Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: 5bgCymQOiy+jAQlU3117KexVaH7FPrA/sM4kicRA3rk=
Subject key identifier: 09:33:53:EA:94:92:2C:4E:16:7D:A8:FA:6B:89:28:0E:B1:2C:57:73
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 019A4E4FC945604DEB72F925BBCBBDEB78A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 10:00:42 +0000
Manifest this update: Tue 04 Nov 2025 10:00:42 +0000
Manifest next update: Wed 05 Nov 2025 10:00:42 +0000
Files and hashes: 1: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: yKPOdwAYd0DGdnOV0Maq/qrGMkNOYmALGV+dkumVfW8=)
2: OseFlpN5BBrbNEKlLXg6nEL0mf0.roa (hash: 656ZLuWKc6figtfDxdhxBQM6z66wyeYFhuGY7fphkn0=)
3: gNi743mJaJJJpWWUxpf7RubXOek.roa (hash: hburpHLX614e/9N2G5KI/cnIBQfgISQPCQg2JsjnMcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:c9:45:60:4d:eb:72:f9:25:bb:cb:bd:eb:78:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Nov 4 10:00:42 2025 GMT
Not After : Nov 5 10:00:42 2025 GMT
Subject: CN=093353ea94922c4e167da8fa6b89280eb12c5773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:a8:41:fa:76:1b:cc:0d:dd:2f:b3:7d:3e:
97:0e:01:eb:d7:a4:89:8e:14:e8:d5:c8:8f:31:74:
e1:5e:72:b9:df:14:d3:5d:7d:6f:0d:7b:01:a6:e2:
19:fe:9c:b4:d1:61:22:1f:1c:ef:a2:0e:b9:98:ec:
5a:52:82:dd:83:5e:21:53:ef:2d:df:f3:46:79:2d:
cf:73:18:38:f6:4d:62:de:06:1c:28:e4:47:db:22:
3e:fc:7e:e6:84:35:8e:3e:fc:f0:a8:df:18:63:51:
33:7b:74:a7:ff:dd:7e:a1:5c:b7:9e:40:69:a8:f6:
64:eb:5c:df:e8:f3:43:04:98:5b:df:72:79:71:8b:
fe:9b:f3:27:e9:84:2a:d9:59:22:0d:c9:f7:ad:bf:
8b:9b:92:51:8f:d3:14:1a:0c:87:74:a9:e2:eb:d6:
ad:4c:30:86:7e:6b:57:8b:40:a2:4f:fe:c1:14:d7:
82:4a:9b:39:72:7e:d7:57:40:b5:04:a1:1b:41:c0:
4d:43:ea:00:9f:0b:c1:19:f4:85:3e:1b:a0:56:b8:
e3:2f:51:81:d0:f2:fa:c6:cf:3e:21:f5:ad:35:4e:
d5:89:9c:bf:ac:84:a7:ae:88:50:e3:33:c5:ec:0c:
f5:dc:38:41:81:95:17:06:ee:02:b8:c4:2f:15:20:
e0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:33:53:EA:94:92:2C:4E:16:7D:A8:FA:6B:89:28:0E:B1:2C:57:73
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:96:2e:45:1b:46:be:b7:f4:99:1d:69:81:64:10:d2:fe:5d:
99:b0:68:48:80:7a:09:63:39:76:eb:19:18:86:ac:8f:93:11:
33:aa:d6:12:4d:bb:9e:9f:93:e0:75:0c:11:33:90:40:af:72:
6f:dd:87:cf:72:17:1a:63:c4:f9:3c:54:54:70:69:52:c8:ef:
cb:3b:32:57:73:ea:5d:ef:f8:e8:54:9f:1a:86:c5:e0:45:41:
08:d0:0c:9f:7e:6f:f3:7a:b7:34:58:70:4d:37:0d:ed:51:34:
d2:e2:c2:39:fb:e7:b1:74:1f:25:5d:15:3f:24:9e:90:fd:e6:
18:bb:54:8d:44:71:af:41:b9:a6:20:0f:8d:c5:54:71:88:6f:
df:22:c0:42:b3:3b:91:cd:9e:bd:1c:66:72:c4:1d:5b:c8:dd:
14:9e:8b:df:99:5f:4a:d6:0a:30:c8:22:c7:77:a6:4d:b4:9e:
0a:9f:c2:da:ca:9f:c2:5d:61:43:0e:13:89:7f:18:85:10:54:
15:6a:69:a6:99:4b:42:b4:bc:d3:05:b8:87:a2:e5:f1:5d:5b:
2c:e1:92:10:6d:3b:e1:9a:51:a7:b3:23:ac:09:f2:be:75:c6:
0f:15:8f:61:93:65:98:7c:94:15:eb:7f:0e:d6:97:49:be:97:
5c:37:ed:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT8lFYE3rcvklu8u963igMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Nzg1MTE3OTg2YWRhYTQzN2JlYzMwYTJiZjlmMTU3YTky
NTdkZjIwHhcNMjUxMTA0MTAwMDQyWhcNMjUxMTA1MTAwMDQyWjAzMTEwLwYDVQQD
EygwOTMzNTNlYTk0OTIyYzRlMTY3ZGE4ZmE2Yjg5MjgwZWIxMmM1NzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7WoQfp2G8wN3S+zfT6XDgHr16SJ
jhTo1ciPMXThXnK53xTTXX1vDXsBpuIZ/py00WEiHxzvog65mOxaUoLdg14hU+8t
3/NGeS3Pcxg49k1i3gYcKORH2yI+/H7mhDWOPvzwqN8YY1Eze3Sn/91+oVy3nkBp
qPZk61zf6PNDBJhb33J5cYv+m/Mn6YQq2VkiDcn3rb+Lm5JRj9MUGgyHdKni69at
TDCGfmtXi0CiT/7BFNeCSps5cn7XV0C1BKEbQcBNQ+oAnwvBGfSFPhugVrjjL1GB
0PL6xs8+IfWtNU7ViZy/rISnrohQ4zPF7Az13DhBgZUXBu4CuMQvFSDgHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkzU+qUkixOFn2o+muJKA6xLFdzMB8GA1UdIwQY
MBaAFAZ4UReYatqkN77DCiv58VepJX3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2Ut
ODRlZTQ4ODU2NmYxLzEvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2UtODRlZTQ4ODU2NmYx
LzEvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJYuRRtG
vrf0mR1pgWQQ0v5dmbBoSIB6CWM5dusZGIasj5MRM6rWEk27np+T4HUMETOQQK9y
b92Hz3IXGmPE+TxUVHBpUsjvyzsyV3PqXe/46FSfGobF4EVBCNAMn35v83q3NFhw
TTcN7VE00uLCOfvnsXQfJV0VPySekP3mGLtUjURxr0G5piAPjcVUcYhv3yLAQrM7
kc2evRxmcsQdW8jdFJ6L35lfStYKMMgix3emTbSeCp/C2sqfwl1hQw4TiX8YhRBU
FWpppplLQrS80wW4h6Ll8V1bLOGSEG074ZpRp7MjrAnyvnXGDxWPYZNlmHyUFet/
DtaXSb6XXDftFQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:12 2025 by rpki-client