Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
File: bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft (raw, json)
Hash identifier: SDeGW61lb9Ck++DY7LhMs2SkSIgLqXRIObLQz8xLtPk=
Subject key identifier: CD:D1:3F:7D:20:A4:6E:C1:1B:B8:EF:6B:F7:61:99:04:15:21:75:E6
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial: 0197B6A0E29ADDD3517EF4CBEF8D58937AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:26 +0000
Manifest this update: Sat 28 Jun 2025 13:01:26 +0000
Manifest next update: Sun 29 Jun 2025 13:01:26 +0000
Files and hashes: 1: 4ZrViR6MQ2LLwx-EpgYcmNOkhLU.roa (hash: CcPs0/7vgqCna/xx+mVGMJUsG3faAZo8Ob5SJoRyZWw=)
2: bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl (hash: l0sPvf++Hvle+iQJ03/AYsqfTyTGAZFzm7K+/92NhM4=)
3: rUMFzM_6Km-2DqJ2YTtdSrWtUek.roa (hash: abXfjUUyhIhLutP9c/7/Y4Znd/9ps5Twdqn7uTEich0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e2:9a:dd:d3:51:7e:f4:cb:ef:8d:58:93:7a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Validity
Not Before: Jun 28 13:01:26 2025 GMT
Not After : Jun 29 13:01:26 2025 GMT
Subject: CN=cdd13f7d20a46ec11bb8ef6bf7619904152175e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:28:d8:f1:f2:cb:97:63:ad:09:b2:45:70:
11:7a:23:82:29:48:d0:54:99:c4:e5:63:8c:b1:ec:
61:e6:d4:ff:a0:f0:8f:8f:94:4f:96:ef:10:c7:2d:
7d:3d:a6:6e:f2:b1:66:72:2d:3a:b1:2c:aa:76:cb:
5e:12:48:5f:3b:d0:4d:42:a6:04:4a:ff:c0:6d:b9:
7b:eb:8a:1d:c2:ef:5e:34:32:91:22:25:1f:c5:5d:
2e:79:85:38:66:6e:ce:b9:e7:f7:d2:b5:ad:eb:9b:
0e:0e:77:43:aa:05:85:64:84:a0:2f:16:f9:d7:ae:
c0:c2:84:6e:11:24:8c:4f:ec:f9:d6:9a:11:64:42:
5c:25:00:7c:ab:20:a1:b1:14:e6:8d:58:64:89:e6:
b9:66:aa:f3:45:2c:d1:39:41:5b:8b:f8:0f:1a:54:
e6:c1:8e:2d:0b:4a:d2:fc:81:d1:e0:aa:7b:3c:2f:
fa:3e:71:8c:42:92:18:67:d7:32:92:89:4f:17:df:
21:b0:aa:70:f5:d4:b4:f0:5c:0d:1e:ef:1d:40:6c:
06:8d:10:d4:a9:b3:53:78:53:b4:12:0d:0b:a4:cc:
eb:82:c3:e7:47:27:fb:0f:9f:97:81:04:bd:24:31:
fd:f1:a6:56:e0:6d:32:d2:51:54:b4:56:a7:cb:5c:
72:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D1:3F:7D:20:A4:6E:C1:1B:B8:EF:6B:F7:61:99:04:15:21:75:E6
X509v3 Authority Key Identifier:
keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fb:95:07:b6:7b:d7:39:66:81:e8:c4:be:55:45:17:70:d6:
95:c3:fc:3c:fd:7c:fd:04:f1:b4:b8:3f:7e:a3:87:a7:0c:05:
f7:e1:ec:80:22:a0:20:64:92:d8:ca:91:33:f4:bf:e7:c5:10:
90:36:59:43:d5:86:f4:97:45:5b:52:03:0e:6a:06:4e:0c:a9:
78:ef:f4:60:e7:b0:12:9e:48:53:66:2c:8b:cc:0a:f8:e2:34:
d6:33:50:11:31:e7:cf:41:8b:4e:bf:d5:e1:c1:9a:71:13:dd:
37:9f:b2:2f:20:68:8d:f9:d3:7e:0c:b1:43:8f:02:b5:5f:ab:
9f:f7:60:c0:da:30:e9:05:85:3d:cf:77:13:9b:e0:bd:49:81:
89:a0:0a:40:f4:cc:6a:e2:1f:33:b8:d3:fa:de:1a:c8:eb:2c:
cb:15:c6:5b:65:77:bc:31:6e:c3:dc:ed:d2:ee:5d:2c:22:6f:
22:af:eb:0d:4f:17:12:51:46:73:8f:28:dc:7d:4b:d9:09:17:
bd:d8:eb:a4:4f:57:38:10:a5:dd:93:41:19:61:67:ac:09:65:
19:53:ec:7b:af:a8:13:0a:eb:ed:78:21:7e:d4:cf:aa:db:3b:
08:bd:ec:62:b4:b3:15:c9:be:30:26:89:c3:8f:72:d8:f6:24:
f6:d9:61:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oOKa3dNRfvTL741Yk3rVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMTJhYjcwNjNjODVkZmUyMmZhN2E5OWQ5YzZmY2U1ZTYx
NjEwMzEwHhcNMjUwNjI4MTMwMTI2WhcNMjUwNjI5MTMwMTI2WjAzMTEwLwYDVQQD
EyhjZGQxM2Y3ZDIwYTQ2ZWMxMWJiOGVmNmJmNzYxOTkwNDE1MjE3NWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuoo2PHyy5djrQmyRXAReiOCKUjQ
VJnE5WOMsexh5tT/oPCPj5RPlu8Qxy19PaZu8rFmci06sSyqdsteEkhfO9BNQqYE
Sv/Abbl764odwu9eNDKRIiUfxV0ueYU4Zm7Ouef30rWt65sODndDqgWFZISgLxb5
167AwoRuESSMT+z51poRZEJcJQB8qyChsRTmjVhkiea5ZqrzRSzROUFbi/gPGlTm
wY4tC0rS/IHR4Kp7PC/6PnGMQpIYZ9cykolPF98hsKpw9dS08FwNHu8dQGwGjRDU
qbNTeFO0Eg0LpMzrgsPnRyf7D5+XgQS9JDH98aZW4G0y0lFUtFany1xyuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3RP30gpG7BG7jva/dhmQQVIXXmMB8GA1UdIwQY
MBaAFGwSq3BjyF3+Ivp6mdnG/OXmFhAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xMmU2NzktODU2Yy00OGVhLWEwNjIt
OTU5ZWJiOTA1YjNhLzEvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xMmU2NzktODU2Yy00OGVhLWEwNjItOTU5ZWJiOTA1YjNh
LzEvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPuVB7Z7
1zlmgejEvlVFF3DWlcP8PP18/QTxtLg/fqOHpwwF9+HsgCKgIGSS2MqRM/S/58UQ
kDZZQ9WG9JdFW1IDDmoGTgypeO/0YOewEp5IU2Ysi8wK+OI01jNQETHnz0GLTr/V
4cGacRPdN5+yLyBojfnTfgyxQ48CtV+rn/dgwNow6QWFPc93E5vgvUmBiaAKQPTM
auIfM7jT+t4ayOssyxXGW2V3vDFuw9zt0u5dLCJvIq/rDU8XElFGc48o3H1L2QkX
vdjrpE9XOBCl3ZNBGWFnrAllGVPse6+oEwrr7XghftTPqts7CL3sYrSzFcm+MCaJ
w49y2PYk9tlhsw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:17 2025 by rpki-client