Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier: IJBjprHTSxi0cjzdyN0rNhisCQESrTxld5xBCrrQwZg=
Subject key identifier: F0:1C:21:F6:F1:4B:8E:70:75:AD:29:C2:D4:B3:86:8E:0E:BA:FA:34
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 0197C56EDE81208F628750A2D14C4880F2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number: 0A0E
Signing time: Tue 01 Jul 2025 10:01:06 +0000
Manifest this update: Tue 01 Jul 2025 10:01:06 +0000
Manifest next update: Wed 02 Jul 2025 10:01:06 +0000
Files and hashes: 1: bzs57lv3Qbjc1TLCtfvKYgEau6U.roa (hash: HAYnok72dCcoCWV0+wPH7iuTT6c76+rSS6MIun+rwec=)
2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: W9xJm/wZox2qVaXp3G/MlPnBlYPLN5gtnwPELapOgno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6e:de:81:20:8f:62:87:50:a2:d1:4c:48:80:f2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: Jul 1 10:01:06 2025 GMT
Not After : Jul 2 10:01:06 2025 GMT
Subject: CN=f01c21f6f14b8e7075ad29c2d4b3868e0ebafa34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ed:d6:ec:b8:e9:05:b2:7b:40:d5:14:5f:38:
80:76:5c:ee:82:d4:31:3d:32:00:83:a3:5c:61:a8:
b6:3b:74:d0:5c:aa:f9:8b:de:f0:ba:b2:af:3e:39:
18:d7:c3:8f:a4:00:db:da:d7:54:7c:39:fe:d5:79:
d7:f2:8b:a2:52:4c:4b:f6:47:5b:10:b5:fa:5c:fe:
a2:aa:ba:59:d0:2b:e5:da:72:ff:01:54:5c:d4:f2:
e6:0e:e9:e2:d6:6f:11:91:e5:27:37:b1:61:b9:f8:
4a:49:b0:26:bb:9a:92:d3:9c:46:31:3c:fe:20:12:
a5:6f:94:c0:88:9f:77:f0:9b:e1:1e:0b:95:ff:81:
60:b2:75:cd:bf:0b:96:17:e5:ba:97:6b:d7:a0:5c:
0d:2c:2b:66:05:bb:97:dc:39:b0:30:22:1c:3a:c4:
b1:99:42:21:4d:08:c1:96:5e:da:cb:23:d4:27:29:
5f:36:b9:0d:55:0b:17:b0:fb:cc:be:2c:5a:50:3d:
a4:79:cc:84:a8:20:d0:8e:f6:5b:6b:f6:d4:bc:40:
54:3e:cc:96:82:31:b8:4e:45:07:dc:56:da:e4:a5:
04:4e:98:29:07:35:48:8e:da:6a:3d:fa:a4:0b:38:
cf:89:cd:0d:58:77:b7:ab:fc:75:91:de:cb:de:fd:
7b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1C:21:F6:F1:4B:8E:70:75:AD:29:C2:D4:B3:86:8E:0E:BA:FA:34
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:fe:c9:e8:24:dc:06:3a:4c:0e:2b:56:91:ee:9e:25:2d:8d:
20:94:06:2f:d2:2b:f2:43:57:a8:a0:e1:fe:a6:c6:d1:77:ab:
95:32:5f:6f:18:aa:6e:3a:81:3b:a2:33:46:86:36:ad:4a:61:
f2:bf:00:96:72:61:ec:d3:da:e9:2e:9a:37:6f:19:7d:1c:96:
56:32:90:4c:da:2e:3c:b5:c3:d0:a4:e3:56:08:27:9d:64:08:
24:70:44:4b:7c:da:5b:0d:91:b7:e0:3e:b6:57:1e:0a:93:da:
d4:03:d0:e3:b9:36:17:c9:cf:5e:59:6b:6b:ef:bd:5a:ee:3b:
a0:2e:8a:f7:f0:6e:48:37:6b:cd:ac:3b:73:10:c6:e4:5e:fd:
46:c3:29:5c:8a:da:3d:f3:76:cd:04:e5:07:1e:f6:7e:4d:b8:
f3:c8:03:c1:ec:a7:ab:b3:f1:67:9a:60:9a:d1:d2:9c:e6:58:
74:c5:6e:ec:b2:02:61:35:00:86:0f:66:14:48:e5:0f:31:dd:
5a:7e:59:09:91:b4:84:bf:9d:fc:6a:17:0f:7b:05:ea:a0:d5:
e2:c1:e2:63:17:c6:52:49:84:cb:31:8d:11:7d:9d:61:e9:e5:
c2:d0:5f:4b:39:cb:47:4f:86:33:80:90:36:b7:b3:cf:ef:0f:
a4:a1:b4:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfFbt6BII9ih1Ci0UxIgPLCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYmIwMzAxNmM4M2NlYThhYTRmYTljMzZhMzY0M2E1NjVj
YzkzZTYwHhcNMjUwNzAxMTAwMTA2WhcNMjUwNzAyMTAwMTA2WjAzMTEwLwYDVQQD
EyhmMDFjMjFmNmYxNGI4ZTcwNzVhZDI5YzJkNGIzODY4ZTBlYmFmYTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u3W7LjpBbJ7QNUUXziAdlzugtQx
PTIAg6NcYai2O3TQXKr5i97wurKvPjkY18OPpADb2tdUfDn+1XnX8ouiUkxL9kdb
ELX6XP6iqrpZ0Cvl2nL/AVRc1PLmDuni1m8RkeUnN7FhufhKSbAmu5qS05xGMTz+
IBKlb5TAiJ938JvhHguV/4FgsnXNvwuWF+W6l2vXoFwNLCtmBbuX3DmwMCIcOsSx
mUIhTQjBll7ayyPUJylfNrkNVQsXsPvMvixaUD2kecyEqCDQjvZba/bUvEBUPsyW
gjG4TkUH3Fba5KUETpgpBzVIjtpqPfqkCzjPic0NWHe3q/x1kd7L3v17ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAcIfbxS45wda0pwtSzho4Ouvo0MB8GA1UdIwQY
MBaAFL+7AwFsg86oqk+pw2o2Q6VlzJPmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZjNlNTctMGUwMC00ZjJmLTk3NmIt
NDE0ZjA5YjkyYzE1LzEvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zZjNlNTctMGUwMC00ZjJmLTk3NmItNDE0ZjA5YjkyYzE1
LzEvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkf7J6CTc
BjpMDitWke6eJS2NIJQGL9Ir8kNXqKDh/qbG0XerlTJfbxiqbjqBO6IzRoY2rUph
8r8AlnJh7NPa6S6aN28ZfRyWVjKQTNouPLXD0KTjVggnnWQIJHBES3zaWw2Rt+A+
tlceCpPa1APQ47k2F8nPXllra++9Wu47oC6K9/BuSDdrzaw7cxDG5F79RsMpXIra
PfN2zQTlBx72fk2488gDweynq7PxZ5pgmtHSnOZYdMVu7LICYTUAhg9mFEjlDzHd
Wn5ZCZG0hL+d/GoXD3sF6qDV4sHiYxfGUkmEyzGNEX2dYenlwtBfSznLR0+GM4CQ
Nrezz+8PpKG0Mw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 17:09:04 2025 by rpki-client