Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
File: bOLuhMz1bNwA_CyqWSknna4UiIo.mft (raw, json)
Hash identifier: nWKls6q/JzRt27q4xVOTePSpOJ2jY0zQNGQ4Lix3s9E=
Subject key identifier: A5:16:FB:71:18:02:20:03:17:A3:15:28:A0:B1:68:F2:74:32:30:D9
Authority key identifier: 6C:E2:EE:84:CC:F5:6C:DC:00:FC:2C:AA:59:29:27:9D:AE:14:88:8A
Certificate issuer: /CN=6ce2ee84ccf56cdc00fc2caa5929279dae14888a
Certificate serial: 0198D6CCE3774BE51DCB79364420C58753BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
Manifest number: 118D
Signing time: Sat 23 Aug 2025 12:00:08 +0000
Manifest this update: Sat 23 Aug 2025 12:00:08 +0000
Manifest next update: Sun 24 Aug 2025 12:00:08 +0000
Files and hashes: 1: bOLuhMz1bNwA_CyqWSknna4UiIo.crl (hash: 280n+VpRSfVeeEBhMKbIiM52U5cakQ9WxOt+idx9czU=)
2: cm9pm1Y4fh7VmcKkQuyOuu9QXgE.roa (hash: T9xnzREMcoc526+ebS5GUXWxlrjNz60+DOHB2xM8pA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:e3:77:4b:e5:1d:cb:79:36:44:20:c5:87:53:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce2ee84ccf56cdc00fc2caa5929279dae14888a
Validity
Not Before: Aug 23 12:00:08 2025 GMT
Not After : Aug 24 12:00:08 2025 GMT
Subject: CN=a516fb711802200317a31528a0b168f2743230d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4f:45:e8:d3:30:9b:2d:6c:08:bf:a6:28:6a:
79:a7:ce:dc:1a:2e:9e:4b:3d:a5:a3:9c:1b:21:4e:
f5:cb:18:ca:7a:68:55:7f:12:d4:04:c9:97:14:62:
02:b0:da:9c:9f:08:fb:6c:c6:36:2c:90:22:9c:59:
45:e4:18:e8:08:95:af:0f:f5:ac:c0:eb:41:db:e3:
e8:77:3b:26:6d:9f:06:6e:1b:e2:41:1b:76:0b:3c:
87:06:96:82:ef:46:e9:01:fd:f5:22:f0:2e:df:ac:
9e:f7:1d:8f:04:08:9a:52:34:46:d6:83:b7:e2:58:
e7:39:1a:90:75:5d:c6:f1:ce:99:01:b4:4c:e0:dd:
e8:2e:61:8e:5a:76:a2:8c:0d:63:1b:2d:95:79:b8:
40:51:4d:78:6f:a0:e4:33:6f:ba:fe:9e:47:df:83:
7d:16:7b:3d:be:84:44:63:fb:47:7d:14:c5:fc:98:
79:e7:1a:97:08:fc:2b:2c:01:7a:94:8f:25:c3:f7:
e2:52:4c:45:e2:6e:76:1a:18:8d:67:8a:5c:07:37:
db:07:c8:52:47:25:a5:76:96:9d:65:fc:16:41:94:
61:db:cd:a7:94:fa:c3:30:4e:0b:fa:6d:cd:41:78:
60:67:c3:05:45:4b:98:33:c7:d4:a1:b4:52:2e:6b:
42:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:16:FB:71:18:02:20:03:17:A3:15:28:A0:B1:68:F2:74:32:30:D9
X509v3 Authority Key Identifier:
keyid:6C:E2:EE:84:CC:F5:6C:DC:00:FC:2C:AA:59:29:27:9D:AE:14:88:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:e9:d9:3e:06:5e:b6:f8:2d:9f:60:56:a2:83:c7:ae:72:43:
