Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File: B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier: sMPc9RR+f4nZnybys7LVVkr7pu/sipT0yvYbXAekqdQ=
Subject key identifier: 61:82:6F:79:3A:F6:F1:5C:A9:72:3C:85:0D:85:3C:F8:5C:6B:1E:20
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial: 019A4FD08CD446FCCEA8FB00F4BD30579927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number: 11A2
Signing time: Tue 04 Nov 2025 17:00:58 +0000
Manifest this update: Tue 04 Nov 2025 17:00:58 +0000
Manifest next update: Wed 05 Nov 2025 17:00:58 +0000
Files and hashes: 1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: YQV8+aqmDBR6xepSVnXUtV8M3kfftOse/h0OqKBDkk8=)
2: by6raZCZNNtEi9tbGKEvnYOsqYE.roa (hash: aOGc7df3nlEJOygOWFL3hI418E+YoyI9nyziWKFPXfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:8c:d4:46:fc:ce:a8:fb:00:f4:bd:30:57:99:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Validity
Not Before: Nov 4 17:00:58 2025 GMT
Not After : Nov 5 17:00:58 2025 GMT
Subject: CN=61826f793af6f15ca9723c850d853cf85c6b1e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:59:69:0f:f7:e3:f2:28:eb:4a:29:dc:ed:
ac:a7:50:6f:74:47:73:51:56:63:34:91:31:74:d0:
e0:7a:84:3d:5b:13:e2:40:cc:cf:1b:ee:0a:dd:58:
04:4a:60:2e:33:3b:73:65:33:38:c5:b5:b4:bd:7b:
f9:2f:92:c8:f1:c0:16:78:ac:5d:c3:de:ff:cc:fb:
f0:9a:69:63:3e:34:47:f1:74:28:0d:69:4c:7b:d9:
bc:b5:26:f2:8e:32:43:75:c9:85:a1:ff:bd:ea:df:
b4:0f:af:c4:f2:ab:a6:21:25:53:74:89:5c:d9:27:
d5:e5:7a:da:88:45:b7:72:42:8b:13:82:d2:c6:3e:
61:ad:5f:f9:93:6e:b3:86:3d:41:be:17:09:fd:72:
6c:25:63:79:a1:a4:7a:d0:91:14:4f:f7:67:5e:95:
f5:c8:f2:84:99:40:7a:79:31:9a:02:38:3a:ba:29:
3b:45:f8:3e:b8:8c:87:96:5b:cf:cb:a8:8c:f6:b9:
f7:fc:ee:d0:80:f0:7f:a2:59:0f:57:eb:77:c2:4c:
86:0a:2e:17:57:5b:cb:b3:69:0d:d1:8f:59:91:20:
51:c1:80:7a:ca:4c:5f:26:13:1e:c6:e1:23:43:ee:
34:5e:86:33:f4:2d:3e:d2:e9:56:d8:73:05:4d:60:
a3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:82:6F:79:3A:F6:F1:5C:A9:72:3C:85:0D:85:3C:F8:5C:6B:1E:20
X509v3 Authority Key Identifier:
keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fb:9d:bb:e3:8d:4e:50:f8:31:2d:af:4e:f4:59:c7:ab:06:
43:98:6c:16:bf:c5:e7:53:31:92:29:68:a0:f1:a3:30:b8:96:
46:48:83:42:5d:b3:5d:12:c6:1e:fb:bb:3c:af:18:30:6d:10:
fe:7e:da:fb:5c:10:b1:1d:bd:22:06:f7:90:14:11:f3:c7:b5:
39:54:10:e2:f9:5c:2a:45:a0:aa:ae:52:01:fa:cb:95:13:12:
03:88:a5:d0:da:cd:50:d8:70:52:b3:87:71:df:91:ce:31:5f:
8a:a2:a6:9d:77:11:ee:69:b4:45:60:45:5d:cd:fa:22:dc:d0:
c8:c5:c0:26:1a:96:b6:16:61:c4:a1:9e:da:ac:f4:b1:af:ce:
2d:61:a6:8d:e2:1c:c6:39:ed:da:17:95:21:69:9d:d8:f8:76:
ec:36:60:56:c9:cb:76:a6:0b:25:5f:4e:3e:92:8f:b6:a1:a2:
5f:70:4d:d1:64:b2:85:4d:db:91:01:18:0c:2d:41:61:b3:3a:
4e:ab:ff:8c:2f:fc:c9:2b:bc:32:aa:af:26:4e:fa:71:46:b8:
38:c1:5e:b4:90:96:07:33:0e:af:d5:3f:c4:82:b3:92:a1:62:
9b:97:b8:36:05:1d:4e:27:64:38:b9:3b:f6:a6:f9:be:9e:7a:
a0:f5:0a:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0IzURvzOqPsA9L0wV5knMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NGFkMjNhNGNmYTMxYjZkNTVlYmNhMTZjNWQxNGM0MDRi
YTZjYWQwHhcNMjUxMTA0MTcwMDU4WhcNMjUxMTA1MTcwMDU4WjAzMTEwLwYDVQQD
Eyg2MTgyNmY3OTNhZjZmMTVjYTk3MjNjODUwZDg1M2NmODVjNmIxZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcxZaQ/34/Io60op3O2sp1BvdEdz
UVZjNJExdNDgeoQ9WxPiQMzPG+4K3VgESmAuMztzZTM4xbW0vXv5L5LI8cAWeKxd
w97/zPvwmmljPjRH8XQoDWlMe9m8tSbyjjJDdcmFof+96t+0D6/E8qumISVTdIlc
2SfV5XraiEW3ckKLE4LSxj5hrV/5k26zhj1BvhcJ/XJsJWN5oaR60JEUT/dnXpX1
yPKEmUB6eTGaAjg6uik7Rfg+uIyHllvPy6iM9rn3/O7QgPB/olkPV+t3wkyGCi4X
V1vLs2kN0Y9ZkSBRwYB6ykxfJhMexuEjQ+40XoYz9C0+0ulW2HMFTWCjywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGCb3k69vFcqXI8hQ2FPPhcax4gMB8GA1UdIwQY
MBaAFAdK0jpM+jG21V68oWxdFMQEumytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iZDNhNDYtNzI3Yi00NzZjLWE3ODkt
YzhjOTkxY2Q4OWQ1LzEvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9iZDNhNDYtNzI3Yi00NzZjLWE3ODktYzhjOTkxY2Q4OWQ1
LzEvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPudu+ON
TlD4MS2vTvRZx6sGQ5hsFr/F51MxkilooPGjMLiWRkiDQl2zXRLGHvu7PK8YMG0Q
/n7a+1wQsR29Igb3kBQR88e1OVQQ4vlcKkWgqq5SAfrLlRMSA4il0NrNUNhwUrOH
cd+RzjFfiqKmnXcR7mm0RWBFXc36ItzQyMXAJhqWthZhxKGe2qz0sa/OLWGmjeIc
xjnt2heVIWmd2Ph27DZgVsnLdqYLJV9OPpKPtqGiX3BN0WSyhU3bkQEYDC1BYbM6
Tqv/jC/8ySu8MqqvJk76cUa4OMFetJCWBzMOr9U/xIKzkqFim5e4NgUdTidkOLk7
9qb5vp56oPUK4g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:17:00 2025 by rpki-client