Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
File: bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft (raw, json)
Hash identifier: hSSm/FljLvWRnBLQI5urObkYGfKp9kGp13+bj9UIeVM=
Subject key identifier: AB:59:75:36:6C:2C:16:4D:B0:1F:B8:53:B2:2F:AF:ED:AF:F7:D0:82
Authority key identifier: 6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
Certificate issuer: /CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Certificate serial: 0198D6610531C1C882DE255D6A0224D5005A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
Manifest number: 14A9
Signing time: Sat 23 Aug 2025 10:02:19 +0000
Manifest this update: Sat 23 Aug 2025 10:02:19 +0000
Manifest next update: Sun 24 Aug 2025 10:02:19 +0000
Files and hashes: 1: 1-w5DNPlIhExlDG3JJ8YehKY8B2s.roa (hash: 2oDdXXuxPyseKyeUOGZKSwRrTeZuxQlLGL5+bIlribY=)
2: bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl (hash: pw8wVJ/5je7MMSzPBl9f05LE3AwEKJg415Kf+4Uw0ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:05:31:c1:c8:82:de:25:5d:6a:02:24:d5:00:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Validity
Not Before: Aug 23 10:02:19 2025 GMT
Not After : Aug 24 10:02:19 2025 GMT
Subject: CN=ab5975366c2c164db01fb853b22fafedaff7d082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:be:2c:08:9c:ef:06:58:1c:09:ed:25:5a:
c2:89:69:95:2b:26:5d:8c:7e:7c:3e:49:ce:8c:9e:
18:6a:e0:a4:31:e4:dc:03:91:ca:13:80:78:b7:7c:
a8:4e:97:69:5b:54:34:a8:bd:9c:0c:4b:49:f6:a8:
d9:46:29:4c:18:e7:dd:a3:61:9a:2d:d6:68:68:9a:
ff:23:fb:43:1b:dc:18:76:67:0b:f0:e5:72:53:b0:
07:29:b1:f4:65:4e:20:e0:09:a3:ba:12:0a:e1:9b:
a8:87:f5:9e:24:cc:87:54:37:78:94:42:c5:0d:ef:
07:68:3d:fd:e7:f3:a3:f9:b3:03:e9:14:9d:20:89:
89:10:b6:85:a0:9d:03:13:40:da:d7:9f:ba:4d:b0:
1d:9d:2a:db:c9:b0:13:53:b9:80:2f:87:87:4c:18:
2a:54:66:57:07:0b:d3:ac:b2:2e:e1:31:21:43:98:
b8:1b:44:da:dd:a2:1c:72:6f:72:27:99:fc:0e:bb:
0e:8b:28:80:40:2c:6e:40:ad:ed:f5:fe:be:f0:84:
9b:7a:1e:24:e7:71:d8:4f:81:1f:92:d4:22:80:3a:
f6:b4:3a:eb:61:a4:91:dc:1b:e2:ef:c1:3a:24:f4:
6c:b8:23:0f:43:80:6d:22:19:38:bb:7d:06:b7:74:
28:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:59:75:36:6C:2C:16:4D:B0:1F:B8:53:B2:2F:AF:ED:AF:F7:D0:82
X509v3 Authority Key Identifier:
keyid:6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c8:f6:56:e6:9e:71:3e:c8:07:37:fe:ca:84:f4:40:ee:ef:
22:f9:4b:8f:29:50:29:0e:ea:b7:86:41:1c:79:eb:11:c4:74:
cf:6d:e7:7c:1c:64:65:a8:ee:db:48:6f:f6:a1:58:3d:75:f4:
ee:21:11:b1:58:a4:36:c1:ff:c9:0c:bc:b1:af:29:c6:26:74:
33:78:39:ee:ce:86:f7:f8:46:a2:a1:69:a5:a2:ab:36:4f:54:
e8:1e:f7:13:a3:2d:a1:df:8f:d4:a4:1b:1e:ca:4f:fd:b1:e1:
e9:d3:25:6a:d0:56:d7:7f:c7:fc:94:59:66:0e:28:bb:10:d8:
9d:c8:47:d6:11:80:9d:26:60:50:29:5d:89:ad:74:6b:de:89:
28:75:8e:27:76:05:e3:1d:96:a6:ba:08:d7:7d:61:39:53:8d:
32:3f:3f:86:57:b5:77:7c:db:91:ea:76:dd:3a:d1:a6:74:01:
0a:17:45:37:9d:ec:eb:7a:11:de:82:60:97:53:cb:62:3a:46:
5e:b1:ce:88:63:38:d1:d9:74:bc:f7:a5:f8:2f:9c:ac:3c:54:
67:18:90:a0:95:dc:44:eb:cc:ad:ae:22:9c:fe:63:33:b1:7c:
55:db:19:f7:eb:84:e8:2c:39:c1:8e:2a:df:0d:fa:78:96:d3:
dd:d6:f6:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYQUxwciC3iVdagIk1QBaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMGM4MDMxODE3N2JjMTZiNzIzODNmOGUwOTJkNTJhM2Fl
MTMzYjQwHhcNMjUwODIzMTAwMjE5WhcNMjUwODI0MTAwMjE5WjAzMTEwLwYDVQQD
EyhhYjU5NzUzNjZjMmMxNjRkYjAxZmI4NTNiMjJmYWZlZGFmZjdkMDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr6+LAic7wZYHAntJVrCiWmVKyZd
jH58PknOjJ4YauCkMeTcA5HKE4B4t3yoTpdpW1Q0qL2cDEtJ9qjZRilMGOfdo2Ga
LdZoaJr/I/tDG9wYdmcL8OVyU7AHKbH0ZU4g4AmjuhIK4Zuoh/WeJMyHVDd4lELF
De8HaD395/Oj+bMD6RSdIImJELaFoJ0DE0Da15+6TbAdnSrbybATU7mAL4eHTBgq
VGZXBwvTrLIu4TEhQ5i4G0Ta3aIccm9yJ5n8DrsOiyiAQCxuQK3t9f6+8ISbeh4k
53HYT4EfktQigDr2tDrrYaSR3Bvi78E6JPRsuCMPQ4BtIhk4u30Gt3Qo5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtZdTZsLBZNsB+4U7Ivr+2v99CCMB8GA1UdIwQY
MBaAFG0MgDGBd7wWtyOD+OCS1So64TO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zMWJkMDctOWExZi00MzQ1LWE2NmIt
Nzk0MjQwNDAxNmYzLzEvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8zMWJkMDctOWExZi00MzQ1LWE2NmItNzk0MjQwNDAxNmYz
LzEvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8j2Vuae
cT7IBzf+yoT0QO7vIvlLjylQKQ7qt4ZBHHnrEcR0z23nfBxkZaju20hv9qFYPXX0
7iERsVikNsH/yQy8sa8pxiZ0M3g57s6G9/hGoqFppaKrNk9U6B73E6Mtod+P1KQb
HspP/bHh6dMlatBW13/H/JRZZg4ouxDYnchH1hGAnSZgUCldia10a96JKHWOJ3YF
4x2WproI131hOVONMj8/hle1d3zbkep23TrRpnQBChdFN53s63oR3oJgl1PLYjpG
XrHOiGM40dl0vPel+C+crDxUZxiQoJXcROvMra4inP5jM7F8VdsZ9+uE6Cw5wY4q
3w36eJbT3db2AQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:33:15 2025 by rpki-client