Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
File: bULP8YM0sv92sVrZRKipE16QVow.mft (raw, json)
Hash identifier: mVGhnSaxWLqIkeBne0IaOedSSMcQ+5dNk/W+3KMnEHM=
Subject key identifier: B1:24:83:FA:AC:07:1A:3E:BF:43:D3:6D:5B:C0:74:0F:CC:D5:9D:44
Authority key identifier: 6D:42:CF:F1:83:34:B2:FF:76:B1:5A:D9:44:A8:A9:13:5E:90:56:8C
Certificate issuer: /CN=6d42cff18334b2ff76b15ad944a8a9135e90568c
Certificate serial: 0197B8C5D138928E664B5CE11A74AD762902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
Manifest number: 0D17
Signing time: Sat 28 Jun 2025 23:01:01 +0000
Manifest this update: Sat 28 Jun 2025 23:01:01 +0000
Manifest next update: Sun 29 Jun 2025 23:01:01 +0000
Files and hashes: 1: bULP8YM0sv92sVrZRKipE16QVow.crl (hash: cnldDNH271IXuSMH8VE1T6m2ZYXZaM0qvfYaQcdFbjc=)
2: nnbxQ8tDPz9a0vLR7ITFF8A_VlE.roa (hash: halDO4C/H1OfIMQSoqT7EneEPBECnw5N2tq5Tmmkcww=)
3: p8yh7cpRxTyZ1PP7mS2mLTKixUQ.roa (hash: OxdG54zVI8TmiMuPSkefFSPZVVftVNj4uTPLezk6AtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:d1:38:92:8e:66:4b:5c:e1:1a:74:ad:76:29:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d42cff18334b2ff76b15ad944a8a9135e90568c
Validity
Not Before: Jun 28 23:01:01 2025 GMT
Not After : Jun 29 23:01:01 2025 GMT
Subject: CN=b12483faac071a3ebf43d36d5bc0740fccd59d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:64:ac:bc:10:53:55:a0:2a:0a:1c:7f:83:
40:7f:54:89:23:e7:34:c8:d5:90:58:79:eb:ac:c6:
16:3d:dc:c2:a2:f7:d0:4c:6a:8f:ed:0e:5a:cf:08:
5c:15:2c:2f:10:cc:a2:a9:ee:7e:a5:87:93:49:17:
c9:7c:86:02:6f:e6:db:1b:44:bf:4e:48:82:58:62:
32:b4:72:00:c7:18:12:44:82:fc:db:0a:97:d3:56:
13:0b:4a:e0:a7:c0:f5:04:98:85:8c:c6:24:d9:1f:
88:b4:ce:1f:42:0b:71:1f:06:c0:c3:83:07:9b:58:
09:f0:2f:a9:0f:dc:f1:ee:79:1a:fd:66:fe:cd:9e:
e5:e3:a6:b1:aa:10:21:83:29:af:55:3f:a7:7f:d3:
28:f9:d4:c6:82:5d:be:ee:db:f4:26:d6:ae:a2:ef:
dc:91:81:39:fe:91:b2:d4:c3:d8:71:a2:59:a9:d6:
97:c6:05:38:dc:c0:82:ec:ed:8d:50:0e:b7:29:93:
9c:df:34:77:d4:12:34:cb:f9:66:ce:a9:e6:ed:58:
99:9e:b4:48:8d:1f:b8:69:21:ca:f1:58:3c:5e:c0:
58:de:ba:b0:60:38:1b:df:24:1e:be:69:06:45:07:
9c:96:0b:fe:e0:0c:27:61:f3:36:44:68:db:52:46:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:24:83:FA:AC:07:1A:3E:BF:43:D3:6D:5B:C0:74:0F:CC:D5:9D:44
X509v3 Authority Key Identifier:
keyid:6D:42:CF:F1:83:34:B2:FF:76:B1:5A:D9:44:A8:A9:13:5E:90:56:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:59:52:6a:65:6f:3c:e8:f0:05:5f:f2:17:69:7b:ad:a5:2d:
