Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
File: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft (raw, json)
Hash identifier: S0qHb0f2Ytg7QIUxavM7li7ubXg+5g376IEu0mx/xoA=
Subject key identifier: 2E:E3:93:FE:6D:EA:7B:72:41:08:F5:D5:03:01:E0:96:B3:61:32:B3
Authority key identifier: 6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
Certificate issuer: /CN=6d005198b74572a156ab63f23085897bd3ccd41b
Certificate serial: 019A4C60F651B62C1A2170644B69F00F9612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
Manifest number: 0330
Signing time: Tue 04 Nov 2025 01:00:14 +0000
Manifest this update: Tue 04 Nov 2025 01:00:14 +0000
Manifest next update: Wed 05 Nov 2025 01:00:14 +0000
Files and hashes: 1: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl (hash: otkrEG0wgKI2XjoQqlvUE4aWWUkyfhs/+6GiuGSEJJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:60:f6:51:b6:2c:1a:21:70:64:4b:69:f0:0f:96:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d005198b74572a156ab63f23085897bd3ccd41b
Validity
Not Before: Nov 4 01:00:14 2025 GMT
Not After : Nov 5 01:00:14 2025 GMT
Subject: CN=2ee393fe6dea7b724108f5d50301e096b36132b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:35:b9:85:a2:e8:ce:28:09:cb:14:3f:6a:
87:e5:46:7e:a8:f9:7b:ce:7c:6e:16:7e:0d:25:aa:
24:49:66:f2:91:2c:98:b3:46:be:d2:04:0e:8a:29:
c4:66:99:3d:72:ec:ec:a9:6b:b8:80:b2:fd:97:b2:
c4:a2:b3:3e:d0:3c:70:bd:28:df:6c:92:c5:d7:ef:
45:6c:aa:14:b9:87:c7:48:7c:1d:ea:7b:4c:71:59:
12:a4:6c:6f:55:0a:59:44:19:53:40:18:65:25:85:
bf:da:e9:0e:97:3f:84:37:2a:af:98:67:8d:ae:a6:
b5:d2:0c:06:d9:e8:28:94:f1:04:a5:66:49:5e:6c:
43:5e:ed:ec:b7:1e:3d:f4:cc:15:4d:95:a9:74:1d:
c3:25:5d:1c:6e:25:b3:51:8a:fc:a5:b6:e5:d7:06:
ed:cc:0e:a7:96:0b:23:fc:d4:aa:13:c9:fa:67:41:
13:cb:af:86:3a:66:f8:0a:1f:f5:f4:57:c7:92:b8:
db:20:50:ee:bf:f9:3f:a9:c2:45:bf:a6:7f:62:06:
25:5b:06:54:1a:da:82:cb:4d:13:3d:59:97:4e:34:
d3:67:af:d2:d5:e8:af:10:00:4f:b3:88:11:65:d2:
35:9d:7f:bc:a8:f5:4f:b1:17:2a:28:38:43:2e:26:
04:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E3:93:FE:6D:EA:7B:72:41:08:F5:D5:03:01:E0:96:B3:61:32:B3
X509v3 Authority Key Identifier:
keyid:6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5a:8d:c8:57:69:78:e4:c0:0a:04:bf:8f:c1:56:26:4a:7d:
41:ac:cc:51:85:b2:b5:ea:2c:f3:aa:c7:3f:6b:b0:70:df:6b:
ca:e0:09:8f:3a:7b:a7:8e:3e:f0:be:13:a8:52:43:6b:8a:a7:
72:3d:68:3a:35:a1:2c:f6:51:9a:7f:60:ce:91:27:4e:8e:bf:
c4:55:bc:c5:68:07:a3:1c:44:16:5d:c8:9f:b1:c7:a9:77:51:
a2:29:7e:d5:1e:68:42:d1:03:99:aa:81:6f:c3:4a:18:7c:2b:
21:10:cf:db:03:ae:f5:0a:65:b4:f2:1a:84:97:5a:19:a1:e9:
6f:a0:3a:55:a7:52:30:45:5d:47:75:f4:7d:4d:2f:01:6d:54:
f3:1d:4d:7d:be:64:02:4e:1d:38:5c:52:c9:c7:0e:2e:d4:93:
93:1c:3a:57:24:ca:2d:b3:50:e2:95:21:f9:9d:5d:ac:51:6c:
92:44:36:4c:de:53:45:f2:ce:56:ee:76:8f:fd:a9:22:60:ff:
3b:9e:03:ac:82:64:e7:09:3a:71:46:b1:dd:6b:3c:ec:77:27:
ec:33:bf:02:a2:cb:f7:62:99:c9:3b:9d:f9:e4:43:5d:1c:d8:
5d:5d:60:51:b8:3d:8f:17:20:1d:4e:38:4c:2b:15:f6:e6:08:
05:52:44:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMYPZRtiwaIXBkS2nwD5YSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDA1MTk4Yjc0NTcyYTE1NmFiNjNmMjMwODU4OTdiZDNj
Y2Q0MWIwHhcNMjUxMTA0MDEwMDE0WhcNMjUxMTA1MDEwMDE0WjAzMTEwLwYDVQQD
EygyZWUzOTNmZTZkZWE3YjcyNDEwOGY1ZDUwMzAxZTA5NmIzNjEzMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRM1uYWi6M4oCcsUP2qH5UZ+qPl7
znxuFn4NJaokSWbykSyYs0a+0gQOiinEZpk9cuzsqWu4gLL9l7LEorM+0DxwvSjf
bJLF1+9FbKoUuYfHSHwd6ntMcVkSpGxvVQpZRBlTQBhlJYW/2ukOlz+ENyqvmGeN
rqa10gwG2egolPEEpWZJXmxDXu3stx499MwVTZWpdB3DJV0cbiWzUYr8pbbl1wbt
zA6nlgsj/NSqE8n6Z0ETy6+GOmb4Ch/19FfHkrjbIFDuv/k/qcJFv6Z/YgYlWwZU
GtqCy00TPVmXTjTTZ6/S1eivEABPs4gRZdI1nX+8qPVPsRcqKDhDLiYEEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7jk/5t6ntyQQj11QMB4JazYTKzMB8GA1UdIwQY
MBaAFG0AUZi3RXKhVqtj8jCFiXvTzNQbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85NzVmM2MtYWY0YS00MzdiLTg5YjEt
Mjg0ZTUxMjNlMjlmLzEvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC85NzVmM2MtYWY0YS00MzdiLTg5YjEtMjg0ZTUxMjNlMjlm
LzEvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFqNyFdp
eOTACgS/j8FWJkp9QazMUYWyteos86rHP2uwcN9ryuAJjzp7p44+8L4TqFJDa4qn
cj1oOjWhLPZRmn9gzpEnTo6/xFW8xWgHoxxEFl3In7HHqXdRoil+1R5oQtEDmaqB
b8NKGHwrIRDP2wOu9QpltPIahJdaGaHpb6A6VadSMEVdR3X0fU0vAW1U8x1Nfb5k
Ak4dOFxSyccOLtSTkxw6VyTKLbNQ4pUh+Z1drFFskkQ2TN5TRfLOVu52j/2pImD/
O54DrIJk5wk6cUax3Ws87Hcn7DO/AqLL92KZyTud+eRDXRzYXV1gUbg9jxcgHU44
TCsV9uYIBVJEwQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:10 2025 by rpki-client