Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
File: bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft (raw, json)
Hash identifier: OUPjWcN667IGi6YNZLOadfle5nCeD7bhJ4NP1YrqaC4=
Subject key identifier: 6E:38:1E:E3:10:E9:18:0E:64:04:79:24:F6:EF:54:60:E0:03:D1:CE
Authority key identifier: 6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
Certificate issuer: /CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Certificate serial: 019A522C384C075A566E7825FF8E667CDF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
Manifest number: 15E7
Signing time: Wed 05 Nov 2025 04:00:20 +0000
Manifest this update: Wed 05 Nov 2025 04:00:20 +0000
Manifest next update: Thu 06 Nov 2025 04:00:20 +0000
Files and hashes: 1: bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl (hash: r3bnIgbKlLdZAG+2GJVZ23XEUs065lJ4WGwoMxqH3vs=)
2: xIncpff8t5DuBdap78CZRmBq41M.roa (hash: iuGa85kLc6g4Qd8kr/ZV4w/v+4lb0FJF9McHzQYZMGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:38:4c:07:5a:56:6e:78:25:ff:8e:66:7c:df:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Validity
Not Before: Nov 5 04:00:20 2025 GMT
Not After : Nov 6 04:00:20 2025 GMT
Subject: CN=6e381ee310e9180e64047924f6ef5460e003d1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:e0:da:a2:5b:e3:d1:89:67:27:98:c5:18:
3b:eb:eb:a4:37:65:c4:f6:d1:0f:6d:54:1a:12:90:
3a:1c:ec:ee:02:94:7a:7e:98:2a:5d:19:bb:73:0d:
f5:2e:65:72:e2:0c:cf:bb:0b:1f:24:75:fd:8a:8d:
49:32:34:88:43:ff:a5:99:a8:f4:7e:b5:b8:59:75:
67:d6:9e:5f:96:fa:89:77:a5:34:99:6c:9f:17:cb:
e4:68:ea:5e:47:52:27:89:55:e7:f4:af:cb:d4:9c:
73:b2:8f:51:0d:9f:a2:da:a7:03:72:b2:8b:09:44:
d6:d2:6c:51:e4:58:9f:22:9c:9e:d9:0d:19:3e:4b:
18:a4:18:3d:c4:90:4c:79:e7:ce:11:56:88:42:35:
0c:dc:2c:f8:26:66:78:32:32:69:de:65:22:1f:9b:
88:ad:a3:a7:22:11:f9:6c:b8:3d:a9:07:86:84:60:
69:59:fd:ac:e1:97:5b:d4:de:b7:c2:7b:ee:de:d9:
43:d6:40:da:9c:2d:96:56:2b:d2:9c:26:24:d0:df:
f7:39:f0:a4:28:41:ba:99:3b:2f:3b:12:ee:16:c3:
30:15:bd:10:77:dc:5a:18:8d:71:2f:07:79:87:5e:
18:67:36:e0:11:2f:86:e8:c1:df:c5:20:88:cb:10:
82:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:38:1E:E3:10:E9:18:0E:64:04:79:24:F6:EF:54:60:E0:03:D1:CE
X509v3 Authority Key Identifier:
keyid:6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:04:6c:68:a5:5d:16:bf:81:46:5a:75:d9:f8:ac:19:31:6e:
82:49:97:7c:c3:1b:21:b4:9e:55:ea:cc:5f:fe:08:39:51:4e:
b8:ef:e1:d7:0a:8c:e8:49:ad:6f:db:85:45:4f:83:43:b7:67:
05:09:8c:f5:30:0f:a3:6f:f8:98:4c:ee:27:26:7e:6c:33:e4:
26:5a:3c:54:3e:1d:cc:bc:96:99:b8:5f:47:a6:42:cd:ac:e6:
33:8d:78:c1:94:31:b3:c1:9f:81:9c:00:00:c5:04:49:33:d8:
2c:39:7d:d6:fc:8d:bd:6a:99:ac:34:c5:fb:f4:68:af:41:ed:
86:70:97:7d:a5:a6:7d:db:4c:5c:19:f3:a0:87:94:0f:75:be:
0e:f0:8f:0d:1b:09:3c:75:84:80:6e:7e:f2:9f:bf:05:1d:c5:
70:45:96:b8:20:85:38:84:4e:8e:cb:e8:35:61:9a:c2:b4:b3:
c8:7d:65:40:11:04:a1:38:00:2a:2d:e7:38:5c:0d:d7:41:c8:
e5:d0:04:66:ac:de:54:ae:fa:4b:d3:38:91:f6:49:6a:d8:f9:
19:3e:32:40:d8:bb:0a:51:c0:24:dd:6e:cd:47:b3:5b:15:72:
9c:3f:70:4d:5f:dc:4a:9c:3e:02:12:24:51:88:61:fe:8b:15:
ae:b1:d2:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLDhMB1pWbngl/45mfN9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYTNiNTAyOGNlMzY0ZjUxMDJjMWFlYzI3NzM2YjdjMzNi
YzA0OTMwHhcNMjUxMTA1MDQwMDIwWhcNMjUxMTA2MDQwMDIwWjAzMTEwLwYDVQQD
Eyg2ZTM4MWVlMzEwZTkxODBlNjQwNDc5MjRmNmVmNTQ2MGUwMDNkMWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo3g2qJb49GJZyeYxRg76+ukN2XE
9tEPbVQaEpA6HOzuApR6fpgqXRm7cw31LmVy4gzPuwsfJHX9io1JMjSIQ/+lmaj0
frW4WXVn1p5flvqJd6U0mWyfF8vkaOpeR1IniVXn9K/L1Jxzso9RDZ+i2qcDcrKL
CUTW0mxR5FifIpye2Q0ZPksYpBg9xJBMeefOEVaIQjUM3Cz4JmZ4MjJp3mUiH5uI
raOnIhH5bLg9qQeGhGBpWf2s4Zdb1N63wnvu3tlD1kDanC2WVivSnCYk0N/3OfCk
KEG6mTsvOxLuFsMwFb0Qd9xaGI1xLwd5h14YZzbgES+G6MHfxSCIyxCCFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG44HuMQ6RgOZAR5JPbvVGDgA9HOMB8GA1UdIwQY
MBaAFG6jtQKM42T1ECwa7Cdza3wzvASTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnFPMUFvempaUFVRTEJyc0ozTnJmRE84QkpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lYTQ3MWEtZGE2NC00NTk2LTgzNzAt
NjEyYTc2MjAwN2VjLzEvYnFPMUFvempaUFVRTEJyc0ozTnJmRE84QkpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9lYTQ3MWEtZGE2NC00NTk2LTgzNzAtNjEyYTc2MjAwN2Vj
LzEvYnFPMUFvempaUFVRTEJyc0ozTnJmRE84QkpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQRsaKVd
Fr+BRlp12fisGTFugkmXfMMbIbSeVerMX/4IOVFOuO/h1wqM6Emtb9uFRU+DQ7dn
BQmM9TAPo2/4mEzuJyZ+bDPkJlo8VD4dzLyWmbhfR6ZCzazmM414wZQxs8GfgZwA
AMUESTPYLDl91vyNvWqZrDTF+/Ror0HthnCXfaWmfdtMXBnzoIeUD3W+DvCPDRsJ
PHWEgG5+8p+/BR3FcEWWuCCFOIROjsvoNWGawrSzyH1lQBEEoTgAKi3nOFwN10HI
5dAEZqzeVK76S9M4kfZJatj5GT4yQNi7ClHAJN1uzUezWxVynD9wTV/cSpw+AhIk
UYhh/osVrrHSjw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:27:44 2025 by rpki-client