Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
File: b1dizVOgPjIkIEagGo4cyslGtt0.mft (raw, json)
Hash identifier: 5fc0GaiOvUUMeEYRt6C00vplivESngMTSEKEJOneLmE=
Subject key identifier: E1:74:7B:33:E8:2E:93:4B:BD:7B:D9:20:12:92:25:BE:4B:C5:58:DF
Authority key identifier: 6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
Certificate issuer: /CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Certificate serial: 0197BAB43E23B08CDD522AAAAB4B5C23AE84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 08:01:03 +0000
Manifest this update: Sun 29 Jun 2025 08:01:03 +0000
Manifest next update: Mon 30 Jun 2025 08:01:03 +0000
Files and hashes: 1: 6BpgCrxCXZbdJqbyAxHujz06qK4.roa (hash: f/x5QoRJQO0akFB/+sOaWahUSMLdwrmuI7CYvjTppDI=)
2: b1dizVOgPjIkIEagGo4cyslGtt0.crl (hash: bsCmyZQJO+gPCjV+xI1eAqPUwf1FK4Ku8WCUr0BFYUo=)
3: gLGnZHyxZ4IIbPZ5Ki6wiGCKWc0.roa (hash: 0298GG5PDrm0T8wMd30AmNaheumCEMviVlo74f76BNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:3e:23:b0:8c:dd:52:2a:aa:ab:4b:5c:23:ae:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Validity
Not Before: Jun 29 08:01:03 2025 GMT
Not After : Jun 30 08:01:03 2025 GMT
Subject: CN=e1747b33e82e934bbd7bd920129225be4bc558df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:3a:7f:0d:d4:85:12:45:85:c0:14:fe:3d:
bd:99:28:12:13:72:f7:c4:1e:77:5f:6f:a6:34:e3:
0f:c2:7d:e7:01:72:74:63:2a:3f:8c:bb:3c:71:5e:
75:ce:e3:94:d3:d0:a6:b6:92:cc:f3:e5:fc:c4:e5:
fa:59:46:7a:83:57:59:ce:d2:bd:91:2c:80:80:45:
29:19:63:aa:aa:59:5e:eb:e2:a1:b0:d9:bd:95:19:
cc:b6:f0:32:28:d7:a1:30:56:89:d1:53:95:a0:0a:
63:e7:d0:03:bf:eb:13:dd:02:c8:39:c8:ab:0f:91:
81:a5:6f:a4:78:2c:be:b5:b5:e6:dc:7b:24:cc:2c:
b0:5e:7c:2e:11:6e:aa:b5:a9:bf:0f:64:fc:8f:c9:
31:8e:82:0d:dd:85:c4:ba:ea:cf:e6:b9:a9:7b:99:
dd:7a:08:54:8c:56:da:d5:aa:9a:a1:77:68:9a:67:
e8:15:20:12:da:53:5f:5f:47:a9:17:47:ff:71:0f:
e2:39:d3:fd:46:2b:ad:df:97:d9:f4:ff:ac:63:16:
6f:6d:31:bc:6a:9e:6e:8e:18:a9:7f:62:00:6a:ba:
66:62:1f:c3:16:27:88:d4:48:6b:13:2a:72:28:98:
4c:0f:95:96:94:dd:8d:41:87:cb:31:6c:bc:e9:11:
88:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:74:7B:33:E8:2E:93:4B:BD:7B:D9:20:12:92:25:BE:4B:C5:58:DF
X509v3 Authority Key Identifier:
keyid:6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a4:b8:8f:38:42:89:22:8b:0e:8e:e1:b8:47:2e:5c:d7:ce:
25:c5:85:3d:7c:70:4d:c3:3a:b5:a6:aa:01:56:cf:8f:75:8c:
