Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: 4Q+lwrc11al1G2Tyh87Q7f2C0WuUMZeUXfHQ20PP+Os=
Subject key identifier: FA:38:EC:CC:64:60:96:7B:5F:38:D4:7B:D4:01:60:8F:7D:29:A0:6B
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 0197B77CB871AD66CE6B75CCDDE1E595FD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:33 +0000
Manifest this update: Sat 28 Jun 2025 17:01:33 +0000
Manifest next update: Sun 29 Jun 2025 17:01:33 +0000
Files and hashes: 1: 0rDYOCiVnQy1wBfGsCwgf4uCy6M.roa (hash: dtebcZBA/CIRFXc0hvNHRfZk/QfKnBn3jDoKUNxXxXo=)
2: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: LnrtWl1RjYt4R7j05fg+8FkRtMh4bWDBmyUgWYbiEds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b8:71:ad:66:ce:6b:75:cc:dd:e1:e5:95:fd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Jun 28 17:01:33 2025 GMT
Not After : Jun 29 17:01:33 2025 GMT
Subject: CN=fa38eccc6460967b5f38d47bd401608f7d29a06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:25:e9:4a:8e:b2:f5:f4:05:fa:c6:e3:bb:a4:
75:f2:50:15:e1:f1:5b:d9:22:3e:b0:a9:6e:b4:59:
51:95:ff:3e:78:88:13:41:6a:b8:59:1b:da:3e:69:
2e:f8:d8:54:20:29:85:ac:80:57:f7:14:9b:70:6d:
c5:55:bd:ed:e2:cb:58:a0:e1:db:dd:9b:69:86:38:
70:c8:1a:9d:02:de:26:60:6e:30:26:3e:fe:24:84:
57:9c:da:fe:29:46:c2:a6:e4:49:5e:5f:77:bc:e2:
66:ac:5f:67:ea:22:5b:20:14:e1:7b:fa:fe:a1:71:
fd:98:f9:3f:4a:f5:5f:77:cd:80:eb:f2:e6:4b:4a:
b4:88:dc:36:08:c9:ca:35:9c:7a:75:12:8e:51:b8:
b1:e5:46:e1:57:24:13:d6:e0:88:7a:07:fe:3c:17:
63:76:03:d1:aa:4a:8c:50:4f:d4:1e:de:0b:47:65:
c9:7a:e2:8d:f4:aa:b2:cd:c2:ba:5e:1b:f6:e6:ab:
70:ec:63:6e:c2:44:06:fc:5f:77:3e:4c:ca:30:30:
50:5d:32:de:48:fb:bf:9d:18:45:ba:b4:25:42:d3:
71:68:69:80:ac:e1:3f:b7:02:78:d5:e1:34:e6:ae:
37:9e:d1:7c:f8:57:8b:27:cc:20:42:ec:76:20:e5:
2f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:38:EC:CC:64:60:96:7B:5F:38:D4:7B:D4:01:60:8F:7D:29:A0:6B
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:59:41:d4:cb:df:e8:d7:b9:5d:6a:d0:86:4b:b4:46:36:ad:
a2:c9:19:9b:b7:2d:bb:2c:bf:3c:01:ba:b6:11:77:6a:56:36:
58:57:68:1b:92:31:a4:d7:81:41:19:72:bc:0c:0c:e4:9b:e3:
67:c5:a1:ce:55:83:03:b9:3e:6a:71:c8:b7:68:5f:5c:10:6c:
e7:2d:cc:2c:5d:c5:bf:d0:dd:69:b7:7b:b0:2a:c0:9e:9a:de:
a3:04:0c:fb:81:ff:f6:9c:a3:46:0e:45:91:74:53:dc:b2:7e:
42:35:1d:b3:02:66:16:e5:03:fb:98:b1:fe:24:53:dc:e1:5a:
b5:2e:c1:b8:7e:6c:9a:19:bf:6f:67:d5:54:d3:14:d6:76:35:
15:e0:24:28:41:30:d8:10:b7:0e:43:f5:eb:ae:58:15:58:ae:
3c:d1:c6:1d:f2:e0:31:36:2d:cd:ca:08:a3:b9:c2:fb:93:a4:
95:ba:1c:1f:77:e3:a0:f0:b7:16:80:cb:73:8a:58:fc:14:9b:
cf:cb:5a:d4:5d:35:7f:63:db:f6:f2:70:7b:37:0a:b8:35:10:
63:eb:8f:e5:8f:5c:05:3a:e0:da:f1:77:43:4f:76:f3:25:00:
75:60:c5:ae:07:e5:a5:64:c1:56:0a:26:e4:80:6a:e1:4f:a1:
5f:2c:78:f2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe3fLhxrWbOa3XM3eHllf2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MTY4NjU5MjhlZWVlZTVjYmM5MmY0YzRkMzhhZTVjNjAx
ZGVlMGEwHhcNMjUwNjI4MTcwMTMzWhcNMjUwNjI5MTcwMTMzWjAzMTEwLwYDVQQD
EyhmYTM4ZWNjYzY0NjA5NjdiNWYzOGQ0N2JkNDAxNjA4ZjdkMjlhMDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SXpSo6y9fQF+sbju6R18lAV4fFb
2SI+sKlutFlRlf8+eIgTQWq4WRvaPmku+NhUICmFrIBX9xSbcG3FVb3t4stYoOHb
3ZtphjhwyBqdAt4mYG4wJj7+JIRXnNr+KUbCpuRJXl93vOJmrF9n6iJbIBThe/r+
oXH9mPk/SvVfd82A6/LmS0q0iNw2CMnKNZx6dRKOUbix5UbhVyQT1uCIegf+PBdj
dgPRqkqMUE/UHt4LR2XJeuKN9KqyzcK6Xhv25qtw7GNuwkQG/F93PkzKMDBQXTLe
SPu/nRhFurQlQtNxaGmArOE/twJ41eE05q43ntF8+FeLJ8wgQux2IOUv4wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPo47MxkYJZ7XzjUe9QBYI99KaBrMB8GA1UdIwQY
MBaAFPgWhlko7u7ly8kvTE04rlxgHe4KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CYUdXU2p1N3VYTHlTOU1UVGl1WEdBZDdnby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvNjhiMWJmLThmNDgtNDE2OS1hOWEy
LTVkYWM3MjAyMjNhYi8xLzEtQmFHV1NqdTd1WEx5UzlNVFRpdVhHQWQ3Z28ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RmLzY4YjFiZi04ZjQ4LTQxNjktYTlhMi01ZGFjNzIwMjIz
YWIvMS8xLUJhR1dTanU3dVhMeVM5TVRUaXVYR0FkN2dvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIllB
1Mvf6Ne5XWrQhku0RjatoskZm7ctuyy/PAG6thF3alY2WFdoG5IxpNeBQRlyvAwM
5JvjZ8WhzlWDA7k+anHIt2hfXBBs5y3MLF3Fv9Ddabd7sCrAnpreowQM+4H/9pyj
Rg5FkXRT3LJ+QjUdswJmFuUD+5ix/iRT3OFatS7BuH5smhm/b2fVVNMU1nY1FeAk
KEEw2BC3DkP1665YFViuPNHGHfLgMTYtzcoIo7nC+5OklbocH3fjoPC3FoDLc4pY
/BSbz8ta1F01f2Pb9vJwezcKuDUQY+uP5Y9cBTrg2vF3Q0928yUAdWDFrgflpWTB
Vgom5IBq4U+hXyx48g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:40 2025 by rpki-client