Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
File: bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft (raw, json)
Hash identifier: onJcqfoiHgYZYM36iw7kdoeO/5coixP7Ibe8EbRqfKA=
Subject key identifier: 01:FF:5D:BF:EB:16:EE:B9:D1:AF:65:1A:36:C8:60:34:C4:B9:B8:B7
Authority key identifier: 6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
Certificate issuer: /CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Certificate serial: 0197B6A1C20742BFD7D19BDC6CD443ABEFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
Manifest number: 042C
Signing time: Sat 28 Jun 2025 13:02:23 +0000
Manifest this update: Sat 28 Jun 2025 13:02:23 +0000
Manifest next update: Sun 29 Jun 2025 13:02:23 +0000
Files and hashes: 1: KNlHZhzvj3c5evx_WYZ3PPymDMg.roa (hash: VIooQbblCXzCvlc89EdzqvODc1G/is8eypm36M8wtX0=)
2: bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl (hash: JDFgnaKSA3T+p1/JFcgwE9G1Qz19HqKv/GEgGNXT03s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c2:07:42:bf:d7:d1:9b:dc:6c:d4:43:ab:ef:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Validity
Not Before: Jun 28 13:02:23 2025 GMT
Not After : Jun 29 13:02:23 2025 GMT
Subject: CN=01ff5dbfeb16eeb9d1af651a36c86034c4b9b8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2e:c1:27:b7:b4:b4:57:a0:9f:b4:e7:16:7f:
53:0a:8c:49:b6:24:09:3f:7c:f2:a0:aa:38:d2:6a:
84:09:f3:1b:62:9f:fb:5d:f3:a7:bd:26:a7:91:5c:
c4:40:78:17:6f:5b:12:98:bb:9b:97:23:4a:f1:16:
8e:c8:36:6d:ed:43:36:d2:a8:ef:a9:0f:0a:5d:84:
5d:71:84:01:4e:8c:e8:e7:ec:d0:51:57:d3:27:27:
8c:77:53:4a:f2:25:a6:ea:48:27:1a:aa:3a:d6:c4:
4b:d9:76:1f:d4:78:80:1d:eb:f3:3a:4c:ed:18:06:
84:b2:ff:2f:43:5e:54:d9:dd:7c:82:98:ca:8e:16:
69:4f:77:e0:41:fe:86:c9:af:47:d6:54:07:ad:fa:
c0:e6:e7:fc:fb:45:26:af:64:65:b2:57:3b:f4:6f:
4b:a2:64:c6:5d:00:09:84:13:a6:87:15:67:33:6e:
db:55:0c:da:4b:fb:01:03:65:6b:4d:56:f2:04:d4:
8c:00:17:fa:2f:27:bf:99:4a:36:69:52:f9:a2:aa:
a6:16:99:0a:d0:3b:24:11:75:79:c6:d1:45:fb:ec:
7f:48:1a:18:b6:44:ee:78:1f:e2:b2:f7:9a:97:88:
99:f0:d0:a1:0e:4f:18:30:6f:76:88:fd:ef:20:06:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FF:5D:BF:EB:16:EE:B9:D1:AF:65:1A:36:C8:60:34:C4:B9:B8:B7
X509v3 Authority Key Identifier:
keyid:6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:da:3a:29:25:f8:9d:3b:d5:3e:72:ad:aa:97:cc:2e:d0:af:
49:cb:c3:be:46:96:ce:d9:c0:98:61:0d:38:6b:73:da:da:49:
