Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: O6Q5OHGJ/wn4t1R88iN3SFN6bw12WeYGwqc+MzTIPkM=
Subject key identifier: D6:C1:20:44:FD:B5:F4:11:99:9A:1C:21:79:EA:DD:68:30:AA:56:E8
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 0197B77C75DA91240907053BC097F9C1DA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 1544
Signing time: Sat 28 Jun 2025 17:01:16 +0000
Manifest this update: Sat 28 Jun 2025 17:01:16 +0000
Manifest next update: Sun 29 Jun 2025 17:01:16 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: nf0mB19lXfb80u9whAV/Dyng0c+vt6K/JJQIMBSW2lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:75:da:91:24:09:07:05:3b:c0:97:f9:c1:da:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: Jun 28 17:01:16 2025 GMT
Not After : Jun 29 17:01:16 2025 GMT
Subject: CN=d6c12044fdb5f411999a1c2179eadd6830aa56e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:0d:7b:6a:c5:57:a8:45:16:63:f5:e2:1a:
1c:b0:f8:b2:11:c4:4c:c3:3a:48:17:16:e8:6e:2c:
3b:38:77:c1:f3:cf:9f:b1:be:fe:22:2c:cf:1f:75:
0b:57:d5:7d:f6:0b:f0:b1:f5:af:4d:77:8e:13:2b:
78:19:07:bb:d1:5c:ba:bd:7b:33:75:43:15:1a:28:
54:9d:73:03:57:8c:bc:f9:18:0c:25:f9:f9:22:93:
77:2f:27:e8:6d:d5:54:39:37:eb:91:f4:58:72:07:
73:6c:2c:74:85:5d:c7:cc:d5:c7:c7:ea:e5:1b:91:
52:9e:1b:8f:7d:d6:a6:7b:4f:70:f1:1e:5c:54:54:
69:6e:df:b4:3e:7a:e8:66:63:69:fb:5d:4c:6d:a1:
4d:53:94:a1:ef:52:3e:53:3f:f1:86:e3:17:33:d2:
80:81:dc:ac:75:89:b7:43:35:1e:40:16:29:2b:96:
84:fb:1f:2a:a3:80:a1:d9:49:ba:44:79:7d:56:61:
5a:4d:8b:99:03:e4:dc:95:80:d1:05:07:f8:23:ce:
da:97:3c:f1:97:a8:1b:c8:12:63:d2:ad:92:95:bd:
8a:d4:e9:51:94:f8:26:b0:90:26:02:3e:ed:bd:a4:
fd:73:81:94:ee:85:81:61:01:48:f8:bd:ba:76:d1:
d1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C1:20:44:FD:B5:F4:11:99:9A:1C:21:79:EA:DD:68:30:AA:56:E8
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:27:02:55:41:69:27:f7:ab:1b:0a:f9:98:75:94:f7:05:1f:
9c:15:a4:05:b0:2d:55:c3:6e:65:cd:50:d5:17:0f:49:9f:2f:
86:96:3e:7c:fa:7f:da:52:df:f3:95:a8:3c:27:ef:b4:52:63:
1d:68:0c:63:eb:a8:a8:de:df:3a:1b:26:3c:d5:8f:a9:7c:0c:
d4:62:d9:5e:9b:97:ee:56:44:f1:64:43:3e:8b:a7:00:ab:7f:
27:99:75:e0:b0:74:82:5d:5b:75:c0:62:14:0a:c9:0d:19:b7:
90:bb:e6:39:4b:3d:51:a0:5a:14:09:e5:49:7c:9f:4b:34:f5:
89:0c:35:82:10:1b:92:9a:2b:f3:e8:8d:45:fe:f6:6b:a6:b0:
41:ff:20:d7:49:d4:dd:bd:66:27:3e:b9:24:ef:53:b8:99:61:
99:1a:14:68:f9:a5:5a:1c:73:3d:5b:66:e0:43:cc:55:43:ec:
11:3a:6f:16:2d:d9:2c:c1:f3:e5:80:02:b6:67:d0:57:cf:86:
00:b7:cf:da:ef:a9:92:cf:7a:2f:b3:05:0e:f5:59:4d:7d:de:
52:c4:3b:9c:96:f9:25:8e:d1:8d:88:1a:b3:6c:9a:a8:69:91:
a8:7f:15:13:5a:2b:1e:1a:16:95:76:6c:bb:53:3b:a5:9d:ec:
66:a7:d0:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fHXakSQJBwU7wJf5wdqdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZWUwNzk5ZjA4YWY4ZmU1MjBmOTQ4MmNkZDA1ZThlYTY1
ZTYxYTgwHhcNMjUwNjI4MTcwMTE2WhcNMjUwNjI5MTcwMTE2WjAzMTEwLwYDVQQD
EyhkNmMxMjA0NGZkYjVmNDExOTk5YTFjMjE3OWVhZGQ2ODMwYWE1NmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS0Ne2rFV6hFFmP14hocsPiyEcRM
wzpIFxbobiw7OHfB88+fsb7+IizPH3ULV9V99gvwsfWvTXeOEyt4GQe70Vy6vXsz
dUMVGihUnXMDV4y8+RgMJfn5IpN3LyfobdVUOTfrkfRYcgdzbCx0hV3HzNXHx+rl
G5FSnhuPfdame09w8R5cVFRpbt+0PnroZmNp+11MbaFNU5Sh71I+Uz/xhuMXM9KA
gdysdYm3QzUeQBYpK5aE+x8qo4Ch2Um6RHl9VmFaTYuZA+TclYDRBQf4I87alzzx
l6gbyBJj0q2Slb2K1OlRlPgmsJAmAj7tvaT9c4GU7oWBYQFI+L26dtHROQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbBIET9tfQRmZocIXnq3WgwqlboMB8GA1UdIwQY
MBaAFAfuB5nwivj+Ug+Ugs3QXo6mXmGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi00SG1mQ0stUDVTRDVTQ3pkQmVqcVplWWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83ZTZkY2UtYzhlZi00N2UzLWE2ZDIt
YTcyMzQ0YjNmZjEwLzEvQi00SG1mQ0stUDVTRDVTQ3pkQmVqcVplWWFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83ZTZkY2UtYzhlZi00N2UzLWE2ZDItYTcyMzQ0YjNmZjEw
LzEvQi00SG1mQ0stUDVTRDVTQ3pkQmVqcVplWWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0CcCVUFp
J/erGwr5mHWU9wUfnBWkBbAtVcNuZc1Q1RcPSZ8vhpY+fPp/2lLf85WoPCfvtFJj
HWgMY+uoqN7fOhsmPNWPqXwM1GLZXpuX7lZE8WRDPounAKt/J5l14LB0gl1bdcBi
FArJDRm3kLvmOUs9UaBaFAnlSXyfSzT1iQw1ghAbkpor8+iNRf72a6awQf8g10nU
3b1mJz65JO9TuJlhmRoUaPmlWhxzPVtm4EPMVUPsETpvFi3ZLMHz5YACtmfQV8+G
ALfP2u+pks96L7MFDvVZTX3eUsQ7nJb5JY7RjYgas2yaqGmRqH8VE1orHhoWlXZs
u1M7pZ3sZqfQzA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:56:27 2025 by rpki-client