Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
File: BjcCShgkPkX40Eqtrr66kKVp6IM.mft (raw, json)
Hash identifier: +BDmJe51M+yUkTPAwY8cIBJhReEjFMwCKspHv+JZK1A=
Subject key identifier: 11:6F:AA:0E:C5:BE:73:A9:16:CA:E2:00:83:90:9B:89:40:84:35:C7
Authority key identifier: 06:37:02:4A:18:24:3E:45:F8:D0:4A:AD:AE:BE:BA:90:A5:69:E8:83
Certificate issuer: /CN=0637024a18243e45f8d04aadaebeba90a569e883
Certificate serial: 0197B7EA63E702F37EF2AE869B9316936779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
Manifest number: 2B
Signing time: Sat 28 Jun 2025 19:01:20 +0000
Manifest this update: Sat 28 Jun 2025 19:01:20 +0000
Manifest next update: Sun 29 Jun 2025 19:01:20 +0000
Files and hashes: 1: 6FSKWG-EGTHbHR3wSnfZzAiHhXY.roa (hash: VmwTyVH3w9xwUHgrQoPTWP7hFDzEQmvR4R1wYGDo/XU=)
2: BjcCShgkPkX40Eqtrr66kKVp6IM.crl (hash: W01LQf5bgTFnalo2EY1jzjAtDLqL+vhK+m2kdOa5/jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:63:e7:02:f3:7e:f2:ae:86:9b:93:16:93:67:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0637024a18243e45f8d04aadaebeba90a569e883
Validity
Not Before: Jun 28 19:01:20 2025 GMT
Not After : Jun 29 19:01:20 2025 GMT
Subject: CN=116faa0ec5be73a916cae20083909b89408435c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:f2:78:d5:85:03:3e:a4:4a:85:4c:41:1d:
e9:8a:dd:a5:71:3e:52:d6:de:3c:9e:fe:6d:84:43:
5f:f4:96:7b:89:3e:85:71:9e:a7:96:24:5a:78:63:
49:f5:02:6f:37:72:1b:46:76:48:a4:3d:f0:24:8b:
88:ed:4e:ec:9c:5b:bf:72:8e:62:b6:36:a7:5f:67:
94:5b:00:e9:01:6a:88:40:2d:3b:dc:d5:45:ff:00:
cb:67:23:f0:1c:e7:ff:e0:d2:ed:da:18:e8:94:2c:
7f:20:38:92:36:ca:61:6c:cb:72:46:82:76:f6:eb:
62:2c:99:da:74:b4:05:e4:84:13:65:6e:c1:61:b8:
5c:9d:0b:23:0c:89:27:5a:9a:ba:f3:ae:41:b1:40:
22:75:20:53:27:26:f8:17:4a:fb:ba:de:45:f4:4b:
de:0a:e0:02:6f:57:8f:03:1a:72:d7:c5:bf:b5:68:
de:8e:98:a6:38:49:7a:dc:ca:fa:b1:a3:89:5f:41:
6d:14:4c:6d:29:f4:11:89:6f:5b:e9:fe:50:1d:27:
d3:c6:8d:39:ba:03:89:0d:60:ac:e2:fd:40:59:2e:
93:bd:3d:f3:bd:b8:13:2f:52:4d:db:f6:f1:bf:38:
70:b4:14:e2:b4:3a:f7:bf:4c:16:30:04:03:82:ae:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6F:AA:0E:C5:BE:73:A9:16:CA:E2:00:83:90:9B:89:40:84:35:C7
X509v3 Authority Key Identifier:
keyid:06:37:02:4A:18:24:3E:45:F8:D0:4A:AD:AE:BE:BA:90:A5:69:E8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:95:d5:95:b9:88:4f:18:cb:f5:2b:b5:8f:d3:1e:ea:96:58:
