Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
File: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft (raw, json)
Hash identifier: ZyTT6L/4w6NmYhiic94KNUj3FbTaOBTYQrIaDyFjA7M=
Subject key identifier: 2F:26:24:F6:69:E0:C3:9D:F5:55:E0:88:4C:F5:38:6E:3A:DF:9F:4A
Authority key identifier: 6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
Certificate issuer: /CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Certificate serial: 019A54F662890816BBAF1429A7CF1C865A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
Manifest number: 02B6
Signing time: Wed 05 Nov 2025 17:00:24 +0000
Manifest this update: Wed 05 Nov 2025 17:00:24 +0000
Manifest next update: Thu 06 Nov 2025 17:00:24 +0000
Files and hashes: 1: 8UG5Qh7t6gkyV0rD8nZ1oL2Ckuo.roa (hash: br/1geYk5+cZ7ZJEexlmKCcjPCyNtKTSm1+1iwPC7Z0=)
2: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl (hash: /WDsiSK+WxuMM0Q+3gBuFfBoxaCLsoMelfEZT2J3Hq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:62:89:08:16:bb:af:14:29:a7:cf:1c:86:5a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Validity
Not Before: Nov 5 17:00:24 2025 GMT
Not After : Nov 6 17:00:24 2025 GMT
Subject: CN=2f2624f669e0c39df555e0884cf5386e3adf9f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:c5:a6:7d:06:49:f9:ea:34:bc:52:b2:cd:
c7:e8:85:92:2f:bb:94:a0:c6:b4:c9:ab:83:b4:30:
c6:95:53:8d:63:17:2f:bf:c8:d8:b3:59:6f:10:a9:
63:1f:a2:2a:ce:4f:56:aa:93:5f:a7:cc:de:6f:99:
93:25:62:17:33:4e:ee:80:e1:a3:c5:b0:71:3c:7b:
8d:f9:e0:88:51:88:3a:89:90:90:06:86:cd:e0:a2:
ba:3c:2b:65:bf:81:ae:e1:67:c5:b7:fe:89:f9:16:
ef:2a:84:e7:09:ae:49:8f:22:dd:3b:b1:55:ea:3e:
21:ba:c7:6d:8b:2a:09:6e:c3:77:53:82:95:e9:ca:
37:2a:94:81:5d:d9:6e:3f:76:1b:66:7e:41:39:2a:
5d:94:6b:fe:91:22:59:23:6b:7b:0c:5b:64:b8:27:
d1:67:5b:4b:9e:4c:bf:6d:47:2e:c0:86:35:b2:67:
ba:c5:6d:92:4c:3c:fe:b3:e6:eb:f6:40:cc:79:54:
ba:11:d6:f4:ff:60:48:3c:3c:9e:dc:7a:77:f2:ad:
22:79:5b:eb:37:8d:fe:59:98:11:5d:4a:eb:f3:67:
16:6a:18:c7:be:86:ae:f9:7f:a7:02:7e:fa:60:14:
ea:1f:41:d5:af:9e:35:86:f9:db:e4:c6:08:46:c6:
d1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:26:24:F6:69:E0:C3:9D:F5:55:E0:88:4C:F5:38:6E:3A:DF:9F:4A
X509v3 Authority Key Identifier:
keyid:6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6c:2d:a2:3e:b1:79:3d:b7:ad:ba:d7:a0:9c:04:54:31:b3:
78:00:2f:c8:3c:a3:eb:f9:0c:ec:52:fb:3d:69:31:5a:2d:09:
8e:ef:8a:6f:0c:1c:c6:76:a4:b1:43:45:86:60:12:d7:52:26:
3d:aa:8d:56:74:f1:63:ea:4e:3f:f8:9e:dd:99:76:36:71:4f:
7f:6d:bf:ed:15:f8:65:0d:8e:19:6d:02:1b:f9:a5:8b:b0:7a:
d9:a0:de:78:ec:dc:b1:69:d9:37:4d:d5:bb:ed:03:99:8b:b5:
1d:82:90:f2:ea:65:18:0c:1a:5f:5b:06:25:8f:9a:03:72:14:
0f:26:b4:0e:63:87:ea:59:07:f8:a5:bd:ec:6d:b2:5b:5b:49:
3c:03:91:71:ff:0a:a6:e8:94:76:1d:6c:a4:dc:b1:8a:cc:f5:
90:80:b8:b2:54:b8:a1:9a:3a:71:03:44:dc:e7:28:50:26:87:
3c:2b:5b:00:47:97:53:75:ed:45:7f:ca:5d:26:da:44:0c:09:
4e:9a:46:ac:72:56:8b:fe:33:5a:6c:21:ed:1b:a7:88:89:54:
03:f6:f8:ad:f0:e4:13:71:ab:9a:48:a3:a0:40:64:43:47:ef:
9b:2e:c7:c5:9e:c3:2a:03:23:52:71:9b:fc:80:c5:5d:41:71:
3c:87:df:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpU9mKJCBa7rxQpp88chloWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMWQ4ZGQzMWFlOWUwM2FmNGQyNmU5ZGE2ZTJkZDg2YTAz
MDM5YTQwHhcNMjUxMTA1MTcwMDI0WhcNMjUxMTA2MTcwMDI0WjAzMTEwLwYDVQQD
EygyZjI2MjRmNjY5ZTBjMzlkZjU1NWUwODg0Y2Y1Mzg2ZTNhZGY5ZjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlfFpn0GSfnqNLxSss3H6IWSL7uU
oMa0yauDtDDGlVONYxcvv8jYs1lvEKljH6Iqzk9WqpNfp8zeb5mTJWIXM07ugOGj
xbBxPHuN+eCIUYg6iZCQBobN4KK6PCtlv4Gu4WfFt/6J+RbvKoTnCa5JjyLdO7FV
6j4husdtiyoJbsN3U4KV6co3KpSBXdluP3YbZn5BOSpdlGv+kSJZI2t7DFtkuCfR
Z1tLnky/bUcuwIY1sme6xW2STDz+s+br9kDMeVS6Edb0/2BIPDye3Hp38q0ieVvr
N43+WZgRXUrr82cWahjHvoau+X+nAn76YBTqH0HVr541hvnb5MYIRsbRKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8mJPZp4MOd9VXgiEz1OG46359KMB8GA1UdIwQY
MBaAFG4djdMa6eA69NJunabi3YagMDmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hMjY5YWEtYzliZi00MmMxLWFkZTMt
ZWQ4NWNlMDk0YTg3LzEvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9hMjY5YWEtYzliZi00MmMxLWFkZTMtZWQ4NWNlMDk0YTg3
LzEvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWwtoj6x
eT23rbrXoJwEVDGzeAAvyDyj6/kM7FL7PWkxWi0Jju+KbwwcxnaksUNFhmAS11Im
PaqNVnTxY+pOP/ie3Zl2NnFPf22/7RX4ZQ2OGW0CG/mli7B62aDeeOzcsWnZN03V
u+0DmYu1HYKQ8uplGAwaX1sGJY+aA3IUDya0DmOH6lkH+KW97G2yW1tJPAORcf8K
puiUdh1spNyxisz1kIC4slS4oZo6cQNE3OcoUCaHPCtbAEeXU3XtRX/KXSbaRAwJ
TppGrHJWi/4zWmwh7RuniIlUA/b4rfDkE3GrmkijoEBkQ0fvmy7HxZ7DKgMjUnGb
/IDFXUFxPIff/Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:23 2025 by rpki-client