSuw+eyKyXGlOHcT+oVUL1cja0GkIqbUzLUEJmitfKpLxT37ys2zErBe7Hyr
EPx1QMzkC9bkj69wxCFzCm8f6S2QKKnePF/pkzOoWHWMKWKJIJf5G6mMtcDqHdys
Yl1EcxxuHWu9w7ParW0XN3NP1DeCqfcHr44d2vcTcjh+fWyQPiyNqo4Uh60EZ7Ja
RYYFp0y0iJtTOCSGlNkdU+RDP2YYS9pdHI86FLkdnRm99AXGrJ9QC4lNvxYg3D6H
RcgOU94O0+ux2QYnzeaJo8A6f6kmV28bL4HTHoI+PbZ8PSNdFmNrRcSO5QnoOIVT
QxxvBNbvVf78fA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 19:24:38 2025 by rpki-client