Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
File: BhYY9tMA3yz1ni35f_6flWoj5jw.mft (raw, json)
Hash identifier: TYSYNFVJYSZfHCLYK5ANuT0HIJMyAcEDbT2FDuRlod4=
Subject key identifier: 3D:D6:EE:58:C6:BB:6E:C2:6D:EC:76:C8:B5:2D:8E:F7:79:74:9A:84
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial: 0197B70F2EB754A7DE33BE01960D86B6E6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:54 +0000
Manifest this update: Sat 28 Jun 2025 15:01:54 +0000
Manifest next update: Sun 29 Jun 2025 15:01:54 +0000
Files and hashes: 1: BhYY9tMA3yz1ni35f_6flWoj5jw.crl (hash: E0MCiQslZYW3bUAxElRWRqaUT57DArrkDi+o8zzctCw=)
2: PpLMyuWEi7GW-Zo7FScOzQEDqmw.roa (hash: tpDYLlf85669UfO2WjK12JWkdre1n2ZIYLt0uyeHU34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:2e:b7:54:a7:de:33:be:01:96:0d:86:b6:e6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Validity
Not Before: Jun 28 15:01:54 2025 GMT
Not After : Jun 29 15:01:54 2025 GMT
Subject: CN=3dd6ee58c6bb6ec26dec76c8b52d8ef779749a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:a5:6f:d4:2b:9b:20:98:24:ad:f1:fd:b6:
58:c9:06:8c:99:66:6b:5a:4b:93:e8:f8:d4:c0:01:
93:d4:16:d8:29:a0:1c:57:32:95:7f:b3:cc:29:76:
be:59:63:ba:d5:17:63:1c:00:92:19:43:0a:53:1b:
47:6f:61:7f:64:ec:df:69:ff:ba:27:d9:2a:7c:8a:
11:31:37:37:38:e8:69:da:f6:0c:17:a6:c9:1d:fc:
fb:91:37:53:e2:a2:7e:a2:66:83:84:f6:a5:1e:9a:
9d:31:3f:0d:70:ed:a7:0c:3b:fb:44:1f:85:27:ad:
7a:f4:fa:0c:10:2b:8a:ae:c9:46:8a:e6:a1:38:e1:
f4:df:5b:bc:43:45:09:dd:70:c5:90:cd:4e:03:bc:
5e:aa:0f:99:04:41:f1:7e:ac:57:05:9b:af:c9:e0:
35:75:90:83:4d:11:b6:8b:d5:20:ee:97:cc:a0:ed:
bc:e7:01:6a:48:7c:f2:49:14:db:51:0c:c8:5f:8b:
14:f3:bb:d2:e4:63:e1:5e:26:14:f9:3b:c2:e7:9b:
71:26:e0:9c:5b:4d:39:8f:38:6e:5f:76:95:bb:ad:
a2:bd:34:34:6e:d0:53:03:9e:65:9d:9f:0f:9d:46:
c4:57:72:8d:e7:11:5d:12:22:0f:24:be:fc:2a:b7:
52:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D6:EE:58:C6:BB:6E:C2:6D:EC:76:C8:B5:2D:8E:F7:79:74:9A:84
X509v3 Authority Key Identifier:
keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:96:83:88:5f:09:4d:a3:a3:04:3f:97:32:24:02:7f:07:d3:
dd:28:23:10:9e:b9:76:a0:9b:44:d2:5c:01:f2:0c:aa:4f:36:
b9:a1:7a:a6:74:57:a2:d8:8b:ec:f6:fd:2a:ab:6c:c5:eb:41:
a8:d1:34:e3:bd:d2:2c:21:2c:13:79:80:3b:13:76:63:0f:ab:
