Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File: B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier: y90RScqZ9D+RqpV+Fx/cMcMdrYbQYOa5w8TFzpCpZUY=
Subject key identifier: 31:65:D6:80:0C:5D:53:D4:03:1A:CC:F9:77:B9:BC:BF:EE:CD:7D:89
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial: 0197B88F754E1CC5B981C537C071C83F92E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 22:01:38 +0000
Manifest this update: Sat 28 Jun 2025 22:01:38 +0000
Manifest next update: Sun 29 Jun 2025 22:01:38 +0000
Files and hashes: 1: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: 4ORJMbsIDWAvUaiA0ERs8AIBAB4MNAWQebJIfuhW+yE=)
2: lW93GA1GW7tkRrvTWbYjnCQPx5E.roa (hash: EIz+VNjlZLw/OZlxy/agv5UkJ/Oxh/UU8FDTP682cjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:75:4e:1c:c5:b9:81:c5:37:c0:71:c8:3f:92:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Validity
Not Before: Jun 28 22:01:38 2025 GMT
Not After : Jun 29 22:01:38 2025 GMT
Subject: CN=3165d6800c5d53d4031accf977b9bcbfeecd7d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0b:c8:32:45:76:28:7d:88:33:3d:3f:27:83:
9e:d2:b9:de:f0:6d:03:eb:30:d4:aa:b4:fb:1d:91:
e3:ab:3f:14:cc:f2:a4:12:61:28:75:ac:49:59:1d:
34:1e:58:63:3a:2a:14:43:03:81:69:26:2e:94:ae:
b8:83:e4:08:93:64:c9:27:48:a1:ac:43:ea:f8:b9:
26:86:f4:a0:25:db:15:a4:4c:70:22:73:ce:1c:71:
9d:47:ea:d1:5a:b5:8e:05:4c:91:1b:9b:b1:69:ac:
8b:b6:37:1b:94:78:29:42:74:a0:29:b1:f3:1b:23:
c2:6a:8a:54:d0:34:c8:2f:58:25:16:e8:33:6c:4e:
59:ff:4f:37:50:11:a3:10:50:51:67:4f:6b:1d:42:
bd:44:d2:29:02:14:36:08:29:f9:b5:70:76:b0:32:
c4:56:ee:03:22:b4:7b:32:65:2f:f9:71:36:28:71:
8c:07:30:97:e0:1b:68:13:07:d3:5b:c4:d1:cd:16:
c6:cf:40:d8:5c:1c:cb:eb:2f:61:5e:e7:87:c5:c7:
14:c4:4f:6e:36:6a:3e:dc:2e:dd:7c:e5:b2:42:49:
64:80:1a:ec:a4:5d:2c:f3:c5:61:67:9b:49:66:ba:
95:5f:e9:fc:ff:7b:df:38:3e:52:8b:70:b3:d3:5b:
45:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:65:D6:80:0C:5D:53:D4:03:1A:CC:F9:77:B9:BC:BF:EE:CD:7D:89
X509v3 Authority Key Identifier:
keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:dd:e0:4b:5e:4c:a7:74:67:35:4f:7a:b9:0d:cf:34:52:e2:
bd:0a:4a:74:10:fb:91:75:a2:04:13:8e:97:51:c7:cb:9c:43:
e6:9e:fe:77:fa:0b:0d:b6:ee:7c:a4:fd:af:5f:b6:36:8d:ad:
c7:7a:57:8d:9e:a6:21:62:a5:35:f4:c6:51:38:7a:69:35:47:
77:61:9d:17:40:3f:2e:46:f2:ac:7a:d6:dd:39:73:8e:37:8e:
cb:7d:a0:ee:8c:5f:d3:fa:f2:6c:b5:f6:a3:90:8e:a5:cc:bd:
ff:5a:21:eb:24:d7:5e:6e:8e:f6:40:31:2f:4b:b5:aa:43:2b:
6e:ee:45:f6:72:74:54:d7:b8:6c:fb:92:f3:1a:c7:a4:1c:3b:
27:de:89:aa:d3:62:9a:1c:d1:9e:a2:72:21:5e:6a:c3:88:dd:
08:fb:d9:e9:5e:93:30:26:05:50:16:14:51:bb:4d:cf:10:8f:
75:4f:4b:42:f2:17:d8:ff:d2:4b:22:8a:19:e3:d2:11:57:99:
d0:2a:f1:d9:d4:82:f2:ab:58:72:f4:61:52:ae:20:dc:6c:8e:
b3:1f:4d:af:31:45:60:dc:05:cb:60:fc:97:0f:13:fa:62:f5:
f8:bc:18:83:de:1b:0e:be:c8:07:1c:bb:16:49:8f:4c:7e:e4:
f5:22:80:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j3VOHMW5gcU3wHHIP5LnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NTYwZTNlNzJjNjA3OWEwNGU3ZDFmNjEwM2I5ZGY3ODk3
OWE1MjIwHhcNMjUwNjI4MjIwMTM4WhcNMjUwNjI5MjIwMTM4WjAzMTEwLwYDVQQD
EygzMTY1ZDY4MDBjNWQ1M2Q0MDMxYWNjZjk3N2I5YmNiZmVlY2Q3ZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigvIMkV2KH2IMz0/J4Oe0rne8G0D
6zDUqrT7HZHjqz8UzPKkEmEodaxJWR00HlhjOioUQwOBaSYulK64g+QIk2TJJ0ih
rEPq+LkmhvSgJdsVpExwInPOHHGdR+rRWrWOBUyRG5uxaayLtjcblHgpQnSgKbHz
GyPCaopU0DTIL1glFugzbE5Z/083UBGjEFBRZ09rHUK9RNIpAhQ2CCn5tXB2sDLE
Vu4DIrR7MmUv+XE2KHGMBzCX4BtoEwfTW8TRzRbGz0DYXBzL6y9hXueHxccUxE9u
Nmo+3C7dfOWyQklkgBrspF0s88VhZ5tJZrqVX+n8/3vfOD5Si3Cz01tFhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFl1oAMXVPUAxrM+Xe5vL/uzX2JMB8GA1UdIwQY
MBaAFAdWDj5yxgeaBOfR9hA7nfeJeaUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTct
ODIyMWQyMTQzNzk2LzEvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTctODIyMWQyMTQzNzk2
LzEvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfd3gS15M
p3RnNU96uQ3PNFLivQpKdBD7kXWiBBOOl1HHy5xD5p7+d/oLDbbufKT9r1+2No2t
x3pXjZ6mIWKlNfTGUTh6aTVHd2GdF0A/LkbyrHrW3TlzjjeOy32g7oxf0/rybLX2
o5COpcy9/1oh6yTXXm6O9kAxL0u1qkMrbu5F9nJ0VNe4bPuS8xrHpBw7J96JqtNi
mhzRnqJyIV5qw4jdCPvZ6V6TMCYFUBYUUbtNzxCPdU9LQvIX2P/SSyKKGePSEVeZ
0Crx2dSC8qtYcvRhUq4g3GyOsx9NrzFFYNwFy2D8lw8T+mL1+LwYg94bDr7IBxy7
FkmPTH7k9SKAOg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:05 2025 by rpki-client