Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
File: BwSD09YvGcCDV0bctyHIgyw7eSY.mft (raw, json)
Hash identifier: Lr1XtJBLJ+u4U9F5wHpdPcpaKmpd99Lh7kX4YF/wy/o=
Subject key identifier: 9E:99:6E:09:3B:C8:29:9B:CA:A7:DD:25:FB:03:74:15:A0:49:3F:52
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 019A4DE1D94C8677DE12313659A03286E282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
Manifest number: 12A3
Signing time: Tue 04 Nov 2025 08:00:37 +0000
Manifest this update: Tue 04 Nov 2025 08:00:37 +0000
Manifest next update: Wed 05 Nov 2025 08:00:37 +0000
Files and hashes: 1: 4PcwBZaSEavr4q7nYUzHdazR3dc.roa (hash: k3MqksVJu5YCBeSP7fBQqhMWQJmQ3f0QvgkN1CykB88=)
2: 5cY3Kx8b4j0KVaTDpMJ_p3MHXDQ.roa (hash: 4/U5L2WjP5zopAp031RJ3xCbWwHur60QbESkZzzy6YQ=)
3: B5vrhwWeN1u04JarSN4IYCbo8Xc.roa (hash: t+R3zUYIJ8xs8XX0sngECa4QZBYlpNaidayI3GIo934=)
4: BwSD09YvGcCDV0bctyHIgyw7eSY.crl (hash: IqU0R23vdBvfXqa9w1K5+LGiTiYvzZqmS0b9bsk2afc=)
5: t-7ng9wcZ6DSPMgkeLgJ9AF--O4.roa (hash: DgVk1B4aExECpWEcAT+MKrSw8s1OZ50aoeFXQKO0kng=)
6: vgi1Ey_E7uF9NU90F_N6bB-tCrA.roa (hash: Vylgp4eMLnfNvxtlSE6QqW4iZbJBkmSUXI0mGatE/98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d9:4c:86:77:de:12:31:36:59:a0:32:86:e2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Nov 4 08:00:37 2025 GMT
Not After : Nov 5 08:00:37 2025 GMT
Subject: CN=9e996e093bc8299bcaa7dd25fb037415a0493f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:16:f8:f3:31:1d:70:03:06:72:d3:b4:e1:
ca:d8:97:c6:9d:a3:cf:d4:c2:45:22:ed:cc:38:9a:
57:a2:48:7c:73:33:ad:3c:5e:32:54:5b:5e:30:c2:
93:47:a0:b7:28:91:fd:65:86:68:cf:05:a0:98:7e:
09:e2:ab:32:6d:e9:8b:cc:d5:96:d4:c5:5b:8e:b6:
2d:6b:ad:7b:01:93:f6:1c:a0:4a:9f:ae:17:7f:6d:
08:2d:80:0b:50:b6:ad:54:59:8a:32:3c:36:df:07:
c8:28:36:12:2d:b2:24:57:2b:47:75:30:fa:64:95:
d6:42:6f:d7:1a:32:8b:4f:1a:ed:c3:e1:fc:c6:ee:
33:09:b4:bf:46:5f:0d:fc:7a:07:34:79:67:4a:df:
cc:2f:56:38:35:39:0e:e4:a5:2e:dc:7f:83:a7:a9:
04:7e:be:98:0c:b6:35:a2:97:80:a2:b4:5f:41:9f:
42:56:fe:fb:ca:4a:15:29:a9:5c:6f:a8:80:95:49:
f9:89:1b:59:27:ec:8d:9f:db:a3:f1:a4:19:7f:5b:
73:79:9f:52:cc:fe:c0:13:2c:72:8a:ce:2f:a7:c9:
8c:ff:cf:4a:06:90:18:fa:51:3e:d8:f5:fc:9c:c2:
9d:f8:c5:5c:5f:4a:b3:95:0c:19:7d:6f:aa:57:79:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:99:6E:09:3B:C8:29:9B:CA:A7:DD:25:FB:03:74:15:A0:49:3F:52
