Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
File: BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json)
Hash identifier: 8NmuBpT5ib7KBCT2c/a/Ux5Yur3HknYges5uSEPUrDk=
Subject key identifier: F7:60:89:FC:80:D8:07:F2:16:43:4F:75:40:C7:DD:16:01:FF:48:01
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial: 019A4E4FFC225C3E66A2A9815C82D8CBDDB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
Manifest number: 1102
Signing time: Tue 04 Nov 2025 10:00:55 +0000
Manifest this update: Tue 04 Nov 2025 10:00:55 +0000
Manifest next update: Wed 05 Nov 2025 10:00:55 +0000
Files and hashes: 1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: 3GiK6liTGSd6Ywvd+MZrAh5qtTVjVOqsVK1OUFUpC4c=)
2: elV1APoKiSk_9XkOBJQhYkqxHiw.roa (hash: 8zT6bhkdxlFlI+FWNJggqU5g/ZNnR60ACpbk2nou4yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:fc:22:5c:3e:66:a2:a9:81:5c:82:d8:cb:dd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
Validity
Not Before: Nov 4 10:00:55 2025 GMT
Not After : Nov 5 10:00:55 2025 GMT
Subject: CN=f76089fc80d807f216434f7540c7dd1601ff4801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:a4:ef:df:2d:d4:ef:23:af:c7:b4:9e:14:
66:84:86:86:f9:34:a8:7b:f0:8f:f3:9f:d0:b9:cd:
df:1c:96:e3:59:fe:cc:73:e8:b1:cc:75:81:13:ab:
b5:4e:39:1c:22:ee:cc:09:e2:d6:04:dc:96:0d:ae:
51:4c:14:9e:1e:36:ab:72:05:f6:ce:63:02:af:15:
af:10:5c:bc:c8:4f:fa:ed:cd:d1:a2:17:fe:ca:d2:
dd:11:27:2d:0f:5b:a8:43:60:a5:0b:a0:8c:fd:d2:
72:f2:4c:52:f5:79:fc:d9:be:b2:e4:61:32:49:b5:
58:59:c2:ef:a7:c8:f3:f0:75:3b:76:8c:40:97:ce:
a3:55:96:56:67:f9:7c:4a:ee:02:57:b1:33:47:bd:
a4:5c:45:16:e0:1b:6f:10:ba:06:c8:ae:1d:1c:21:
ea:b6:83:54:32:01:17:41:38:58:ca:f1:3a:25:67:
76:9a:36:4f:54:e8:41:ec:7a:7d:be:f5:b8:5f:23:
f3:7e:77:c4:cf:56:7c:98:40:90:f0:5a:c0:cc:bb:
c4:25:ae:98:b7:78:4b:f8:69:7d:95:89:8a:d1:f1:
57:e0:26:bc:36:4b:8f:77:52:54:95:e2:dc:cc:2c:
d3:fd:ef:b8:eb:95:4e:04:48:ec:40:d3:eb:8b:45:
08:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:60:89:FC:80:D8:07:F2:16:43:4F:75:40:C7:DD:16:01:FF:48:01
X509v3 Authority Key Identifier:
keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:11:ec:09:3e:72:6b:d1:bd:d6:21:d0:ce:e4:c8:e9:29:c5:
fc:be:62:98:ef:bb:af:28:66:67:52:31:ab:3e:c8:6b:99:56:
fb:cc:d9:38:d7:58:61:95:b6:59:89:38:b2:6c:5f:44:7e:5e:
db:2e:1e:d9:6b:96:57:ef:6d:93:d4:3a:29:80:d8:97:b2:80:
8c:fb:38:96:a0:e4:b8:8a:09:e1:f6:6c:27:d3:b1:3c:67:23:
f9:47:51:49:50:dc:74:f4:1a:6e:16:a1:45:e4:24:50:62:f6:
c1:24:b8:80:d2:16:6b:a9:19:00:75:dc:3b:d4:0a:ae:2c:c1:
6c:47:76:5a:c1:f0:a8:59:50:ac:5d:81:63:ea:ad:9b:8e:54:
93:28:0c:06:da:8b:05:20:64:d8:79:a3:0c:cd:37:d2:de:2f:
de:e1:2e:38:98:60:ba:c1:50:a8:c7:b6:44:27:a6:33:e0:ef:
41:4c:b6:bd:e6:67:43:9e:b5:0f:29:24:e9:70:89:93:fb:d6:
fe:a2:27:38:aa:a8:e7:5e:b8:53:39:34:19:81:07:cf:ac:33:
56:06:81:8d:1a:13:87:cf:ac:09:5a:ba:8a:9e:fe:51:c3:ff:
b6:c6:c1:09:5f:29:41:a4:6f:b6:b0:51:fd:43:08:89:30:3d:
0f:cc:19:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT/wiXD5moqmBXILYy921MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NjU4NzkwMWYxMzA3OWJlZDg5ODJmNjI5ZTlkZDE1NDY4
Y2ZlZjEwHhcNMjUxMTA0MTAwMDU1WhcNMjUxMTA1MTAwMDU1WjAzMTEwLwYDVQQD
EyhmNzYwODlmYzgwZDgwN2YyMTY0MzRmNzU0MGM3ZGQxNjAxZmY0ODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6qk798t1O8jr8e0nhRmhIaG+TSo
e/CP85/Quc3fHJbjWf7Mc+ixzHWBE6u1TjkcIu7MCeLWBNyWDa5RTBSeHjarcgX2
zmMCrxWvEFy8yE/67c3Rohf+ytLdESctD1uoQ2ClC6CM/dJy8kxS9Xn82b6y5GEy
SbVYWcLvp8jz8HU7doxAl86jVZZWZ/l8Su4CV7EzR72kXEUW4BtvELoGyK4dHCHq
toNUMgEXQThYyvE6JWd2mjZPVOhB7Hp9vvW4XyPzfnfEz1Z8mECQ8FrAzLvEJa6Y
t3hL+Gl9lYmK0fFX4Ca8NkuPd1JUleLczCzT/e+465VOBEjsQNPri0UI5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdgifyA2AfyFkNPdUDH3RYB/0gBMB8GA1UdIwQY
MBaAFARlh5AfEweb7YmC9inp3RVGjP7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82M2QzOTQtNDJiZC00MGIxLWEyYTEt
NzRkNTkwMWE4YzU2LzEvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82M2QzOTQtNDJiZC00MGIxLWEyYTEtNzRkNTkwMWE4YzU2
LzEvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBHsCT5y
a9G91iHQzuTI6SnF/L5imO+7ryhmZ1Ixqz7Ia5lW+8zZONdYYZW2WYk4smxfRH5e
2y4e2WuWV+9tk9Q6KYDYl7KAjPs4lqDkuIoJ4fZsJ9OxPGcj+UdRSVDcdPQabhah
ReQkUGL2wSS4gNIWa6kZAHXcO9QKrizBbEd2WsHwqFlQrF2BY+qtm45UkygMBtqL
BSBk2HmjDM030t4v3uEuOJhgusFQqMe2RCemM+DvQUy2veZnQ561Dykk6XCJk/vW
/qInOKqo5164Uzk0GYEHz6wzVgaBjRoTh8+sCVq6ip7+UcP/tsbBCV8pQaRvtrBR
/UMIiTA9D8wZ9A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:41 2025 by rpki-client