96:47:f5:b5:ed:80:97:4b:1a:64:46:6e:f4:2a:25:11:42:5a:
60:04:9e:98:a2:44:47:00:c7:b8:26:e7:b1:0a:29:76:f8:27:
b2:12:ee:f0:d7:a5:49:39:58:f3:f3:80:b9:91:d0:2f:b6:a1:
61:6e:ad:63:cf:81:0c:23:2c:db:d2:15:5c:78:02:f2:ff:ed:
78:36:dd:c3:21:8f:2d:dd:2d:70:90:97:fd:45:39:df:5c:a2:
f3:52:d8:40:c3:b3:0a:5e:6b:49:69:4c:3e:59:65:ac:fd:d2:
3d:34:f8:c7:41:22:c1:f2:0a:93:f2:a8:f3:5b:79:6a:11:4a:
51:a8:1f:45:2c:65:66:4a:27:e0:7a:31:79:71:f0:b9:f1:b4:
ce:b9:f0:33:1e:95:51:a3:60:35:9a:cb:10:8f:e4:db:6a:60:
eb:3b:f4:fd:9f:d8:b0:26:a7:69:2a:c0:de:97:a1:aa:55:81:
5d:48:2f:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dy63VKfeM74Blg2GtubtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MTYxOGY2ZDMwMGRmMmNmNTllMmRmOTdmZmU5Zjk1NmEy
M2U2M2MwHhcNMjUwNjI4MTUwMTU0WhcNMjUwNjI5MTUwMTU0WjAzMTEwLwYDVQQD
EygzZGQ2ZWU1OGM2YmI2ZWMyNmRlYzc2YzhiNTJkOGVmNzc5NzQ5YTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZSlb9QrmyCYJK3x/bZYyQaMmWZr
WkuT6PjUwAGT1BbYKaAcVzKVf7PMKXa+WWO61RdjHACSGUMKUxtHb2F/ZOzfaf+6
J9kqfIoRMTc3OOhp2vYMF6bJHfz7kTdT4qJ+omaDhPalHpqdMT8NcO2nDDv7RB+F
J6169PoMECuKrslGiuahOOH031u8Q0UJ3XDFkM1OA7xeqg+ZBEHxfqxXBZuvyeA1
dZCDTRG2i9Ug7pfMoO285wFqSHzySRTbUQzIX4sU87vS5GPhXiYU+TvC55txJuCc
W005jzhuX3aVu62ivTQ0btBTA55lnZ8PnUbEV3KN5xFdEiIPJL78KrdSlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3W7ljGu27Cbex2yLUtjvd5dJqEMB8GA1UdIwQY
MBaAFAYWGPbTAN8s9Z4t+X/+n5VqI+Y8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmhZWTl0TUEzeXoxbmkzNWZfNmZsV29qNWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iODU3NWEtOGI2My00NTMyLTgxZWQt
ZWZlNWJmYzc5OTk0LzEvQmhZWTl0TUEzeXoxbmkzNWZfNmZsV29qNWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9iODU3NWEtOGI2My00NTMyLTgxZWQtZWZlNWJmYzc5OTk0
LzEvQmhZWTl0TUEzeXoxbmkzNWZfNmZsV29qNWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5aDiF8J
TaOjBD+XMiQCfwfT3SgjEJ65dqCbRNJcAfIMqk82uaF6pnRXotiL7Pb9KqtsxetB
qNE0473SLCEsE3mAOxN2Yw+rlkf1te2Al0saZEZu9ColEUJaYASemKJERwDHuCbn
sQopdvgnshLu8NelSTlY8/OAuZHQL7ahYW6tY8+BDCMs29IVXHgC8v/teDbdwyGP
Ld0tcJCX/UU531yi81LYQMOzCl5rSWlMPlllrP3SPTT4x0EiwfIKk/Ko81t5ahFK
UagfRSxlZkon4HoxeXHwufG0zrnwMx6VUaNgNZrLEI/k22pg6zv0/Z/YsCanaSrA
3pehqlWBXUgvvQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:51 2025 by rpki-client