Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
File: B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft (raw, json)
Hash identifier: 32QuRXNZrozVg3ZEtd2PcUkzkre4bAL3uQJ1Ox54b98=
Subject key identifier: 2A:AC:0D:90:98:D4:0A:D5:FD:3D:41:12:C2:EE:D6:28:E3:2F:B8:5C
Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
Certificate issuer: /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Certificate serial: 0197B70EFE7DBDC5567FC084FD3D1DC714E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
Manifest number: 068C
Signing time: Sat 28 Jun 2025 15:01:42 +0000
Manifest this update: Sat 28 Jun 2025 15:01:42 +0000
Manifest next update: Sun 29 Jun 2025 15:01:42 +0000
Files and hashes: 1: B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl (hash: lzAMqSU1QXFr/BmZRiauoCojygVitMcRpjVWxr+0mzc=)
2: c3kj5e0FQs-aGeI_pqvpG_P5-CI.roa (hash: L6r7oVdYR79NuIrRw2uuwM285lWZ3pFFGBMiBbZqMWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:fe:7d:bd:c5:56:7f:c0:84:fd:3d:1d:c7:14:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Validity
Not Before: Jun 28 15:01:42 2025 GMT
Not After : Jun 29 15:01:42 2025 GMT
Subject: CN=2aac0d9098d40ad5fd3d4112c2eed628e32fb85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:c6:35:cc:1d:f7:4e:55:0e:cf:f9:0a:c4:
88:2e:91:d3:4e:0b:6d:83:78:fa:46:de:70:73:db:
7d:1f:33:27:0a:3b:fd:49:14:aa:98:6a:7e:f3:07:
ff:72:bd:f0:46:04:10:44:9f:be:8e:c7:6d:da:ae:
24:18:df:e1:6b:f4:2e:cc:9a:b2:57:e3:ac:51:ca:
8e:a7:88:c0:b8:ab:95:d5:8a:f0:38:53:46:fb:2a:
dd:cc:1e:88:fe:f4:92:57:d4:99:29:91:b5:ff:5f:
fb:69:e9:4b:c8:19:02:43:9f:81:3e:fc:05:05:9d:
7d:6f:ec:a2:20:d9:9a:06:c4:5e:a7:c0:15:e8:62:
7f:31:50:c1:e9:76:55:36:b9:a2:35:1d:5e:89:e2:
c0:5f:ec:75:df:42:fd:16:4f:fb:fa:98:a0:7a:45:
46:6c:6e:25:ec:a9:a7:21:5b:54:b8:db:e7:61:7d:
05:64:62:4a:5f:66:0f:bc:ab:28:2e:1d:f6:a2:5a:
4b:46:24:ec:b4:f9:17:25:34:2d:c0:c8:b7:67:a2:
3c:21:90:df:89:ce:2f:9b:73:34:63:eb:b9:e7:b5:
ec:81:f0:5f:c8:c7:7e:dd:a3:2c:a7:63:be:6f:ed:
6b:3b:fb:27:7f:93:e4:f3:01:79:99:75:77:a7:61:
c2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AC:0D:90:98:D4:0A:D5:FD:3D:41:12:C2:EE:D6:28:E3:2F:B8:5C
X509v3 Authority Key Identifier:
keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d0:5d:13:f2:ae:f6:a7:72:9f:45:2f:b8:d4:d8:19:d5:71:
a1:42:38:9b:bd:a4:5f:14:ae:2e:3c:6d:84:3c:72:f4:39:a8:
ab:70:b6:fd:7d:13:36:11:26:14:fd:16:0d:da:7f:f3:27:70:
8b:0b:15:db:65:e1:7d:95:fa:61:ca:1f:05:fa:47:d3:a2:e1:
82:2e:20:43:fe:12:b2:7c:81:05:4b:ee:f5:83:39:65:2f:cf:
44:3d:33:f3:5f:9d:5a:18:e0:5e:c5:71:df:77:ad:23:80:58:
de:61:8c:1b:d4:ba:c8:10:ce:cb:db:48:27:81:07:84:fe:51:
cc:ca:82:a8:8d:49:43:50:7c:05:48:d2:36:b3:90:8a:fa:04:
37:6b:18:d1:be:95:d2:e2:99:ab:3b:f3:26:ac:52:84:b6:2f:
90:48:9d:e2:f7:3f:ce:92:7a:bc:27:29:52:50:79:6a:c2:34:
a4:17:0c:89:04:b3:d5:a8:f7:31:cc:2f:bb:06:95:c9:5e:bb:
b6:90:6c:bc:4e:f0:dc:a3:f6:e4:60:5f:85:09:8a:b8:7c:0c:
9f:b6:01:d8:07:11:fe:8f:9a:0b:6e:d9:3d:03:55:b4:df:c6:
af:f2:99:b2:1e:6c:ad:8d:db:ba:ae:cf:14:16:3b:f5:99:0f:
79:11:0b:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dv59vcVWf8CE/T0dxxTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OGIzNzM5Zjc4ZDk2ODQ0YTRlZjY4NjI2ZGM4N2FjMmVl
ZmE1MGYwHhcNMjUwNjI4MTUwMTQyWhcNMjUwNjI5MTUwMTQyWjAzMTEwLwYDVQQD
EygyYWFjMGQ5MDk4ZDQwYWQ1ZmQzZDQxMTJjMmVlZDYyOGUzMmZiODVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtvGNcwd905VDs/5CsSILpHTTgtt
g3j6Rt5wc9t9HzMnCjv9SRSqmGp+8wf/cr3wRgQQRJ++jsdt2q4kGN/ha/QuzJqy
V+OsUcqOp4jAuKuV1YrwOFNG+yrdzB6I/vSSV9SZKZG1/1/7aelLyBkCQ5+BPvwF
BZ19b+yiINmaBsRep8AV6GJ/MVDB6XZVNrmiNR1eieLAX+x130L9Fk/7+pigekVG
bG4l7KmnIVtUuNvnYX0FZGJKX2YPvKsoLh32olpLRiTstPkXJTQtwMi3Z6I8IZDf
ic4vm3M0Y+u557XsgfBfyMd+3aMsp2O+b+1rO/snf5Pk8wF5mXV3p2HCLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqsDZCY1ArV/T1BEsLu1ijjL7hcMB8GA1UdIwQY
MBaAFAeLNzn3jZaESk72hibch6wu76UPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEt
MDExNzg0MWQyNTViLzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEtMDExNzg0MWQyNTVi
LzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9BdE/Ku
9qdyn0UvuNTYGdVxoUI4m72kXxSuLjxthDxy9Dmoq3C2/X0TNhEmFP0WDdp/8ydw
iwsV22XhfZX6YcofBfpH06Lhgi4gQ/4SsnyBBUvu9YM5ZS/PRD0z81+dWhjgXsVx
33etI4BY3mGMG9S6yBDOy9tIJ4EHhP5RzMqCqI1JQ1B8BUjSNrOQivoEN2sY0b6V
0uKZqzvzJqxShLYvkEid4vc/zpJ6vCcpUlB5asI0pBcMiQSz1aj3McwvuwaVyV67
tpBsvE7w3KP25GBfhQmKuHwMn7YB2AcR/o+aC27ZPQNVtN/Gr/KZsh5srY3buq7P
FBY79ZkPeRELag==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:37:12 2025 by rpki-client