Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
File: BhYY9tMA3yz1ni35f_6flWoj5jw.mft (raw, json)
Hash identifier: 5RukjnvWJzHdK0DrQwUtCxx2EBEugq1OLfQrbBvSwYU=
Subject key identifier: F9:B4:EC:A5:67:1C:F0:2C:9B:20:EE:9B:BB:F5:CE:70:46:48:E1:58
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial: 019A4D744C17B128F7EFC6A79B4B2665D08C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 06:00:58 +0000
Manifest this update: Tue 04 Nov 2025 06:00:58 +0000
Manifest next update: Wed 05 Nov 2025 06:00:58 +0000
Files and hashes: 1: BhYY9tMA3yz1ni35f_6flWoj5jw.crl (hash: XEnjGZ7cmckXeZpQSUWCfqJdwg6CZSmvGG0Mfpqnz4M=)
2: PpLMyuWEi7GW-Zo7FScOzQEDqmw.roa (hash: tpDYLlf85669UfO2WjK12JWkdre1n2ZIYLt0uyeHU34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:4c:17:b1:28:f7:ef:c6:a7:9b:4b:26:65:d0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Validity
Not Before: Nov 4 06:00:58 2025 GMT
Not After : Nov 5 06:00:58 2025 GMT
Subject: CN=f9b4eca5671cf02c9b20ee9bbbf5ce704648e158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:a4:5f:ab:62:69:03:f7:f5:34:31:90:49:
db:72:0e:6d:34:5c:02:37:93:89:49:a0:5a:c3:b3:
be:29:bd:d9:63:c9:3a:f8:af:fd:39:73:c5:5e:29:
29:ab:c6:d3:49:2e:8e:57:31:be:57:d7:a5:09:50:
fb:c7:3a:7c:42:28:1a:82:bd:6c:1e:c5:70:4d:04:
2b:f9:13:ba:c4:d9:bb:4b:4f:46:03:63:04:b3:4e:
3e:93:8c:3f:67:25:3a:12:a5:70:b9:fb:36:8e:19:
9a:7c:7e:e6:de:76:be:81:7f:e2:dd:b4:be:4f:fd:
a3:dc:81:71:38:0f:a1:eb:ff:dc:97:03:13:22:d6:
68:81:75:98:c1:fd:85:86:fc:c4:a2:97:bb:44:e4:
af:83:15:34:fb:da:85:4a:a0:8b:4b:6a:7a:f3:81:
b0:fe:cc:28:29:95:bc:ba:ea:73:e7:1c:54:83:fc:
b8:2a:dc:92:56:26:d2:7a:2b:70:c6:e8:53:97:8f:
26:a7:15:2c:36:bc:c1:0e:0e:c4:4a:08:68:64:a2:
e8:b1:90:04:a5:8a:17:f8:d4:02:ad:88:a2:5d:e0:
7e:12:35:b7:90:91:e7:d1:04:d3:56:a5:0e:3c:ad:
15:31:ae:2e:d6:74:bf:53:fa:c7:76:0f:1a:75:0d:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B4:EC:A5:67:1C:F0:2C:9B:20:EE:9B:BB:F5:CE:70:46:48:E1:58
X509v3 Authority Key Identifier:
keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5b:a0:b0:33:14:c3:64:5d:e3:7c:1d:15:9a:01:87:65:91:
32:96:1f:0b:25:ba:17:40:52:5d:e6:75:93:b6:42:c1:54:5e:
0a:03:d4:cd:ca:18:1d:d2:fc:59:f1:38:6b:76:58:1a:b2:8f:
ea:4e:ca:76:e8:ae:45:5d:05:f1:b2:9c:27:5a:ef:81:c1:77:
f8:4d:37:eb:6e:3a:5d:8e:93:92:df:17:51:92:28:0b:03:1d:
ba:d7:3e:ba:13:09:5e:a6:c8:35:87:54:35:0a:a9:e2:6e:48:
06:e3:ee:8c:b5:08:1c:b1:d9:b1:be:9f:34:c6:ba:0a:d7:94:
87:ef:a3:50:20:e4:3d:b6:a8:8a:4e:42:a5:d1:b6:f8:23:b0:
6f:9b:72:1f:a4:de:80:b6:76:79:90:a5:9b:bb:13:fc:18:77:
5f:df:7d:c5:a3:25:5a:c1:68:06:62:51:86:24:3f:3f:72:b7:
15:ba:0b:ec:08:c8:7d:6c:d0:22:9a:6a:50:fd:40:63:00:3e:
d0:66:c1:96:b7:a8:74:34:d8:b6:86:30:1f:bc:09:00:69:95:
6e:52:57:79:82:52:c3:f4:c3:3d:64:24:9a:05:b9:56:52:0e:
b6:70:4c:99:02:29:b2:be:3b:8e:53:e2:05:7c:92:db:db:b8:
99:b3:88:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdEwXsSj378anm0smZdCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MTYxOGY2ZDMwMGRmMmNmNTllMmRmOTdmZmU5Zjk1NmEy
M2U2M2MwHhcNMjUxMTA0MDYwMDU4WhcNMjUxMTA1MDYwMDU4WjAzMTEwLwYDVQQD
EyhmOWI0ZWNhNTY3MWNmMDJjOWIyMGVlOWJiYmY1Y2U3MDQ2NDhlMTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMmkX6tiaQP39TQxkEnbcg5tNFwC
N5OJSaBaw7O+Kb3ZY8k6+K/9OXPFXikpq8bTSS6OVzG+V9elCVD7xzp8Qigagr1s
HsVwTQQr+RO6xNm7S09GA2MEs04+k4w/ZyU6EqVwufs2jhmafH7m3na+gX/i3bS+
T/2j3IFxOA+h6//clwMTItZogXWYwf2FhvzEope7ROSvgxU0+9qFSqCLS2p684Gw
/swoKZW8uupz5xxUg/y4KtySVibSeitwxuhTl48mpxUsNrzBDg7ESghoZKLosZAE
pYoX+NQCrYiiXeB+EjW3kJHn0QTTVqUOPK0VMa4u1nS/U/rHdg8adQ0f6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPm07KVnHPAsmyDum7v1znBGSOFYMB8GA1UdIwQY
MBaAFAYWGPbTAN8s9Z4t+X/+n5VqI+Y8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmhZWTl0TUEzeXoxbmkzNWZfNmZsV29qNWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iODU3NWEtOGI2My00NTMyLTgxZWQt
ZWZlNWJmYzc5OTk0LzEvQmhZWTl0TUEzeXoxbmkzNWZfNmZsV29qNWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9iODU3NWEtOGI2My00NTMyLTgxZWQtZWZlNWJmYzc5OTk0
LzEvQmhZWTl0TUEzeXoxbmkzNWZfNmZsV29qNWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVugsDMU
w2Rd43wdFZoBh2WRMpYfCyW6F0BSXeZ1k7ZCwVReCgPUzcoYHdL8WfE4a3ZYGrKP
6k7KduiuRV0F8bKcJ1rvgcF3+E036246XY6Tkt8XUZIoCwMdutc+uhMJXqbINYdU
NQqp4m5IBuPujLUIHLHZsb6fNMa6CteUh++jUCDkPbaoik5CpdG2+COwb5tyH6Te
gLZ2eZClm7sT/Bh3X999xaMlWsFoBmJRhiQ/P3K3FboL7AjIfWzQIppqUP1AYwA+
0GbBlreodDTYtoYwH7wJAGmVblJXeYJSw/TDPWQkmgW5VlIOtnBMmQIpsr47jlPi
BXyS29u4mbOICQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:31 2025 by rpki-client