Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
File: bnED-oWs7FfEZIWRzD5Bzff-45c.mft (raw, json)
Hash identifier: /YUQ56kE0/bpf2eDJUA1HSrJ8XjLlPDabnlBH1MyD1Q=
Subject key identifier: B1:AC:F1:FC:CF:0C:71:A5:0F:51:28:75:20:76:00:FE:89:9E:16:56
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Certificate issuer: /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial: 0197B82120A33FBD849C97273278D02BF144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
Manifest number: 0D6A
Signing time: Sat 28 Jun 2025 20:01:08 +0000
Manifest this update: Sat 28 Jun 2025 20:01:08 +0000
Manifest next update: Sun 29 Jun 2025 20:01:08 +0000
Files and hashes: 1: Q75VcKpJN1_xp-QM_NM8W4Tp-04.roa (hash: Wt2+g51E+wWSkSdRcanf7BFfmX/qewZOJ77oXxIMQTM=)
2: bnED-oWs7FfEZIWRzD5Bzff-45c.crl (hash: WxhWZJJbZOPwCMYbboZnnx5uY5fXhaB1zayg7Qomv5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:20:a3:3f:bd:84:9c:97:27:32:78:d0:2b:f1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Validity
Not Before: Jun 28 20:01:08 2025 GMT
Not After : Jun 29 20:01:08 2025 GMT
Subject: CN=b1acf1fccf0c71a50f512875207600fe899e1656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:11:7e:86:93:fc:ae:15:52:2f:dc:2a:18:
1b:d7:4d:13:d4:b5:4a:7f:00:11:92:29:bf:76:74:
52:bf:4c:1c:72:97:95:8c:e4:c2:bd:21:4d:2a:f1:
e2:82:41:ba:f3:fa:74:69:89:5d:19:01:c1:78:10:
a7:fb:cf:5e:26:4a:ab:32:2a:f5:d6:62:08:11:01:
08:92:85:d7:48:dd:b1:04:ca:71:ce:ec:70:4d:5b:
57:b1:95:31:e6:31:3a:4f:0e:f9:53:50:16:c3:64:
44:e4:0d:ea:48:ff:77:42:4b:e0:eb:3d:fa:4c:5e:
37:d4:6b:c5:7b:93:36:0a:d3:d2:e9:05:77:16:2b:
bd:72:e5:39:58:f1:f8:0e:2e:b2:94:30:ec:36:82:
6d:78:8e:87:72:99:d4:33:e9:4b:19:8c:95:c3:76:
34:2c:0f:9f:35:18:32:b3:9b:19:7f:a6:ec:d6:3c:
4d:b2:ce:27:6f:bc:77:0f:93:c9:6d:b4:9f:db:43:
9e:52:dc:01:c6:5a:70:03:a1:47:57:5a:11:f9:e3:
d3:02:8c:d7:c8:b3:b6:20:76:71:05:2c:fc:da:4b:
fa:0d:38:81:83:7b:c8:74:f8:29:45:05:b5:96:cc:
9f:ca:59:76:99:46:d9:d3:65:33:4f:4a:13:db:14:
ab:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AC:F1:FC:CF:0C:71:A5:0F:51:28:75:20:76:00:FE:89:9E:16:56
X509v3 Authority Key Identifier:
keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:87:c8:41:2b:23:c1:5f:49:4c:c2:cf:de:d4:3b:f1:c2:fb:
9e:b4:84:c4:2c:ef:db:54:f5:3d:3d:52:ee:31:e1:c1:1a:da:
69:8f:88:97:a6:6f:b7:08:c5:df:e9:47:b4:94:0a:68:b9:70:
af:8f:b2:f3:0f:67:37:79:7a:c1:24:5e:27:59:b7:9a:c1:e8:
f3:9c:3a:3d:16:17:7a:18:7f:23:07:2b:eb:4c:23:95:f1:a6:
29:0d:91:14:54:64:34:0d:f9:28:8a:32:21:fc:81:2a:06:62:
df:96:a6:f0:31:cb:bc:dc:06:7a:05:12:db:51:fb:cf:81:c1:
18:b8:bf:e0:ea:c7:2d:58:83:f8:96:b7:be:5c:1b:b2:7f:19:
b8:79:4a:80:ee:08:cb:ef:df:5c:af:95:46:49:44:98:06:17:
a1:9b:f4:44:af:a6:bb:05:31:c8:ed:1b:e1:dc:37:48:b6:2c:
35:28:ea:b8:9a:27:16:69:ec:7d:52:39:a2:55:33:08:3e:c3:
25:3c:71:f5:25:9d:03:39:f0:2e:7c:01:72:6e:1f:50:4b:13:
4b:99:74:e7:5b:c2:88:21:ba:d9:6e:ea:4d:1f:be:ea:ea:23:
2d:19:fc:d0:e9:34:fb:18:3e:ca:75:b5:a5:40:46:76:63:69:
df:d3:61:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4ISCjP72EnJcnMnjQK/FEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNzEwM2ZhODVhY2VjNTdjNDY0ODU5MWNjM2U0MWNkZjdm
ZWUzOTcwHhcNMjUwNjI4MjAwMTA4WhcNMjUwNjI5MjAwMTA4WjAzMTEwLwYDVQQD
EyhiMWFjZjFmY2NmMGM3MWE1MGY1MTI4NzUyMDc2MDBmZTg5OWUxNjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3wRfoaT/K4VUi/cKhgb100T1LVK
fwARkim/dnRSv0wccpeVjOTCvSFNKvHigkG68/p0aYldGQHBeBCn+89eJkqrMir1
1mIIEQEIkoXXSN2xBMpxzuxwTVtXsZUx5jE6Tw75U1AWw2RE5A3qSP93Qkvg6z36
TF431GvFe5M2CtPS6QV3Fiu9cuU5WPH4Di6ylDDsNoJteI6HcpnUM+lLGYyVw3Y0
LA+fNRgys5sZf6bs1jxNss4nb7x3D5PJbbSf20OeUtwBxlpwA6FHV1oR+ePTAozX
yLO2IHZxBSz82kv6DTiBg3vIdPgpRQW1lsyfyll2mUbZ02UzT0oT2xSrZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGs8fzPDHGlD1EodSB2AP6JnhZWMB8GA1UdIwQY
MBaAFG5xA/qFrOxXxGSFkcw+Qc33/uOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wNjgwM2YtZGQyZS00ZmQxLTlhN2Yt
YmJmODI2YWE2N2MwLzEvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wNjgwM2YtZGQyZS00ZmQxLTlhN2YtYmJmODI2YWE2N2Mw
LzEvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4fIQSsj
wV9JTMLP3tQ78cL7nrSExCzv21T1PT1S7jHhwRraaY+Il6ZvtwjF3+lHtJQKaLlw
r4+y8w9nN3l6wSReJ1m3msHo85w6PRYXehh/Iwcr60wjlfGmKQ2RFFRkNA35KIoy
IfyBKgZi35am8DHLvNwGegUS21H7z4HBGLi/4OrHLViD+Ja3vlwbsn8ZuHlKgO4I
y+/fXK+VRklEmAYXoZv0RK+muwUxyO0b4dw3SLYsNSjquJonFmnsfVI5olUzCD7D
JTxx9SWdAznwLnwBcm4fUEsTS5l051vCiCG62W7qTR++6uojLRn80Ok0+xg+ynW1
pUBGdmNp39NhvA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:30 2025 by rpki-client