Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
File: bULP8YM0sv92sVrZRKipE16QVow.mft (raw, json)
Hash identifier: V7qkkK11zy+0Fyl/g2fzc12xGMORv8oV+wUgxNwHOW4=
Subject key identifier: 49:B5:F9:A9:2D:97:AF:E2:0B:CC:4B:B4:AF:7E:67:F0:E7:94:F1:7B
Authority key identifier: 6D:42:CF:F1:83:34:B2:FF:76:B1:5A:D9:44:A8:A9:13:5E:90:56:8C
Certificate issuer: /CN=6d42cff18334b2ff76b15ad944a8a9135e90568c
Certificate serial: 0198D4A8388C1A02B2646E81CE0365ABBB2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
Manifest number: 0DAA
Signing time: Sat 23 Aug 2025 02:00:51 +0000
Manifest this update: Sat 23 Aug 2025 02:00:51 +0000
Manifest next update: Sun 24 Aug 2025 02:00:51 +0000
Files and hashes: 1: bULP8YM0sv92sVrZRKipE16QVow.crl (hash: hhxYSpKIwWlXF4opsXLjrKW36FlSYyEfOe/Jy2GALYo=)
2: nnbxQ8tDPz9a0vLR7ITFF8A_VlE.roa (hash: halDO4C/H1OfIMQSoqT7EneEPBECnw5N2tq5Tmmkcww=)
3: p8yh7cpRxTyZ1PP7mS2mLTKixUQ.roa (hash: OxdG54zVI8TmiMuPSkefFSPZVVftVNj4uTPLezk6AtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:38:8c:1a:02:b2:64:6e:81:ce:03:65:ab:bb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d42cff18334b2ff76b15ad944a8a9135e90568c
Validity
Not Before: Aug 23 02:00:51 2025 GMT
Not After : Aug 24 02:00:51 2025 GMT
Subject: CN=49b5f9a92d97afe20bcc4bb4af7e67f0e794f17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:71:42:7e:01:82:d8:e4:43:f4:c6:7a:9c:1f:
18:6f:eb:d5:fe:6c:7c:a3:79:0b:e4:28:21:da:5a:
ae:5e:3b:c8:42:e2:9c:ad:7b:f1:d6:15:36:8f:a3:
62:bc:c6:e4:23:b5:af:9e:2c:17:95:55:05:9d:bf:
96:fe:4e:bf:b2:aa:68:b3:b2:f5:32:29:96:7d:c8:
52:0c:f3:ae:60:ad:c0:5c:f9:00:3e:bb:d3:e6:9b:
83:ad:91:a4:fe:12:c0:3a:c1:9a:c1:4f:70:80:05:
30:94:3a:16:6e:ff:c7:31:b0:c0:3d:67:2c:d2:6c:
db:84:d9:ad:8c:8e:56:80:57:62:9f:41:5f:5c:66:
fe:d5:e1:4c:94:22:48:37:a2:30:2e:11:19:b2:9c:
26:fd:60:f6:29:f8:8d:b0:c6:fc:6b:f8:aa:bd:e4:
0b:04:d8:06:08:d4:81:f8:b0:25:86:e2:d7:12:84:
56:2b:6d:7a:a6:07:b3:10:1e:ac:06:18:de:88:6d:
e2:38:3a:82:e2:ed:38:17:60:00:73:c6:00:58:17:
aa:a8:9a:6d:e7:4d:b1:9c:55:86:9c:ad:62:7d:64:
f2:84:bc:da:80:e7:6d:c3:65:c0:97:da:7b:f6:6b:
b3:4a:e4:c9:90:f8:98:98:7e:29:07:1f:ff:40:e7:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B5:F9:A9:2D:97:AF:E2:0B:CC:4B:B4:AF:7E:67:F0:E7:94:F1:7B
X509v3 Authority Key Identifier:
keyid:6D:42:CF:F1:83:34:B2:FF:76:B1:5A:D9:44:A8:A9:13:5E:90:56:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3a:db:66:fd:43:45:eb:12:17:52:3b:5c:92:f0:1a:ab:bc:
