Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
File: bBzlMVpD1WYc3NzBudfarPppkPc.mft (raw, json)
Hash identifier: Ul3H4e3j8++vgxzgkkEXcriIHvPh0zbwGcRGQ96gT8M=
Subject key identifier: 83:D7:42:F7:23:3B:FE:88:AF:CB:7E:D4:A2:E2:35:A0:5B:2F:5D:75
Authority key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
Certificate issuer: /CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Certificate serial: 019A4E8696EC1FEC408994AF5D84FDE12C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:34 +0000
Manifest this update: Tue 04 Nov 2025 11:00:34 +0000
Manifest next update: Wed 05 Nov 2025 11:00:34 +0000
Files and hashes: 1: JhjtDeKwWD1t7W9hpKjAKZnoMY8.roa (hash: Ff16XMN/6UD92K3+Zia2rMAz2XhJeIEHmUVTQSXayaU=)
2: bBzlMVpD1WYc3NzBudfarPppkPc.crl (hash: ZX+r6bR/Sgsz+ekfUTUjuavJXzknMsdXNVJ9Q+HZy3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:96:ec:1f:ec:40:89:94:af:5d:84:fd:e1:2c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Validity
Not Before: Nov 4 11:00:34 2025 GMT
Not After : Nov 5 11:00:34 2025 GMT
Subject: CN=83d742f7233bfe88afcb7ed4a2e235a05b2f5d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:ce:c8:ec:83:5d:b6:e0:6d:a4:a2:c0:ad:
31:ab:0f:8d:4c:3b:ec:8d:de:02:54:96:49:ce:af:
fc:43:17:81:fc:8f:5a:82:5c:bc:0c:3c:d3:b6:f4:
e4:2e:f4:74:e4:72:cb:4b:68:21:0e:82:1d:f9:e9:
28:21:17:8c:cd:62:8a:67:7a:0a:60:16:fe:1f:bc:
80:e3:57:97:66:7c:98:7a:46:1b:48:8e:cc:12:19:
53:28:bc:63:d9:90:37:a5:a3:f9:a6:62:e5:70:81:
fa:15:bb:e3:9e:89:df:b9:b9:a6:f9:85:17:8b:7e:
52:93:45:d2:5a:e3:9e:af:dd:89:09:1a:0f:36:96:
f9:a8:fa:45:2a:19:82:54:b3:02:94:c7:56:ce:b6:
43:ba:90:87:64:e9:39:d8:e2:86:e1:42:b0:01:cb:
20:1d:72:22:a0:67:74:aa:33:3f:01:76:f5:41:74:
03:fe:02:ff:2a:32:ae:80:12:89:b8:4a:52:0f:98:
39:75:ea:59:1e:b5:d1:6d:67:cc:d7:36:99:89:d2:
eb:e3:25:d6:65:53:a9:c4:03:c5:d7:99:c8:83:16:
da:d1:ca:bb:bd:98:ad:ca:40:36:bf:87:78:8a:70:
e5:e6:eb:96:84:dc:78:7d:23:f8:8c:a3:46:d1:51:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D7:42:F7:23:3B:FE:88:AF:CB:7E:D4:A2:E2:35:A0:5B:2F:5D:75
X509v3 Authority Key Identifier:
keyid:6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ba:3c:36:cf:90:e0:0e:ea:bc:5e:d5:f8:ac:9e:76:2f:b3:
ec:75:c1:c4:e6:0a:d4:e8:31:f8:fd:91:15:a6:43:92:9e:94:
06:0e:24:60:e5:84:47:e1:ae:9f:ca:11:3b:58:c3:dd:b9:0b:
1e:98:f7:f4:05:ed:b4:3f:45:e1:f0:63:85:5b:65:18:66:4f:
06:85:94:ce:f8:a1:d9:d0:88:de:6b:8f:8b:ec:b3:2e:06:e7:
03:11:aa:88:34:60:3c:2b:e9:b4:0f:3c:b5:5a:0b:47:51:5b:
1e:05:d2:a2:c6:da:ca:de:a7:ba:bd:c2:be:9c:15:7d:9d:6e:
f6:ef:a7:8e:84:8f:f7:5c:97:97:88:8c:05:f0:1c:b8:bc:8e:
f2:6e:95:01:60:7e:0e:11:5a:14:2b:00:ca:2c:8c:15:24:02:
bc:0a:a1:1e:dd:e1:ff:e9:14:bf:11:26:13:5f:8e:a3:55:80:
44:64:3d:c0:5d:28:2d:0d:4e:de:10:61:07:c1:38:6b:e9:8f:
a4:fb:95:aa:af:de:67:5d:9c:13:20:5f:e1:a7:6e:64:c7:a8:
9c:65:43:43:0e:cf:df:2d:d7:a1:35:ef:e6:04:f4:d1:2b:2f:
37:51:b2:3b:55:99:6d:cf:a3:05:96:19:74:2f:8c:27:8f:d4:
d5:10:3f:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhpbsH+xAiZSvXYT94SxLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMWNlNTMxNWE0M2Q1NjYxY2RjZGNjMWI5ZDdkYWFjZmE2
OTkwZjcwHhcNMjUxMTA0MTEwMDM0WhcNMjUxMTA1MTEwMDM0WjAzMTEwLwYDVQQD
Eyg4M2Q3NDJmNzIzM2JmZTg4YWZjYjdlZDRhMmUyMzVhMDViMmY1ZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSjOyOyDXbbgbaSiwK0xqw+NTDvs
jd4CVJZJzq/8QxeB/I9agly8DDzTtvTkLvR05HLLS2ghDoId+ekoIReMzWKKZ3oK
YBb+H7yA41eXZnyYekYbSI7MEhlTKLxj2ZA3paP5pmLlcIH6Fbvjnonfubmm+YUX
i35Sk0XSWuOer92JCRoPNpb5qPpFKhmCVLMClMdWzrZDupCHZOk52OKG4UKwAcsg
HXIioGd0qjM/AXb1QXQD/gL/KjKugBKJuEpSD5g5depZHrXRbWfM1zaZidLr4yXW
ZVOpxAPF15nIgxba0cq7vZitykA2v4d4inDl5uuWhNx4fSP4jKNG0VFHNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPXQvcjO/6Ir8t+1KLiNaBbL111MB8GA1UdIwQY
MBaAFGwc5TFaQ9VmHNzcwbnX2qz6aZD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iYjUyMGMtY2QwZC00OGQ4LTk2YTgt
MGZiZTdiZDc2ZmZiLzEvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9iYjUyMGMtY2QwZC00OGQ4LTk2YTgtMGZiZTdiZDc2ZmZi
LzEvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXro8Ns+Q
4A7qvF7V+Kyedi+z7HXBxOYK1Ogx+P2RFaZDkp6UBg4kYOWER+Gun8oRO1jD3bkL
Hpj39AXttD9F4fBjhVtlGGZPBoWUzvih2dCI3muPi+yzLgbnAxGqiDRgPCvptA88
tVoLR1FbHgXSosbayt6nur3CvpwVfZ1u9u+njoSP91yXl4iMBfAcuLyO8m6VAWB+
DhFaFCsAyiyMFSQCvAqhHt3h/+kUvxEmE1+Oo1WARGQ9wF0oLQ1O3hBhB8E4a+mP
pPuVqq/eZ12cEyBf4aduZMeonGVDQw7P3y3XoTXv5gT00SsvN1GyO1WZbc+jBZYZ
dC+MJ4/U1RA/HA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:23 2025 by rpki-client