16:47:a3:b4:28:9b:77:af:fa:66:31:f4:d8:f5:b7:63:3e:25:
11:9d:56:a7:ab:59:b7:0d:16:88:4e:ec:38:10:e2:ed:4e:f0:
77:a2:47:22:b9:fb:e0:7d:65:0c:25:01:e4:17:9e:04:d4:2e:
9b:7a:0d:a8:32:48:e8:50:00:7f:9c:03:bb:a4:6a:7b:43:2e:
ca:1f:2f:e9:17:88:d4:ab:ac:94:85:48:8d:15:e7:5b:da:bc:
60:b6:6a:0c:69:36:02:72:55:b8:32:d0:cb:97:dc:eb:05:de:
e4:52:03:07:ce:a7:fa:3c:bb:0b:d3:b6:80:13:f6:ad:60:b7:
b1:1d:20:29:6d:af:2b:98:35:98:aa:77:1c:3a:90:c7:b5:f2:
b0:79:4e:91:f6:0a:c0:08:11:eb:7d:8e:b4:c8:3f:37:01:07:
07:23:8c:7a:dd:f3:86:53:e2:e1:f9:df:4e:80:88:ab:97:03:
9b:9f:b6:da:fb:98:54:86:fc:52:8d:92:0d:c1:c7:18:11:ce:
04:f6:71:4c:ee:2b:8b:2f:e6:26:0d:a4:dc:13:91:2a:30:26:
ef:42:c0:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ocIHQr/X0ZvcbNRDq+/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGQ0MmZmZGI3ZTgyNzcwMjNmMTAxOWI1NTRmZWIxOWY1
YzNmMjMwHhcNMjUwNjI4MTMwMjIzWhcNMjUwNjI5MTMwMjIzWjAzMTEwLwYDVQQD
EygwMWZmNWRiZmViMTZlZWI5ZDFhZjY1MWEzNmM4NjAzNGM0YjliOGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7y7BJ7e0tFegn7TnFn9TCoxJtiQJ
P3zyoKo40mqECfMbYp/7XfOnvSankVzEQHgXb1sSmLublyNK8RaOyDZt7UM20qjv
qQ8KXYRdcYQBTozo5+zQUVfTJyeMd1NK8iWm6kgnGqo61sRL2XYf1HiAHevzOkzt
GAaEsv8vQ15U2d18gpjKjhZpT3fgQf6Gya9H1lQHrfrA5uf8+0Umr2Rlslc79G9L
omTGXQAJhBOmhxVnM27bVQzaS/sBA2VrTVbyBNSMABf6Lye/mUo2aVL5oqqmFpkK
0DskEXV5xtFF++x/SBoYtkTueB/isveal4iZ8NChDk8YMG92iP3vIAYDxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAH/Xb/rFu650a9lGjbIYDTEubi3MB8GA1UdIwQY
MBaAFG3dQv/bfoJ3Aj8QGbVU/rGfXD8jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmQxQ185dC1nbmNDUHhBWnRWVC1zWjljUHlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mMWMzNzUtNDFkYS00ZWE2LWFjZDEt
MDliYzkyZDRlZDk2LzEvYmQxQ185dC1nbmNDUHhBWnRWVC1zWjljUHlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9mMWMzNzUtNDFkYS00ZWE2LWFjZDEtMDliYzkyZDRlZDk2
LzEvYmQxQ185dC1nbmNDUHhBWnRWVC1zWjljUHlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9o6KSX4
nTvVPnKtqpfMLtCvScvDvkaWztnAmGENOGtz2tpJFkejtCibd6/6ZjH02PW3Yz4l
EZ1Wp6tZtw0WiE7sOBDi7U7wd6JHIrn74H1lDCUB5BeeBNQum3oNqDJI6FAAf5wD
u6Rqe0Muyh8v6ReI1KuslIVIjRXnW9q8YLZqDGk2AnJVuDLQy5fc6wXe5FIDB86n
+jy7C9O2gBP2rWC3sR0gKW2vK5g1mKp3HDqQx7XysHlOkfYKwAgR632OtMg/NwEH
ByOMet3zhlPi4fnfToCIq5cDm5+22vuYVIb8Uo2SDcHHGBHOBPZxTO4riy/mJg2k
3BORKjAm70LAEA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:06 2025 by rpki-client