Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
File: BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json)
Hash identifier: za67jpa22FYnhdVLqeHpQR8BWuoOczEm/hssjqR5aUg=
Subject key identifier: 30:20:95:ED:26:65:FD:1C:A8:D3:EF:7D:73:C7:10:96:4F:89:97:4C
Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2
Certificate serial: 019A4DAAFDFBF373B4DF3E425D84E2F4FC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
Manifest number: 0670
Signing time: Tue 04 Nov 2025 07:00:43 +0000
Manifest this update: Tue 04 Nov 2025 07:00:43 +0000
Manifest next update: Wed 05 Nov 2025 07:00:43 +0000
Files and hashes: 1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: jDWZ/SdgUkNBkyrbjBAzm/BsgC5QaGJSTixlbUSYlts=)
2: gWxtw4ZWlclsFDoK9_z8YzvsRBM.roa (hash: Q3hqFT8VcOBOjGEi5qKDmuRuKylU6JzGGHfWbsdZjmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:fd:fb:f3:73:b4:df:3e:42:5d:84:e2:f4:fc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2
Validity
Not Before: Nov 4 07:00:43 2025 GMT
Not After : Nov 5 07:00:43 2025 GMT
Subject: CN=302095ed2665fd1ca8d3ef7d73c710964f89974c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:d6:63:49:74:b3:cd:aa:93:79:e0:59:a0:
fe:8a:21:4f:db:fc:03:1d:00:ea:65:7a:04:32:0d:
01:33:44:d6:27:71:7b:90:e2:20:48:eb:3d:ae:2f:
6e:ab:04:6d:b5:36:61:c9:17:db:c8:3d:0e:cc:dd:
e1:2d:bd:c1:5f:44:5b:9c:42:61:66:3d:c6:c3:c7:
9d:4d:32:74:d3:b9:5b:2e:de:73:a6:d7:b1:f0:8c:
39:ac:c0:7d:f9:03:68:80:d0:21:59:03:63:a8:af:
8c:53:5d:b0:48:3d:f6:12:d0:d9:29:96:01:4f:42:
dd:ce:fd:2c:4e:03:1e:00:00:2e:1a:27:33:6d:1d:
4f:36:b1:73:51:54:f1:03:b4:08:78:46:20:94:00:
fd:6d:96:a5:04:af:44:35:f6:37:22:f5:02:66:70:
ca:83:84:9a:b3:f6:ff:1f:e3:6d:d3:a3:43:70:10:
90:4d:0f:72:cd:02:cd:ff:98:84:08:0b:79:f3:0e:
ce:57:5c:77:0a:20:9b:f2:73:a8:a0:ba:9a:7c:1b:
ec:78:c8:40:3b:95:53:1c:26:b6:b1:a3:af:1a:36:
33:1a:c0:46:c4:df:f2:04:1d:9e:d7:79:75:64:4c:
ec:e6:54:ae:c7:24:35:fe:9c:8e:1f:24:01:5e:ec:
22:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:20:95:ED:26:65:FD:1C:A8:D3:EF:7D:73:C7:10:96:4F:89:97:4C
X509v3 Authority Key Identifier:
keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:17:ef:2e:d9:d2:f4:0c:af:7d:56:e0:b6:f7:35:32:8e:0c:
16:d7:ef:de:89:a7:eb:9d:b6:ce:3b:33:8e:5d:80:36:95:8f:
16:89:6c:21:d4:49:32:bd:69:ca:e5:c8:33:a6:21:53:20:73:
c6:fe:45:d8:c8:e8:d2:7f:75:4a:3a:21:9d:3b:f5:09:5c:34:
84:21:f1:35:68:8b:32:a9:ef:9e:cf:96:a5:6e:67:e1:02:6b:
51:9d:fc:42:95:42:03:70:60:4e:66:71:52:27:63:84:e2:6a:
d5:ff:8a:34:c1:67:44:7e:75:60:6d:95:46:c3:02:19:cd:ae:
a1:83:76:7e:46:2d:af:9d:f4:f8:b7:c6:95:65:96:9f:4d:13:
73:32:18:b9:01:f6:b7:ae:9e:93:da:d6:2b:58:22:26:93:3d:
1c:5b:2e:0c:aa:97:82:1b:92:cf:55:01:dc:41:ce:21:2d:44:
f7:18:a9:16:0e:fe:87:ad:77:26:e8:3d:c9:07:7f:27:c8:fd:
de:2d:80:f5:a5:89:96:3a:5a:16:74:6a:59:b6:aa:20:70:1b:
a1:32:40:d2:e9:49:12:00:06:8a:94:12:0a:dd:f3:4c:3d:d0:
01:bf:7f:a0:25:f8:08:a4:79:94:b1:2e:61:ba:1e:d7:a7:af:
58:b8:f7:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqv3783O03z5CXYTi9PwfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MTVkNWM5NWNkN2I1OGQyOTdkNDc5MjY3Yzc2MmNkZTkx
MDYzZTIwHhcNMjUxMTA0MDcwMDQzWhcNMjUxMTA1MDcwMDQzWjAzMTEwLwYDVQQD
EygzMDIwOTVlZDI2NjVmZDFjYThkM2VmN2Q3M2M3MTA5NjRmODk5NzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbLWY0l0s82qk3ngWaD+iiFP2/wD
HQDqZXoEMg0BM0TWJ3F7kOIgSOs9ri9uqwRttTZhyRfbyD0OzN3hLb3BX0RbnEJh
Zj3Gw8edTTJ007lbLt5zptex8Iw5rMB9+QNogNAhWQNjqK+MU12wSD32EtDZKZYB
T0Ldzv0sTgMeAAAuGiczbR1PNrFzUVTxA7QIeEYglAD9bZalBK9ENfY3IvUCZnDK
g4Sas/b/H+Nt06NDcBCQTQ9yzQLN/5iECAt58w7OV1x3CiCb8nOooLqafBvseMhA
O5VTHCa2saOvGjYzGsBGxN/yBB2e13l1ZEzs5lSuxyQ1/pyOHyQBXuwiawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAgle0mZf0cqNPvfXPHEJZPiZdMMB8GA1UdIwQY
MBaAFAQV1clc17WNKX1HkmfHYs3pEGPiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hNWM1ZTEtYmRhNy00ZThhLWIxYjEt
NTc5YzkwYzBkZTJhLzEvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hNWM1ZTEtYmRhNy00ZThhLWIxYjEtNTc5YzkwYzBkZTJh
LzEvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRfvLtnS
9AyvfVbgtvc1Mo4MFtfv3omn6522zjszjl2ANpWPFolsIdRJMr1pyuXIM6YhUyBz
xv5F2Mjo0n91SjohnTv1CVw0hCHxNWiLMqnvns+WpW5n4QJrUZ38QpVCA3BgTmZx
UidjhOJq1f+KNMFnRH51YG2VRsMCGc2uoYN2fkYtr530+LfGlWWWn00TczIYuQH2
t66ek9rWK1giJpM9HFsuDKqXghuSz1UB3EHOIS1E9xipFg7+h613Jug9yQd/J8j9
3i2A9aWJljpaFnRqWbaqIHAboTJA0ulJEgAGipQSCt3zTD3QAb9/oCX4CKR5lLEu
Yboe16evWLj3FA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:02 2025 by rpki-client