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b4:53:d5:83:a3:0c:ec:8e:74:2e:0e:84:b4:63:62:55:c1:
3b:be:ea:65:90:cb:70:2c:7c:6c:d4:32:b5:d4:36:c3:f4:3b:
4d:05:ee:31:96:5d:99:a4:60:39:ef:20:b1:d9:53:c4:5e:37:
16:66:d3:ac:32:a8:ae:11:0e:d8:ba:de:34:e1:94:f0:12:3d:
9a:3b:64:bb:5d:dc:65:cc:1b:a3:74:ec:8c:a4:df:7e:30:24:
c5:d5:63:8b:d7:d7:db:45:ad:a9:40:6c:f8:c4:59:1a:c8:61:
d2:40:b9:2f:e9:16:a5:cc:4b:c2:7a:11:32:9d:88:99:58:bd:
10:da:15:5f:e8:29:c2:b4:7b:db:d7:1f:0c:b2:10:95:4d:a5:
83:85:da:74:87:f1:10:44:2c:b1:73:df:fe:93:4f:da:ed:b5:
24:b7:ba:21:b3:04:b2:b7:5f:19:4d:91:07:1d:9c:35:d0:20:
4f:3e:fc:77:47:ba:54:63:c5:a8:c3:12:83:ba:1f:fe:c0:67:
ea:6d:9a:c6:3f:fd:71:c5:12:fa:d4:20:a8:dc:70:03:a4:fd:
46:47:c0:69:85:72:d4:b2:e2:8b:e4:22:81:e9:6b:47:5d:56:
7a:3e:fa:f7:9e:9d:5b:f9:bd:bd:9a:2d:a2:16:5f:53:81:35:
5d:10:6f:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4dlMhnfeEjE2WaAyhuKCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDQ4M2QzZDYyZjE5YzA4MzU3NDZkY2I3MjFjODgzMmMz
Yjc5MjYwHhcNMjUxMTA0MDgwMDM3WhcNMjUxMTA1MDgwMDM3WjAzMTEwLwYDVQQD
Eyg5ZTk5NmUwOTNiYzgyOTliY2FhN2RkMjVmYjAzNzQxNWEwNDkzZjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGIW+PMxHXADBnLTtOHK2JfGnaPP
1MJFIu3MOJpXokh8czOtPF4yVFteMMKTR6C3KJH9ZYZozwWgmH4J4qsybemLzNWW
1MVbjrYta617AZP2HKBKn64Xf20ILYALULatVFmKMjw23wfIKDYSLbIkVytHdTD6
ZJXWQm/XGjKLTxrtw+H8xu4zCbS/Rl8N/HoHNHlnSt/ML1Y4NTkO5KUu3H+Dp6kE
fr6YDLY1opeAorRfQZ9CVv77ykoVKalcb6iAlUn5iRtZJ+yNn9uj8aQZf1tzeZ9S
zP7AEyxyis4vp8mM/89KBpAY+lE+2PX8nMKd+MVcX0qzlQwZfW+qV3mBHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6Zbgk7yCmbyqfdJfsDdBWgST9SMB8GA1UdIwQY
MBaAFAcEg9PWLxnAg1dG3LchyIMsO3kmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NDUxYzEtMmJjZC00NDYzLWE3MDAt
ZDQ0MmM0ZjllOWJkLzEvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82NDUxYzEtMmJjZC00NDYzLWE3MDAtZDQ0MmM0ZjllOWJk
LzEvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbRT1YOj
DOyOdC4OhLRjYlXBO77qZZDLcCx8bNQytdQ2w/Q7TQXuMZZdmaRgOe8gsdlTxF43
FmbTrDKorhEO2LreNOGU8BI9mjtku13cZcwbo3TsjKTffjAkxdVji9fX20WtqUBs
+MRZGshh0kC5L+kWpcxLwnoRMp2ImVi9ENoVX+gpwrR729cfDLIQlU2lg4XadIfx
EEQssXPf/pNP2u21JLe6IbMEsrdfGU2RBx2cNdAgTz78d0e6VGPFqMMSg7of/sBn
6m2axj/9ccUS+tQgqNxwA6T9RkfAaYVy1LLii+QigelrR11Wej76956dW/m9vZot
ohZfU4E1XRBvbw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:14 2025 by rpki-client