Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
File: bOLuhMz1bNwA_CyqWSknna4UiIo.mft (raw, json)
Hash identifier: lzS8q/BRaUMHg/7095OFrbkJCW3LJNwvIv/JBwiDJiQ=
Subject key identifier: 2B:EA:17:00:A8:B7:D9:EF:FF:A1:F5:6B:6A:5F:59:50:94:50:AD:1A
Authority key identifier: 6C:E2:EE:84:CC:F5:6C:DC:00:FC:2C:AA:59:29:27:9D:AE:14:88:8A
Certificate issuer: /CN=6ce2ee84ccf56cdc00fc2caa5929279dae14888a
Certificate serial: 0199FC58F5174772AE2D0F5F2D57E5C1581D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
Manifest number: 1225
Signing time: Sun 19 Oct 2025 12:01:52 +0000
Manifest this update: Sun 19 Oct 2025 12:01:52 +0000
Manifest next update: Mon 20 Oct 2025 12:01:52 +0000
Files and hashes: 1: bOLuhMz1bNwA_CyqWSknna4UiIo.crl (hash: WmYRktAP3GscYgnJ+rFEG3Zrstj/z5bE4a/tuPOZTww=)
2: cm9pm1Y4fh7VmcKkQuyOuu9QXgE.roa (hash: T9xnzREMcoc526+ebS5GUXWxlrjNz60+DOHB2xM8pA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f5:17:47:72:ae:2d:0f:5f:2d:57:e5:c1:58:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce2ee84ccf56cdc00fc2caa5929279dae14888a
Validity
Not Before: Oct 19 12:01:52 2025 GMT
Not After : Oct 20 12:01:52 2025 GMT
Subject: CN=2bea1700a8b7d9efffa1f56b6a5f59509450ad1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ca:76:22:ec:d0:4a:26:06:44:ad:d6:61:95:
b6:24:c6:c5:ee:22:54:1a:da:4e:75:db:25:b8:53:
0a:78:d8:25:96:ad:ff:09:94:87:3d:9d:6b:71:c1:
db:d6:aa:f9:57:58:d6:e1:78:62:21:ef:15:8f:1d:
df:0c:08:05:cd:3c:f9:96:ff:56:e8:ac:1f:4d:4b:
b7:80:42:f7:c9:1c:09:34:93:d1:99:e4:b8:18:7c:
98:66:52:3b:34:f7:1f:e6:4b:fc:9e:02:fd:56:5e:
ba:b9:6d:c5:ee:c8:ff:eb:70:8f:9c:02:a2:e7:c6:
da:4e:51:5a:2a:5e:95:07:59:29:d7:55:02:d1:87:
e8:57:f1:83:de:b8:a4:3a:4c:a2:2c:68:6a:dd:51:
70:73:36:a5:2b:99:21:f2:8a:ce:c4:32:98:8a:45:
fc:ba:65:4e:03:b9:25:9c:54:d5:86:92:e8:f2:5a:
db:3a:91:73:c6:5c:c1:98:07:3e:eb:1a:d6:80:5c:
7d:f2:36:9a:c9:a5:e7:96:f6:52:34:77:71:e8:3b:
2b:b6:9f:0e:1e:ea:08:2d:44:a2:2c:d9:99:37:75:
95:b0:59:e3:91:d6:db:8d:c8:4a:68:8a:93:be:e8:
80:1d:27:27:42:be:18:5a:71:fa:20:76:fb:5f:20:
bb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EA:17:00:A8:B7:D9:EF:FF:A1:F5:6B:6A:5F:59:50:94:50:AD:1A
X509v3 Authority Key Identifier:
keyid:6C:E2:EE:84:CC:F5:6C:DC:00:FC:2C:AA:59:29:27:9D:AE:14:88:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:7e:35:dc:81:62:73:2e:6b:6d:98:15:24:a4:ff:c9:60:65:
e1:44:36:5c:aa:95:80:8f:6b:0e:9d:45:f8:94:ac:65:d7:97:
11:1e:db:d9:3c:6b:f3:5b:e5:89:8e:e7:04:fe:64:ba:42:07:
01:f4:da:b2:72:16:dd:d2:0d:ea:a8:26:58:8f:1b:c4:87:a4:
4a:9d:89:5a:da:9d:37:74:a4:a2:65:a4:42:a8:a4:f9:a5:3e:
0f:62:b8:2d:9a:7e:6c:e4:cf:86:17:0d:dd:22:2c:8a:86:8f:
c7:b8:0b:ff:40:72:73:b2:0c:4f:a4:47:4e:9e:7f:c0:b5:b7:
31:f5:05:a6:1d:14:54:5f:5a:65:14:94:7e:a2:7a:54:48:a7:
e7:b6:05:72:13:c3:dc:4d:c3:d8:1d:64:c2:ef:58:28:69:9e:
b8:65:5f:e4:39:8f:88:86:94:1c:04:0a:32:0d:9c:bc:58:c8:
47:64:83:d4:2d:25:91:ec:4b:fe:89:06:8d:19:04:dd:b3:7c:
71:d7:37:88:61:6a:90:43:e1:eb:38:1e:9d:67:c6:cb:81:98:
02:40:f4:b3:b7:ac:0c:d1:89:5f:67:8c:b4:fe:46:04:7e:f8:
66:e2:20:df:87:e9:d4:fa:bd:0c:1f:b2:bf:92:5d:ad:4e:b6:
26:c8:0c:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WPUXR3KuLQ9fLVflwVgdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZTJlZTg0Y2NmNTZjZGMwMGZjMmNhYTU5MjkyNzlkYWUx
NDg4OGEwHhcNMjUxMDE5MTIwMTUyWhcNMjUxMDIwMTIwMTUyWjAzMTEwLwYDVQQD
EygyYmVhMTcwMGE4YjdkOWVmZmZhMWY1NmI2YTVmNTk1MDk0NTBhZDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcp2IuzQSiYGRK3WYZW2JMbF7iJU
GtpOddsluFMKeNgllq3/CZSHPZ1rccHb1qr5V1jW4XhiIe8Vjx3fDAgFzTz5lv9W
6KwfTUu3gEL3yRwJNJPRmeS4GHyYZlI7NPcf5kv8ngL9Vl66uW3F7sj/63CPnAKi
58baTlFaKl6VB1kp11UC0YfoV/GD3rikOkyiLGhq3VFwczalK5kh8orOxDKYikX8
umVOA7klnFTVhpLo8lrbOpFzxlzBmAc+6xrWgFx98jaayaXnlvZSNHdx6Dsrtp8O
HuoILUSiLNmZN3WVsFnjkdbbjchKaIqTvuiAHScnQr4YWnH6IHb7XyC7/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvqFwCot9nv/6H1a2pfWVCUUK0aMB8GA1UdIwQY
MBaAFGzi7oTM9WzcAPwsqlkpJ52uFIiKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk9MdWhNejFiTndBX0N5cVdTa25uYTRVaUlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83ZDZmMmYtOTg0ZC00OTYxLWE2M2It
NDk1YzZmMmM1MTczLzEvYk9MdWhNejFiTndBX0N5cVdTa25uYTRVaUlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83ZDZmMmYtOTg0ZC00OTYxLWE2M2ItNDk1YzZmMmM1MTcz
LzEvYk9MdWhNejFiTndBX0N5cVdTa25uYTRVaUlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2X413IFi
cy5rbZgVJKT/yWBl4UQ2XKqVgI9rDp1F+JSsZdeXER7b2Txr81vliY7nBP5kukIH
AfTasnIW3dIN6qgmWI8bxIekSp2JWtqdN3SkomWkQqik+aU+D2K4LZp+bOTPhhcN
3SIsioaPx7gL/0Byc7IMT6RHTp5/wLW3MfUFph0UVF9aZRSUfqJ6VEin57YFchPD
3E3D2B1kwu9YKGmeuGVf5DmPiIaUHAQKMg2cvFjIR2SD1C0lkexL/okGjRkE3bN8
cdc3iGFqkEPh6zgenWfGy4GYAkD0s7esDNGJX2eMtP5GBH74ZuIg34fp1Pq9DB+y
v5JdrU62JsgM3A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:24 2025 by rpki-client