Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
File: bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json)
Hash identifier: aWaueFn9ZB/0tdRejgyGaKhxWO9v2pY2KD/GcSL6gI0=
Subject key identifier: 5E:39:F6:2E:4D:68:B5:DD:68:6E:18:48:A2:F8:74:77:A0:A5:FF:2E
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Certificate issuer: /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial: 0197B7B34312C775732A988A672E9089182D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 18:01:07 +0000
Manifest this update: Sat 28 Jun 2025 18:01:07 +0000
Manifest next update: Sun 29 Jun 2025 18:01:07 +0000
Files and hashes: 1: 49pxkgi7itIv6ImUGF743Hog5ps.roa (hash: hT65WPD3rxjKAyyXgkyC1Te/5QcBwu6G6s4Re/Tw2UE=)
2: Jyvq7rcCs6Qlew8Ff4iEMvVHpXo.roa (hash: cAmAOJsrcg5h/lolypAUDsWdoBjnFRvupRZVbDEj0XI=)
3: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: IplIbR41U2fmeH4y70mQE9yKB7iZLwTt5hJ4sYCFlZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:43:12:c7:75:73:2a:98:8a:67:2e:90:89:18:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Validity
Not Before: Jun 28 18:01:07 2025 GMT
Not After : Jun 29 18:01:07 2025 GMT
Subject: CN=5e39f62e4d68b5dd686e1848a2f87477a0a5ff2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:20:45:6b:c4:c3:d7:7b:45:b1:8a:86:e5:
44:af:fb:86:a2:ac:f1:0d:26:03:e5:71:f8:4c:dc:
12:37:83:2f:5d:e9:cd:11:cd:44:67:be:81:fb:27:
b6:1e:58:15:a5:25:be:a5:5f:d4:da:2d:f0:90:96:
37:ad:85:d6:b2:b3:29:27:0b:67:1c:65:e2:28:e8:
8e:14:dc:16:c6:0f:27:91:fd:b2:4c:3c:6c:dc:90:
e1:82:11:d1:5b:cf:b7:46:bd:74:99:4a:0b:28:cb:
f1:63:ef:40:ab:d8:2f:01:02:00:d7:7d:ff:9d:7b:
38:08:5c:fc:37:af:b9:5c:5b:30:0c:e1:dc:70:92:
e5:88:86:36:39:d6:ac:82:f2:0e:bd:48:ec:a7:3e:
0b:07:cc:8c:fd:90:84:db:a6:f2:f3:5d:1a:c6:88:
5f:5d:83:65:37:01:76:43:5e:96:35:0f:22:53:3d:
f9:3f:42:32:d1:cc:ba:1e:3e:74:b9:aa:6b:54:1d:
42:1a:49:e2:ff:bc:e2:f1:f8:36:48:b7:56:67:c6:
25:a0:a1:85:a6:f9:a1:d5:97:ae:61:1e:64:17:4d:
40:8c:8a:1d:e5:27:e0:48:d4:a8:6d:b6:88:a8:69:
9b:27:ad:9e:df:c1:89:7e:c2:6f:a4:bd:56:48:0e:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:39:F6:2E:4D:68:B5:DD:68:6E:18:48:A2:F8:74:77:A0:A5:FF:2E
X509v3 Authority Key Identifier:
keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:75:36:11:c8:77:cb:53:53:c9:06:a2:18:6b:10:fe:51:3d:
6a:db:01:9f:30:2c:01:b2:a2:67:23:48:e9:73:8b:31:8b:d1:
70:64:36:f3:6b:b7:c3:d5:21:05:ca:da:56:a5:00:1a:24:d5:
ee:ee:b8:ec:7c:d1:f6:e4:b0:f0:f9:f4:c7:8b:f0:1f:57:b1:
f5:a3:22:bc:65:3c:9d:ee:94:e3:fe:63:1b:4d:9e:01:a5:d2:
e1:87:48:18:96:f3:7d:d4:f7:9c:e2:7f:d7:09:d1:5b:38:d8:
9c:ba:38:65:e8:66:0d:7b:cb:47:b3:52:f5:01:a9:ef:87:0f:
b8:24:b4:47:3f:95:5b:e7:87:10:b8:64:39:63:3d:d2:55:f2:
4e:a7:70:da:d9:b7:5e:91:3c:7e:f2:93:8e:e5:65:ea:a2:02:
8d:d9:a9:6e:0a:f7:82:56:68:29:24:b2:13:57:3c:a5:e5:e0:
3a:21:64:20:0f:5d:6c:49:ca:6e:5b:2d:40:0a:77:68:49:c1:
d6:ee:bc:36:4e:32:00:6a:39:a4:40:f7:42:40:68:5a:a9:f2:
7b:ff:b7:72:ed:8b:94:3c:fb:5a:2e:73:73:50:fb:4d:26:83:
a1:ff:80:5c:9d:ab:da:8b:85:25:aa:65:cf:de:7d:8f:76:5a:
2d:f5:d9:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s0MSx3VzKpiKZy6QiRgtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZDFkYzRkMmViN2JmMmEzZjA4ZDU0NTc1NTQ3NzA1NTE0
M2YxNzQwHhcNMjUwNjI4MTgwMTA3WhcNMjUwNjI5MTgwMTA3WjAzMTEwLwYDVQQD
Eyg1ZTM5ZjYyZTRkNjhiNWRkNjg2ZTE4NDhhMmY4NzQ3N2EwYTVmZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf4gRWvEw9d7RbGKhuVEr/uGoqzx
DSYD5XH4TNwSN4MvXenNEc1EZ76B+ye2HlgVpSW+pV/U2i3wkJY3rYXWsrMpJwtn
HGXiKOiOFNwWxg8nkf2yTDxs3JDhghHRW8+3Rr10mUoLKMvxY+9Aq9gvAQIA133/
nXs4CFz8N6+5XFswDOHccJLliIY2OdasgvIOvUjspz4LB8yM/ZCE26by810axohf
XYNlNwF2Q16WNQ8iUz35P0Iy0cy6Hj50uaprVB1CGkni/7zi8fg2SLdWZ8YloKGF
pvmh1ZeuYR5kF01AjIod5SfgSNSobbaIqGmbJ62e38GJfsJvpL1WSA7YDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF459i5NaLXdaG4YSKL4dHegpf8uMB8GA1UdIwQY
MBaAFG3R3E0ut78qPwjVRXVUdwVRQ/F0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYt
ZmI0YzU0YjY3MzNhLzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYtZmI0YzU0YjY3MzNh
LzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXU2Ech3
y1NTyQaiGGsQ/lE9atsBnzAsAbKiZyNI6XOLMYvRcGQ282u3w9UhBcraVqUAGiTV
7u647HzR9uSw8Pn0x4vwH1ex9aMivGU8ne6U4/5jG02eAaXS4YdIGJbzfdT3nOJ/
1wnRWzjYnLo4ZehmDXvLR7NS9QGp74cPuCS0Rz+VW+eHELhkOWM90lXyTqdw2tm3
XpE8fvKTjuVl6qICjdmpbgr3glZoKSSyE1c8peXgOiFkIA9dbEnKblstQAp3aEnB
1u68Nk4yAGo5pED3QkBoWqnye/+3cu2LlDz7Wi5zc1D7TSaDof+AXJ2r2ouFJapl
z959j3ZaLfXZfw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:21:06 2025 by rpki-client