3b:69:50:67:52:24:b3:3a:31:4c:f4:ba:90:03:f7:77:12:77:
81:27:e0:2a:d6:96:63:cd:ca:c4:de:9f:ab:23:33:a8:60:7f:
94:21:3e:db:8f:df:6f:e5:fe:cf:c1:49:16:f6:37:11:38:f4:
5c:59:95:9b:3a:71:bc:d0:e1:45:29:b3:de:a3:f9:3a:0f:b1:
85:12:6b:f7:6b:8c:2c:33:02:72:b6:ff:ff:e6:86:85:06:3d:
00:dd:60:ec:17:aa:4f:5e:bf:b8:26:61:1f:85:9e:c2:fd:58:
f0:14:40:82:92:cb:a0:77:a3:31:b6:8e:82:78:fc:f7:b0:07:
1e:bc:1e:2b:33:bb:e3:35:a2:7c:ef:e9:7c:b9:a6:a9:45:59:
f5:25:7a:29:45:b4:c0:c3:43:64:b7:ba:6a:cf:bc:83:e3:e5:
9e:89:b2:fa:ea:5b:6b:f6:aa:77:a6:8c:8a:3c:64:8e:d8:71:
ce:d1:41:0d:7d:52:83:f3:81:a9:c7:25:b4:d6:f0:35:d0:65:
36:01:85:78:de:13:47:40:3f:15:ec:96:1e:88:6d:3f:b3:3b:
d9:5c:b9:61:c5:dc:56:cb:90:c7:67:95:4c:6c:d1:69:22:4d:
4a:7a:2f:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36mPnAvN+8q6Gm5MWk2d5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MzcwMjRhMTgyNDNlNDVmOGQwNGFhZGFlYmViYTkwYTU2
OWU4ODMwHhcNMjUwNjI4MTkwMTIwWhcNMjUwNjI5MTkwMTIwWjAzMTEwLwYDVQQD
EygxMTZmYWEwZWM1YmU3M2E5MTZjYWUyMDA4MzkwOWI4OTQwODQzNWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFTyeNWFAz6kSoVMQR3pit2lcT5S
1t48nv5thENf9JZ7iT6FcZ6nliRaeGNJ9QJvN3IbRnZIpD3wJIuI7U7snFu/co5i
tjanX2eUWwDpAWqIQC073NVF/wDLZyPwHOf/4NLt2hjolCx/IDiSNsphbMtyRoJ2
9utiLJnadLQF5IQTZW7BYbhcnQsjDIknWpq6865BsUAidSBTJyb4F0r7ut5F9Eve
CuACb1ePAxpy18W/tWjejpimOEl63Mr6saOJX0FtFExtKfQRiW9b6f5QHSfTxo05
ugOJDWCs4v1AWS6TvT3zvbgTL1JN2/bxvzhwtBTitDr3v0wWMAQDgq7MKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFvqg7FvnOpFsriAIOQm4lAhDXHMB8GA1UdIwQY
MBaAFAY3AkoYJD5F+NBKra6+upClaeiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmpjQ1NoZ2tQa1g0MEVxdHJyNjZrS1ZwNklNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85NzMwZDQtNGY3ZC00OTQzLWI5ZmIt
N2Q5NGE5NGUzMzEyLzEvQmpjQ1NoZ2tQa1g0MEVxdHJyNjZrS1ZwNklNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy85NzMwZDQtNGY3ZC00OTQzLWI5ZmItN2Q5NGE5NGUzMzEy
LzEvQmpjQ1NoZ2tQa1g0MEVxdHJyNjZrS1ZwNklNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZXVlbmI
TxjL9Su1j9Me6pZYO2lQZ1IkszoxTPS6kAP3dxJ3gSfgKtaWY83KxN6fqyMzqGB/
lCE+24/fb+X+z8FJFvY3ETj0XFmVmzpxvNDhRSmz3qP5Og+xhRJr92uMLDMCcrb/
/+aGhQY9AN1g7BeqT16/uCZhH4Wewv1Y8BRAgpLLoHejMbaOgnj897AHHrweKzO7
4zWifO/pfLmmqUVZ9SV6KUW0wMNDZLe6as+8g+Plnomy+upba/aqd6aMijxkjthx
ztFBDX1Sg/OBqccltNbwNdBlNgGFeN4TR0A/FeyWHohtP7M72Vy5YcXcVsuQx2eV
TGzRaSJNSnov9w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:48 2025 by rpki-client