Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
File: b6MuZYEYPyxIl6dlIzOQH39b7nM.mft (raw, json)
Hash identifier: T9ZBvx40WxxmqU3vURT/4vaC0UFeEq7ez47DsKwrL5M=
Subject key identifier: 82:3C:B6:15:6F:68:BC:D1:49:85:E4:C7:83:74:B7:E0:F2:4C:B2:91
Authority key identifier: 6F:A3:2E:65:81:18:3F:2C:48:97:A7:65:23:33:90:1F:7F:5B:EE:73
Certificate issuer: /CN=6fa32e6581183f2c4897a7652333901f7f5bee73
Certificate serial: 0197B70ED156411F9F5A3894BC8B1D97D627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
Manifest number: 081A
Signing time: Sat 28 Jun 2025 15:01:30 +0000
Manifest this update: Sat 28 Jun 2025 15:01:30 +0000
Manifest next update: Sun 29 Jun 2025 15:01:30 +0000
Files and hashes: 1: 6C-l-Krcx9diUb3Zftv9sijenyA.roa (hash: 8qEJJSdL4/1lUqWVRQzqlshhqS0031IQa9tDeTSS/GA=)
2: PHw1GAOmBnBvGouxlCLHPCg3QCo.roa (hash: M7Tf/O06Ds+1gFag6lHjuDXeoUB2izemcywbR990N8U=)
3: b6MuZYEYPyxIl6dlIzOQH39b7nM.crl (hash: eLmMKi7cbQ1paurDtmzKYJX0xY3siR9/pOciv4WXhe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d1:56:41:1f:9f:5a:38:94:bc:8b:1d:97:d6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa32e6581183f2c4897a7652333901f7f5bee73
Validity
Not Before: Jun 28 15:01:30 2025 GMT
Not After : Jun 29 15:01:30 2025 GMT
Subject: CN=823cb6156f68bcd14985e4c78374b7e0f24cb291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:a5:bd:2e:cc:c3:11:63:76:de:e4:b6:cc:
b6:3b:7f:2f:fd:9f:0f:06:15:07:b0:65:c5:e7:a3:
8b:f7:60:a4:4e:10:a7:14:64:24:78:32:6f:bb:da:
e3:c9:be:a6:b2:00:ec:b0:c6:fd:ad:27:67:1f:57:
83:aa:32:dc:78:2b:96:79:c0:3f:84:2d:1a:ab:b0:
d6:c9:fc:c2:38:0a:09:b5:fc:c6:1f:bf:e1:cd:e4:
80:bf:a4:b3:83:1e:5d:22:93:6a:44:e2:ec:da:87:
4f:d4:05:86:0c:6f:90:3e:33:25:dd:51:47:2c:9e:
d3:82:7d:17:73:fc:b9:be:60:4e:50:d6:f8:08:cd:
83:e0:a8:fc:10:5d:9d:33:3a:a3:5f:29:8c:d5:1e:
7f:3f:69:0a:96:4e:b3:37:cd:a5:8b:39:dc:df:26:
9d:99:5f:ec:c2:58:3b:ac:b8:35:75:fd:95:6d:45:
76:9b:bd:a9:2e:dd:01:2a:c4:eb:87:a9:5f:f1:8b:
c1:49:3b:dd:b0:e9:24:10:a8:f8:7b:5a:2e:f3:9e:
27:6e:0d:06:f2:18:7f:fd:d9:d3:44:67:04:ea:7c:
5f:8d:9b:49:6d:b3:03:b9:87:14:90:12:b6:eb:59:
c2:35:25:ba:b5:0d:a4:94:8d:46:55:27:cc:ee:3b:
ae:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3C:B6:15:6F:68:BC:D1:49:85:E4:C7:83:74:B7:E0:F2:4C:B2:91
X509v3 Authority Key Identifier:
keyid:6F:A3:2E:65:81:18:3F:2C:48:97:A7:65:23:33:90:1F:7F:5B:EE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:77:07:7e:31:8b:e5:73:de:9a:4c:89:0c:c3:c5:10:88:28:
59:14:bb:bb:d7:3c:09:0b:32:e8:54:fb:39:18:de:76:02:90:
05:5b:6c:5f:28:69:f9:0b:8e:91:71:c4:02:d8:ed:bf:1b:1b:
d1:71:56:1c:58:53:50:74:2c:3d:bf:01:55:0a:b4:0c:eb:5b:
01:65:f7:ea:17:37:1c:26:36:4a:2b:d3:64:41:01:89:3d:fb:
09:47:b5:0f:59:5f:1f:71:1b:49:d9:e7:7d:33:48:4b:cb:6c:
fb:26:aa:b7:96:d8:db:0f:34:fe:ba:50:fd:67:f4:5d:5b:95:
60:e4:c3:26:c8:ca:da:92:17:d1:c6:41:75:54:6d:58:62:39:
43:dc:b7:cb:93:83:41:39:59:41:88:a4:22:1a:3d:e3:d5:5e:
95:e5:92:19:9b:17:c5:78:11:83:e2:40:a5:cc:de:1b:1d:c6:
47:a3:27:ad:ed:8a:9e:fc:de:55:f6:de:e6:3f:3c:fc:03:fd:
9c:48:76:cb:d2:d0:57:84:0c:b4:b1:16:0a:4e:8b:86:15:5c:
f8:fd:f4:53:e0:c2:bf:d1:f2:14:53:fa:f0:c6:06:ca:24:95:
ef:f7:bb:60:a7:a5:db:f9:5d:df:7c:36:57:bb:27:ad:ed:e1:
a2:31:30:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DtFWQR+fWjiUvIsdl9YnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYTMyZTY1ODExODNmMmM0ODk3YTc2NTIzMzM5MDFmN2Y1
YmVlNzMwHhcNMjUwNjI4MTUwMTMwWhcNMjUwNjI5MTUwMTMwWjAzMTEwLwYDVQQD
Eyg4MjNjYjYxNTZmNjhiY2QxNDk4NWU0Yzc4Mzc0YjdlMGYyNGNiMjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZylvS7MwxFjdt7ktsy2O38v/Z8P
BhUHsGXF56OL92CkThCnFGQkeDJvu9rjyb6msgDssMb9rSdnH1eDqjLceCuWecA/
hC0aq7DWyfzCOAoJtfzGH7/hzeSAv6Szgx5dIpNqROLs2odP1AWGDG+QPjMl3VFH
LJ7Tgn0Xc/y5vmBOUNb4CM2D4Kj8EF2dMzqjXymM1R5/P2kKlk6zN82liznc3yad
mV/swlg7rLg1df2VbUV2m72pLt0BKsTrh6lf8YvBSTvdsOkkEKj4e1ou854nbg0G
8hh//dnTRGcE6nxfjZtJbbMDuYcUkBK261nCNSW6tQ2klI1GVSfM7juuNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFII8thVvaLzRSYXkx4N0t+DyTLKRMB8GA1UdIwQY
MBaAFG+jLmWBGD8sSJenZSMzkB9/W+5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjZNdVpZRVlQeXhJbDZkbEl6T1FIMzliN25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84NWNhOGUtZDc0Yi00YzA1LTgxYjYt
NzcwZjA1NzJjMGU3LzEvYjZNdVpZRVlQeXhJbDZkbEl6T1FIMzliN25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi84NWNhOGUtZDc0Yi00YzA1LTgxYjYtNzcwZjA1NzJjMGU3
LzEvYjZNdVpZRVlQeXhJbDZkbEl6T1FIMzliN25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3cHfjGL
5XPemkyJDMPFEIgoWRS7u9c8CQsy6FT7ORjedgKQBVtsXyhp+QuOkXHEAtjtvxsb
0XFWHFhTUHQsPb8BVQq0DOtbAWX36hc3HCY2SivTZEEBiT37CUe1D1lfH3EbSdnn
fTNIS8ts+yaqt5bY2w80/rpQ/Wf0XVuVYOTDJsjK2pIX0cZBdVRtWGI5Q9y3y5OD
QTlZQYikIho949VeleWSGZsXxXgRg+JApczeGx3GR6Mnre2KnvzeVfbe5j88/AP9
nEh2y9LQV4QMtLEWCk6LhhVc+P30U+DCv9HyFFP68MYGyiSV7/e7YKel2/ld33w2
V7snre3hojEwdQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:17:11 2025 by rpki-client