Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
File: bOLuhMz1bNwA_CyqWSknna4UiIo.mft (raw, json)
Hash identifier: ZFUqUuvOnlYjMevdWAUXgfR+0RD9MIEr5HGR7qhp22M=
Subject key identifier: BB:5C:2E:5E:B3:17:70:79:11:38:6A:2E:73:49:BD:62:74:7C:A4:9D
Authority key identifier: 6C:E2:EE:84:CC:F5:6C:DC:00:FC:2C:AA:59:29:27:9D:AE:14:88:8A
Certificate issuer: /CN=6ce2ee84ccf56cdc00fc2caa5929279dae14888a
Certificate serial: 0197B8FD34FCDFE9F09159DDA938A223CCFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
Manifest number: 10F9
Signing time: Sun 29 Jun 2025 00:01:31 +0000
Manifest this update: Sun 29 Jun 2025 00:01:31 +0000
Manifest next update: Mon 30 Jun 2025 00:01:31 +0000
Files and hashes: 1: bOLuhMz1bNwA_CyqWSknna4UiIo.crl (hash: LWOc1+RYgZudzqsoHeLL06HqbPAV5WA0Tmflx2g9B+o=)
2: cm9pm1Y4fh7VmcKkQuyOuu9QXgE.roa (hash: T9xnzREMcoc526+ebS5GUXWxlrjNz60+DOHB2xM8pA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:34:fc:df:e9:f0:91:59:dd:a9:38:a2:23:cc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce2ee84ccf56cdc00fc2caa5929279dae14888a
Validity
Not Before: Jun 29 00:01:31 2025 GMT
Not After : Jun 30 00:01:31 2025 GMT
Subject: CN=bb5c2e5eb317707911386a2e7349bd62747ca49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:cc:9c:08:f7:b1:2a:ef:d9:d7:f8:ca:25:
3b:9e:22:19:76:8f:cd:3b:49:ca:d0:76:c5:31:74:
3d:ef:1e:5b:a2:cd:23:0b:72:5c:41:cf:c5:f7:2b:
da:72:e4:04:5b:b9:b6:97:6f:b6:20:bc:40:fd:91:
61:02:6d:25:20:c1:54:3f:d2:a8:ea:e1:8f:3d:3e:
37:95:4d:9e:39:d3:49:bd:67:26:0e:4d:e2:88:cf:
0b:2e:fa:d5:60:f0:a1:e4:68:dc:e0:a2:6c:02:00:
6f:ce:97:e8:8a:9e:13:70:3f:8b:6f:86:52:11:6e:
db:2e:78:32:c6:c9:81:ce:80:98:d4:d0:9d:3c:58:
2e:34:4d:2e:35:3f:8e:83:81:27:da:7b:94:84:60:
75:b0:ce:bd:4c:0f:b9:42:fc:d6:72:b9:92:4d:8d:
f6:d8:4f:31:36:98:fc:2b:4c:b8:15:03:f2:e3:4d:
17:17:71:b6:4a:70:ee:6b:51:8a:04:f7:11:a4:ab:
f0:65:7e:a2:b2:1e:66:0f:fc:cb:25:cc:d0:09:c2:
f1:d8:02:8c:1e:d8:3f:6d:4c:26:83:6b:59:f0:34:
73:fc:4b:a8:cf:bc:53:8b:ae:db:00:44:3b:a6:a8:
e1:ee:be:36:8c:29:fb:2c:6a:a7:c6:6c:a4:ae:ca:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5C:2E:5E:B3:17:70:79:11:38:6A:2E:73:49:BD:62:74:7C:A4:9D
X509v3 Authority Key Identifier:
keyid:6C:E2:EE:84:CC:F5:6C:DC:00:FC:2C:AA:59:29:27:9D:AE:14:88:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:90:b1:4e:48:dd:8f:2e:40:59:e3:ec:7c:11:f3:9e:28:a6:
3c:23:21:56:09:f4:28:72:bf:bf:a2:14:a2:b6:75:5a:5e:5b:
ce:03:a4:0c:59:20:7d:ca:b5:73:58:37:d3:9b:27:26:34:d9:
82:d2:dd:6c:d6:b3:82:7a:51:b1:c9:f0:1a:a2:ce:38:8b:49:
30:b8:a2:ed:eb:37:83:c4:cf:44:a6:5f:09:4e:41:30:63:23:
e5:fb:0f:fa:b8:d8:80:95:d7:af:c7:fd:7a:93:4b:26:27:5f:
b6:4f:c2:92:8b:ca:b3:f1:ce:6c:5c:66:a4:a6:fd:d6:0e:c2:
11:6c:d8:b3:3d:ed:db:35:6d:fd:b4:ed:28:ea:83:40:3f:de:
99:f9:ab:17:b5:00:ab:c3:bd:26:e1:45:61:9d:61:6f:a6:26:
76:b8:ae:67:69:55:b7:46:53:4a:e2:25:bd:f5:a9:a1:8c:04:
3a:e3:77:3e:a8:61:77:19:d0:74:6d:38:c0:1c:11:21:5e:97:
41:11:b6:69:7f:ea:39:70:aa:c4:96:02:23:bc:de:9d:ab:83:
39:c2:c7:9d:7b:ba:09:c9:b8:1a:db:62:e7:e0:63:76:85:4d:
22:84:2f:71:20:53:b7:71:b4:b0:df:70:e2:d0:6a:c7:a2:9d:
43:03:f1:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/TT83+nwkVndqTiiI8z+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZTJlZTg0Y2NmNTZjZGMwMGZjMmNhYTU5MjkyNzlkYWUx
NDg4OGEwHhcNMjUwNjI5MDAwMTMxWhcNMjUwNjMwMDAwMTMxWjAzMTEwLwYDVQQD
EyhiYjVjMmU1ZWIzMTc3MDc5MTEzODZhMmU3MzQ5YmQ2Mjc0N2NhNDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkLMnAj3sSrv2df4yiU7niIZdo/N
O0nK0HbFMXQ97x5bos0jC3JcQc/F9yvacuQEW7m2l2+2ILxA/ZFhAm0lIMFUP9Ko
6uGPPT43lU2eOdNJvWcmDk3iiM8LLvrVYPCh5Gjc4KJsAgBvzpfoip4TcD+Lb4ZS
EW7bLngyxsmBzoCY1NCdPFguNE0uNT+Og4En2nuUhGB1sM69TA+5QvzWcrmSTY32
2E8xNpj8K0y4FQPy400XF3G2SnDua1GKBPcRpKvwZX6ish5mD/zLJczQCcLx2AKM
Htg/bUwmg2tZ8DRz/Euoz7xTi67bAEQ7pqjh7r42jCn7LGqnxmykrsoCSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtcLl6zF3B5EThqLnNJvWJ0fKSdMB8GA1UdIwQY
MBaAFGzi7oTM9WzcAPwsqlkpJ52uFIiKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk9MdWhNejFiTndBX0N5cVdTa25uYTRVaUlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83ZDZmMmYtOTg0ZC00OTYxLWE2M2It
NDk1YzZmMmM1MTczLzEvYk9MdWhNejFiTndBX0N5cVdTa25uYTRVaUlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83ZDZmMmYtOTg0ZC00OTYxLWE2M2ItNDk1YzZmMmM1MTcz
LzEvYk9MdWhNejFiTndBX0N5cVdTa25uYTRVaUlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpCxTkjd
jy5AWePsfBHzniimPCMhVgn0KHK/v6IUorZ1Wl5bzgOkDFkgfcq1c1g305snJjTZ
gtLdbNazgnpRscnwGqLOOItJMLii7es3g8TPRKZfCU5BMGMj5fsP+rjYgJXXr8f9
epNLJidftk/CkovKs/HObFxmpKb91g7CEWzYsz3t2zVt/bTtKOqDQD/emfmrF7UA
q8O9JuFFYZ1hb6YmdriuZ2lVt0ZTSuIlvfWpoYwEOuN3PqhhdxnQdG04wBwRIV6X
QRG2aX/qOXCqxJYCI7zenauDOcLHnXu6Ccm4Gtti5+BjdoVNIoQvcSBTt3G0sN9w
4tBqx6KdQwPx4A==
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:00:17 2025 by rpki-client