9e:87:52:24:6f:aa:e0:64:30:a2:c3:1d:1c:f8:96:0b:97:cf:
03:60:5f:34:49:7c:83:f2:90:02:e5:c7:40:67:f5:7f:7e:c5:
23:5b:e5:7c:f4:d0:97:3f:36:ed:29:79:85:e8:0c:ae:f4:ec:
82:b0:96:46:d7:ad:4a:a6:89:c8:69:87:9a:49:16:8c:11:4f:
be:8c:f8:0f:1f:87:32:ef:77:3d:94:e9:56:14:0c:b2:3e:35:
44:29:f5:53:c7:06:ea:d5:ef:18:11:28:07:60:51:1f:4d:95:
5a:3b:43:9d:2b:55:1d:65:97:4f:8b:8d:9b:3f:7e:d2:f6:13:
08:74:9d:e6:20:a8:b2:56:d1:87:0e:3e:1a:e1:ad:02:cf:6c:
86:9e:30:73:11:8b:54:b6:69:11:a2:13:c3:89:2f:d1:7d:32:
80:bb:32:ae:bd:30:ec:ed:e0:6b:d6:f7:a1:bd:40:67:ba:db:
69:d6:e5:dd:4d:9c:8a:2d:ce:53:48:b1:34:b2:b4:e9:38:d3:
50:ea:d3:28:b1:f3:11:05:98:e9:7e:37:75:bd:ff:8a:ff:36:
c4:02:56:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6tD4jsIzdUiqqq0tcI66EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNTc2MmNkNTNhMDNlMzIyNDIwNDZhMDFhOGUxY2NhYzk0
NmI2ZGQwHhcNMjUwNjI5MDgwMTAzWhcNMjUwNjMwMDgwMTAzWjAzMTEwLwYDVQQD
EyhlMTc0N2IzM2U4MmU5MzRiYmQ3YmQ5MjAxMjkyMjViZTRiYzU1OGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku86fw3UhRJFhcAU/j29mSgSE3L3
xB53X2+mNOMPwn3nAXJ0Yyo/jLs8cV51zuOU09CmtpLM8+X8xOX6WUZ6g1dZztK9
kSyAgEUpGWOqqlle6+KhsNm9lRnMtvAyKNehMFaJ0VOVoApj59ADv+sT3QLIOcir
D5GBpW+keCy+tbXm3HskzCywXnwuEW6qtam/D2T8j8kxjoIN3YXEuurP5rmpe5nd
eghUjFba1aqaoXdommfoFSAS2lNfX0epF0f/cQ/iOdP9Riut35fZ9P+sYxZvbTG8
ap5ujhipf2IAarpmYh/DFieI1EhrEypyKJhMD5WWlN2NQYfLMWy86RGIXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOF0ezPoLpNLvXvZIBKSJb5LxVjfMB8GA1UdIwQY
MBaAFG9XYs1ToD4yJCBGoBqOHMrJRrbdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjFkaXpWT2dQaklrSUVhZ0dvNGN5c2xHdHQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mNmZkYzMtOWNmYy00N2ZkLWJiYTgt
NzljYmYzOTVkNzI2LzEvYjFkaXpWT2dQaklrSUVhZ0dvNGN5c2xHdHQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mNmZkYzMtOWNmYy00N2ZkLWJiYTgtNzljYmYzOTVkNzI2
LzEvYjFkaXpWT2dQaklrSUVhZ0dvNGN5c2xHdHQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqS4jzhC
iSKLDo7huEcuXNfOJcWFPXxwTcM6taaqAVbPj3WMnodSJG+q4GQwosMdHPiWC5fP
A2BfNEl8g/KQAuXHQGf1f37FI1vlfPTQlz827Sl5hegMrvTsgrCWRtetSqaJyGmH
mkkWjBFPvoz4Dx+HMu93PZTpVhQMsj41RCn1U8cG6tXvGBEoB2BRH02VWjtDnStV
HWWXT4uNmz9+0vYTCHSd5iCoslbRhw4+GuGtAs9shp4wcxGLVLZpEaITw4kv0X0y
gLsyrr0w7O3ga9b3ob1AZ7rbadbl3U2cii3OU0ixNLK06TjTUOrTKLHzEQWY6X43
db3/iv82xAJW5Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:34:17 2025 by rpki-client