a7:13:a0:74:55:e8:49:6a:f4:b0:50:f3:31:9c:24:cd:80:b2:
38:c9:75:3c:61:6e:a0:11:a1:0b:93:5c:3d:2e:ba:61:2e:70:
a1:c7:c3:51:b9:80:90:63:af:44:00:af:32:1b:92:46:8a:f3:
98:b5:fd:f5:6d:07:95:7a:cc:02:f3:88:cf:ed:3b:ea:c6:34:
10:8a:65:94:e3:7d:72:53:53:f2:6e:57:13:60:94:f3:cb:31:
73:c4:27:3e:c6:77:c7:0d:46:47:e7:3d:be:60:b9:35:e4:2b:
47:46:6b:93:e9:67:5a:a1:17:9f:81:83:81:eb:f6:bf:7e:e3:
98:34:3b:29:55:b9:92:53:4b:3b:c3:0e:22:ac:5c:64:f3:0d:
79:8a:20:3e:4e:7e:04:07:1b:21:2e:57:66:b2:37:75:e7:63:
86:9f:87:27:ba:a0:cd:c6:ca:a9:f8:39:6a:e4:6a:6d:ab:bd:
68:c2:10:24:3c:63:ee:94:a1:9c:de:3e:2e:5c:7a:14:6d:df:
a4:d6:aa:b0:56:bc:73:08:12:ef:af:93:d0:a5:2d:8b:59:83:
27:87:7f:5f:8e:86:a0:ee:68:b8:9a:bb:42:a2:ea:c0:22:14:
10:be:2e:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqDiMGgKyZG6BzgNlq7svMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNDJjZmYxODMzNGIyZmY3NmIxNWFkOTQ0YThhOTEzNWU5
MDU2OGMwHhcNMjUwODIzMDIwMDUxWhcNMjUwODI0MDIwMDUxWjAzMTEwLwYDVQQD
Eyg0OWI1ZjlhOTJkOTdhZmUyMGJjYzRiYjRhZjdlNjdmMGU3OTRmMTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HFCfgGC2ORD9MZ6nB8Yb+vV/mx8
o3kL5Cgh2lquXjvIQuKcrXvx1hU2j6NivMbkI7WvniwXlVUFnb+W/k6/sqpos7L1
MimWfchSDPOuYK3AXPkAPrvT5puDrZGk/hLAOsGawU9wgAUwlDoWbv/HMbDAPWcs
0mzbhNmtjI5WgFdin0FfXGb+1eFMlCJIN6IwLhEZspwm/WD2KfiNsMb8a/iqveQL
BNgGCNSB+LAlhuLXEoRWK216pgezEB6sBhjeiG3iODqC4u04F2AAc8YAWBeqqJpt
502xnFWGnK1ifWTyhLzagOdtw2XAl9p79muzSuTJkPiYmH4pBx//QOfHRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEm1+aktl6/iC8xLtK9+Z/DnlPF7MB8GA1UdIwQY
MBaAFG1Cz/GDNLL/drFa2USoqRNekFaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlVMUDhZTTBzdjkyc1ZyWlJLaXBFMTZRVm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82MGQ5MzAtYmQ0Ni00NTE3LWFiMGUt
YTZjZTgzNTViMmUwLzEvYlVMUDhZTTBzdjkyc1ZyWlJLaXBFMTZRVm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82MGQ5MzAtYmQ0Ni00NTE3LWFiMGUtYTZjZTgzNTViMmUw
LzEvYlVMUDhZTTBzdjkyc1ZyWlJLaXBFMTZRVm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjrbZv1D
ResSF1I7XJLwGqu8pxOgdFXoSWr0sFDzMZwkzYCyOMl1PGFuoBGhC5NcPS66YS5w
ocfDUbmAkGOvRACvMhuSRorzmLX99W0HlXrMAvOIz+076sY0EIpllON9clNT8m5X
E2CU88sxc8QnPsZ3xw1GR+c9vmC5NeQrR0Zrk+lnWqEXn4GDgev2v37jmDQ7KVW5
klNLO8MOIqxcZPMNeYogPk5+BAcbIS5XZrI3dedjhp+HJ7qgzcbKqfg5auRqbau9
aMIQJDxj7pShnN4+Llx6FG3fpNaqsFa8cwgS76+T0KUti1mDJ4d/X46GoO5ouJq7
QqLqwCIUEL4uxQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:58 2025 by rpki-client