7e:57:66:2d:61:04:8c:d1:d2:db:65:01:bf:f5:1c:56:bb:83:
0e:48:1b:2f:89:9a:39:aa:48:79:d4:9d:2b:07:e1:6f:43:07:
7d:b1:fa:9f:56:3a:e6:b7:65:30:41:2a:56:09:b4:79:7a:61:
e9:85:5a:be:8d:35:fe:9f:fe:45:32:31:4c:67:95:a1:79:e5:
85:a9:57:f0:53:0a:ac:8b:dc:5e:5f:f1:eb:13:fb:5b:d5:b7:
99:a5:0a:71:55:d4:2e:c8:db:6b:85:2d:f1:e3:3b:cc:46:cb:
f1:cd:c2:1f:58:e9:4d:27:e5:c2:03:4b:57:41:77:e9:c1:f5:
d3:57:3e:d2:f5:72:d3:08:8b:33:e8:04:b3:4e:d1:6f:ca:e6:
54:52:e7:54:a2:e6:17:64:eb:76:e6:7c:67:85:98:17:23:ff:
e8:dc:ca:9e:f2:3d:33:96:b5:0b:a1:3d:90:91:99:f2:18:55:
94:9b:53:1e:de:e7:b2:32:05:0c:c1:08:88:16:c8:f1:a7:87:
e6:e7:9a:f1:27:2e:41:82:58:20:f5:36:86:56:52:d8:f5:1e:
e2:7d:64:25:8b:49:ae:b3:37:fe:af:4c:f5:5a:3a:c5:f9:78:
6e:5b:ff:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzON3S+Udy3k2RCDFh1O8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZTJlZTg0Y2NmNTZjZGMwMGZjMmNhYTU5MjkyNzlkYWUx
NDg4OGEwHhcNMjUwODIzMTIwMDA4WhcNMjUwODI0MTIwMDA4WjAzMTEwLwYDVQQD
EyhhNTE2ZmI3MTE4MDIyMDAzMTdhMzE1MjhhMGIxNjhmMjc0MzIzMGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E9F6NMwmy1sCL+mKGp5p87cGi6e
Sz2lo5wbIU71yxjKemhVfxLUBMmXFGICsNqcnwj7bMY2LJAinFlF5BjoCJWvD/Ws
wOtB2+PodzsmbZ8GbhviQRt2CzyHBpaC70bpAf31IvAu36ye9x2PBAiaUjRG1oO3
4ljnORqQdV3G8c6ZAbRM4N3oLmGOWnaijA1jGy2VebhAUU14b6DkM2+6/p5H34N9
Fns9voREY/tHfRTF/Jh55xqXCPwrLAF6lI8lw/fiUkxF4m52GhiNZ4pcBzfbB8hS
RyWldpadZfwWQZRh282nlPrDME4L+m3NQXhgZ8MFRUuYM8fUobRSLmtCIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUW+3EYAiADF6MVKKCxaPJ0MjDZMB8GA1UdIwQY
MBaAFGzi7oTM9WzcAPwsqlkpJ52uFIiKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk9MdWhNejFiTndBX0N5cVdTa25uYTRVaUlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83ZDZmMmYtOTg0ZC00OTYxLWE2M2It
NDk1YzZmMmM1MTczLzEvYk9MdWhNejFiTndBX0N5cVdTa25uYTRVaUlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83ZDZmMmYtOTg0ZC00OTYxLWE2M2ItNDk1YzZmMmM1MTcz
LzEvYk9MdWhNejFiTndBX0N5cVdTa25uYTRVaUlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0unZPgZe
tvgtn2BWooPHrnJDfldmLWEEjNHS22UBv/UcVruDDkgbL4maOapIedSdKwfhb0MH
fbH6n1Y65rdlMEEqVgm0eXph6YVavo01/p/+RTIxTGeVoXnlhalX8FMKrIvcXl/x
6xP7W9W3maUKcVXULsjba4Ut8eM7zEbL8c3CH1jpTSflwgNLV0F36cH101c+0vVy
0wiLM+gEs07Rb8rmVFLnVKLmF2TrduZ8Z4WYFyP/6NzKnvI9M5a1C6E9kJGZ8hhV
lJtTHt7nsjIFDMEIiBbI8aeH5uea8ScuQYJYIPU2hlZS2PUe4n1kJYtJrrM3/q9M
9Vo6xfl4blv/SA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:26 2025 by rpki-client