df:6d:17:b7:0e:db:31:2c:20:4a:9a:49:03:70:89:83:57:76:
45:94:d1:c7:12:72:a6:5f:29:06:0a:1a:fa:34:a8:e2:89:d5:
e7:15:4b:4b:32:87:1e:30:ce:5f:93:64:d4:c1:fb:d4:b5:ba:
ec:fc:61:f3:95:e9:a5:13:a9:e5:e7:b1:99:b5:64:05:a1:dd:
3a:18:d5:f5:dc:a2:bf:b5:e8:b6:e4:ee:2c:01:df:6f:d4:f3:
0d:4c:05:84:61:24:2a:fb:6e:fe:93:c9:34:bb:e2:e2:eb:9c:
8b:c9:7c:95:63:02:82:39:7f:f3:3d:ee:d3:b5:b4:5c:76:e7:
b1:b1:ba:27:79:7d:75:ff:22:f7:87:5c:d0:98:cf:f3:ec:02:
b2:15:7d:ea:71:1f:e8:0a:f5:ff:01:fa:21:a1:8d:ec:1a:78:
3c:14:72:51:5d:16:87:52:d6:15:cc:e3:bb:f9:0a:44:75:bc:
cb:1a:09:53:99:85:3b:1f:b4:58:9f:58:b8:fc:cc:60:5f:24:
5c:2d:73:66:36:c1:54:20:1c:17:66:24:68:64:88:70:8f:e9:
22:40:2b:91:3a:21:64:60:85:06:cc:a5:ce:aa:02:2e:28:30:
03:4e:ad:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4xdE4ko5mS1zhGnStdikCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNDJjZmYxODMzNGIyZmY3NmIxNWFkOTQ0YThhOTEzNWU5
MDU2OGMwHhcNMjUwNjI4MjMwMTAxWhcNMjUwNjI5MjMwMTAxWjAzMTEwLwYDVQQD
EyhiMTI0ODNmYWFjMDcxYTNlYmY0M2QzNmQ1YmMwNzQwZmNjZDU5ZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFZkrLwQU1WgKgocf4NAf1SJI+c0
yNWQWHnrrMYWPdzCovfQTGqP7Q5azwhcFSwvEMyiqe5+pYeTSRfJfIYCb+bbG0S/
TkiCWGIytHIAxxgSRIL82wqX01YTC0rgp8D1BJiFjMYk2R+ItM4fQgtxHwbAw4MH
m1gJ8C+pD9zx7nka/Wb+zZ7l46axqhAhgymvVT+nf9Mo+dTGgl2+7tv0Jtauou/c
kYE5/pGy1MPYcaJZqdaXxgU43MCC7O2NUA63KZOc3zR31BI0y/lmzqnm7ViZnrRI
jR+4aSHK8Vg8XsBY3rqwYDgb3yQevmkGRQeclgv+4AwnYfM2RGjbUkadSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEkg/qsBxo+v0PTbVvAdA/M1Z1EMB8GA1UdIwQY
MBaAFG1Cz/GDNLL/drFa2USoqRNekFaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlVMUDhZTTBzdjkyc1ZyWlJLaXBFMTZRVm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82MGQ5MzAtYmQ0Ni00NTE3LWFiMGUt
YTZjZTgzNTViMmUwLzEvYlVMUDhZTTBzdjkyc1ZyWlJLaXBFMTZRVm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82MGQ5MzAtYmQ0Ni00NTE3LWFiMGUtYTZjZTgzNTViMmUw
LzEvYlVMUDhZTTBzdjkyc1ZyWlJLaXBFMTZRVm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1lSamVv
POjwBV/yF2l7raUt320Xtw7bMSwgSppJA3CJg1d2RZTRxxJypl8pBgoa+jSo4onV
5xVLSzKHHjDOX5Nk1MH71LW67Pxh85XppROp5eexmbVkBaHdOhjV9dyiv7XotuTu
LAHfb9TzDUwFhGEkKvtu/pPJNLvi4uuci8l8lWMCgjl/8z3u07W0XHbnsbG6J3l9
df8i94dc0JjP8+wCshV96nEf6Ar1/wH6IaGN7Bp4PBRyUV0Wh1LWFczju/kKRHW8
yxoJU5mFOx+0WJ9YuPzMYF8kXC1zZjbBVCAcF2YkaGSIcI/pIkArkTohZGCFBsyl
zqoCLigwA06tig==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:17:14 2025 by rpki-client