Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier: z05G0ytGNJNrdiBTX/1gINRjMXbKTjTfsuWRUm+mI0A=
Subject key identifier: C2:8A:94:5F:35:E1:AD:C8:62:98:5B:E5:BC:B0:1C:5E:AE:17:EB:E7
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial: 0197B70EF2894BAF77F1A5DF184578E2014B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number: 0A35
Signing time: Sat 28 Jun 2025 15:01:39 +0000
Manifest this update: Sat 28 Jun 2025 15:01:39 +0000
Manifest next update: Sun 29 Jun 2025 15:01:39 +0000
Files and hashes: 1: LMR5H8XxQ22Qwh4Rqkz4ubSlo54.roa (hash: ZUDk4H2waEP/HdlHdhHpF+TAjFZSo3z48LNa4UDsM8c=)
2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: uCfoLNRXwbiLlcn2m1s8AC3tih10TB6+QDQRIiMgGFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f2:89:4b:af:77:f1:a5:df:18:45:78:e2:01:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Validity
Not Before: Jun 28 15:01:39 2025 GMT
Not After : Jun 29 15:01:39 2025 GMT
Subject: CN=c28a945f35e1adc862985be5bcb01c5eae17ebe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:d4:d1:a8:57:a6:44:d7:c6:8f:37:df:32:
df:7f:88:fc:9a:98:1e:63:c5:54:15:40:1d:54:8c:
52:31:57:33:f1:64:6a:63:db:11:cd:bf:5c:9f:ac:
e6:2d:fd:e3:d5:30:47:a0:be:30:c6:0c:89:3c:69:
2d:59:75:29:13:90:bb:78:6a:05:f2:40:0f:db:9c:
40:0b:d0:49:0f:c1:13:15:3d:f7:02:80:7d:99:0d:
80:05:7b:61:5f:36:32:20:7d:fa:57:82:30:7a:8d:
e4:46:9b:c7:11:19:7f:71:c3:09:0f:cf:02:57:33:
3a:a9:3b:d3:72:a9:b9:47:4c:fe:9e:8d:66:1e:a3:
e0:fd:0a:e8:1e:f4:cf:78:de:5b:eb:72:27:e4:04:
39:d2:1e:df:3b:d9:ce:2e:90:c4:86:e6:08:e6:09:
50:42:a9:90:80:50:7c:17:40:e8:f1:23:2f:d9:81:
99:0c:c7:75:d9:75:ec:41:36:26:24:90:6a:93:de:
13:bc:27:9a:60:fc:de:9a:0a:a1:cd:42:b9:d8:2e:
0d:d9:4d:74:71:e0:4a:26:a1:8d:2f:f4:fb:de:92:
73:1f:f8:af:87:c5:bd:87:c7:f0:3e:23:ed:1e:f8:
04:5e:0a:85:12:63:08:57:07:d3:5b:e2:e0:b5:fe:
b1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8A:94:5F:35:E1:AD:C8:62:98:5B:E5:BC:B0:1C:5E:AE:17:EB:E7
X509v3 Authority Key Identifier:
keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:18:d5:44:75:aa:e3:2f:fc:82:0b:a1:b5:69:97:29:82:85:
70:07:f5:da:94:55:cb:2b:97:ad:24:08:9e:fe:63:01:c8:82:
5b:ee:3e:e8:05:2e:52:a8:c3:16:ea:c2:58:48:f1:e4:5f:56:
db:90:b3:31:c7:c9:6b:46:4f:a9:1d:61:43:cf:54:1d:14:08:
8f:b3:59:a9:e6:06:78:8d:0b:be:2c:d0:51:2c:eb:da:6a:3d:
8a:e6:ec:00:3e:24:c9:56:30:a5:ad:c9:53:25:28:39:a7:ba:
8e:12:56:f5:10:92:ed:a7:19:56:10:a0:82:54:16:d4:9a:63:
84:23:01:d5:9f:46:b5:03:3f:cd:d0:30:75:79:79:5c:5f:d3:
be:f4:01:d9:5c:e8:8f:72:25:87:59:b8:bf:a4:67:7c:eb:5d:
52:65:5a:5c:76:0b:c7:37:77:50:2b:08:6e:62:69:a8:81:4f:
0e:be:9d:96:60:1d:79:cb:e0:75:52:33:fc:44:56:68:82:0e:
29:13:68:cc:90:1b:37:74:c6:df:0c:e7:fa:ef:c1:58:9e:50:
ab:cc:b4:06:2a:58:90:25:a7:e5:2c:1a:e3:1d:60:94:c8:89:
97:0a:67:66:7b:89:65:00:96:ce:de:80:0a:b3:2d:e8:db:c8:
58:04:eb:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DvKJS6938aXfGEV44gFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMmQ1NzQwOTJiYTkzOWEyZmZmNzFhYTFmOGU4ZWQ5NjE1
MzBiMzAwHhcNMjUwNjI4MTUwMTM5WhcNMjUwNjI5MTUwMTM5WjAzMTEwLwYDVQQD
EyhjMjhhOTQ1ZjM1ZTFhZGM4NjI5ODViZTViY2IwMWM1ZWFlMTdlYmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqHU0ahXpkTXxo833zLff4j8mpge
Y8VUFUAdVIxSMVcz8WRqY9sRzb9cn6zmLf3j1TBHoL4wxgyJPGktWXUpE5C7eGoF
8kAP25xAC9BJD8ETFT33AoB9mQ2ABXthXzYyIH36V4Iweo3kRpvHERl/ccMJD88C
VzM6qTvTcqm5R0z+no1mHqPg/QroHvTPeN5b63In5AQ50h7fO9nOLpDEhuYI5glQ
QqmQgFB8F0Do8SMv2YGZDMd12XXsQTYmJJBqk94TvCeaYPzemgqhzUK52C4N2U10
ceBKJqGNL/T73pJzH/ivh8W9h8fwPiPtHvgEXgqFEmMIVwfTW+Lgtf6x7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKKlF814a3IYphb5bywHF6uF+vnMB8GA1UdIwQY
MBaAFG0tV0CSupOaL/9xqh+OjtlhUwswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81OTdjYzMtMzYxMS00NjI4LWJkN2Mt
ZGJhZDFmNGE0MTIzLzEvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS81OTdjYzMtMzYxMS00NjI4LWJkN2MtZGJhZDFmNGE0MTIz
LzEvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRjVRHWq
4y/8gguhtWmXKYKFcAf12pRVyyuXrSQInv5jAciCW+4+6AUuUqjDFurCWEjx5F9W
25CzMcfJa0ZPqR1hQ89UHRQIj7NZqeYGeI0LvizQUSzr2mo9iubsAD4kyVYwpa3J
UyUoOae6jhJW9RCS7acZVhCgglQW1JpjhCMB1Z9GtQM/zdAwdXl5XF/TvvQB2Vzo
j3Ilh1m4v6RnfOtdUmVaXHYLxzd3UCsIbmJpqIFPDr6dlmAdecvgdVIz/ERWaIIO
KRNozJAbN3TG3wzn+u/BWJ5Qq8y0BipYkCWn5Swa4x1glMiJlwpnZnuJZQCWzt6A
CrMt6NvIWATrKg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:28 2025 by rpki-client