Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier: BHt9P/FiFhTL1IrqIx+f+cRTx0OeMDnsi/9TKDsBGDM=
Subject key identifier: 17:35:A2:9C:53:6F:67:CF:0D:15:A3:D5:8C:90:8F:EF:7F:D7:C8:9F
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 019A5119B62D62A9B4C84CAC7B4AD83F70D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number: 09CB
Signing time: Tue 04 Nov 2025 23:00:30 +0000
Manifest this update: Tue 04 Nov 2025 23:00:30 +0000
Manifest next update: Wed 05 Nov 2025 23:00:30 +0000
Files and hashes: 1: 3kGa7kLBm042LbbqykHtZB7ufPc.roa (hash: w1pGOLasw4Pb62ELUrEIQqwR4u8hfryDi61TGvccVyw=)
2: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: MlmRzUtkQSkRF1BXx3JfYyxMekJa6hVdwAJtnlsg+k8=)
3: F6fQGiNxub0Asxw2Ftlalm35-sI.roa (hash: wYkSnnpKM5pfTpyfgZw3XQ3Jd7ZS+gOnc16p21qV1JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:b6:2d:62:a9:b4:c8:4c:ac:7b:4a:d8:3f:70:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Nov 4 23:00:30 2025 GMT
Not After : Nov 5 23:00:30 2025 GMT
Subject: CN=1735a29c536f67cf0d15a3d58c908fef7fd7c89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:aa:02:90:4c:d9:ef:62:2f:2b:3c:39:0a:
2d:8d:83:21:bc:b2:89:36:21:18:8c:33:2d:4c:0d:
15:da:c4:09:27:f3:d0:ec:e0:06:8f:5e:ba:44:4d:
96:12:9d:a2:bf:43:93:21:e2:28:a9:18:c1:69:7a:
63:d3:2a:ae:f5:cb:63:b5:62:f2:9d:d9:83:1e:95:
42:79:0c:d0:b6:10:aa:99:89:c4:c5:54:18:24:a9:
48:d3:25:b9:8f:20:92:7c:0a:ba:c7:ec:57:24:ad:
1f:8d:4e:4c:a6:75:de:d7:6f:f2:57:39:70:bc:b4:
c5:6a:86:ab:4e:22:1b:d1:18:f0:ac:c0:32:33:f9:
e5:a2:11:db:60:cb:dc:34:6d:09:a3:64:6f:d2:5b:
7b:d7:a4:26:6a:04:ea:5a:b8:e6:39:4f:e2:06:46:
be:31:4b:21:58:cd:b3:9c:17:ea:24:9a:4b:b0:b1:
22:c0:c3:92:97:b9:6f:e4:c4:6f:7d:f2:b9:e8:bd:
73:2a:c1:cc:b1:91:a5:87:8a:71:1c:a2:09:f5:46:
bd:2b:6f:17:d9:56:83:07:84:ca:a3:f7:5d:90:b5:
b5:eb:5e:ce:5a:9d:e7:29:2d:b0:32:e8:9f:4a:f8:
11:31:51:52:e4:b0:51:32:21:89:41:f4:9a:8f:fa:
41:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:35:A2:9C:53:6F:67:CF:0D:15:A3:D5:8C:90:8F:EF:7F:D7:C8:9F
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:80:a0:34:af:51:cf:6f:2b:83:9f:09:dc:48:b6:9e:c8:e4:
17:99:10:d8:44:df:71:c2:aa:bb:a9:9f:5a:0a:08:e9:a0:ce:
6d:30:bd:06:19:d3:26:86:04:e5:fe:00:62:07:b6:57:cc:63:
c8:44:12:7a:86:7f:7e:f2:99:86:33:6c:2a:50:77:8c:db:87:
ec:64:51:8d:88:f1:26:88:95:ec:8d:ee:eb:bc:ca:12:40:2b:
6a:02:6e:60:83:74:9d:75:78:4e:3c:19:78:74:f9:fb:0c:27:
78:87:79:d2:4d:50:2e:4f:79:ec:89:b0:44:0e:3c:ad:c8:2d:
55:3e:12:4f:7f:37:4a:f2:4a:f2:da:e8:d3:0d:c7:bd:57:d8:
48:c3:ff:77:c4:c2:bc:8b:83:cf:96:66:e6:a6:3e:38:5c:9d:
c6:98:18:80:bc:13:58:61:53:88:67:27:24:65:f8:b4:f6:d5:
df:53:e3:2a:ba:b7:93:aa:99:14:76:16:37:d1:9b:45:7c:3a:
9b:57:35:23:bc:40:19:ff:ac:12:6d:40:88:a2:8e:f4:35:fc:
b3:5a:6f:40:5e:3c:7b:b0:1a:42:a8:8f:a7:52:72:c7:1b:f5:
d4:34:5d:b7:15:2e:95:01:f2:a9:a7:13:88:5d:b2:25:17:e7:
9e:31:82:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGbYtYqm0yEyse0rYP3DZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NjFmMjBmYjhhN2U2MzVkN2JjYzk0YzAwYmVkNzE3OWI3
NjA4ZjYwHhcNMjUxMTA0MjMwMDMwWhcNMjUxMTA1MjMwMDMwWjAzMTEwLwYDVQQD
EygxNzM1YTI5YzUzNmY2N2NmMGQxNWEzZDU4YzkwOGZlZjdmZDdjODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfeqApBM2e9iLys8OQotjYMhvLKJ
NiEYjDMtTA0V2sQJJ/PQ7OAGj166RE2WEp2iv0OTIeIoqRjBaXpj0yqu9ctjtWLy
ndmDHpVCeQzQthCqmYnExVQYJKlI0yW5jyCSfAq6x+xXJK0fjU5MpnXe12/yVzlw
vLTFaoarTiIb0RjwrMAyM/nlohHbYMvcNG0Jo2Rv0lt716QmagTqWrjmOU/iBka+
MUshWM2znBfqJJpLsLEiwMOSl7lv5MRvffK56L1zKsHMsZGlh4pxHKIJ9Ua9K28X
2VaDB4TKo/ddkLW1617OWp3nKS2wMuifSvgRMVFS5LBRMiGJQfSaj/pBFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBc1opxTb2fPDRWj1YyQj+9/18ifMB8GA1UdIwQY
MBaAFAZh8g+4p+Y117zJTAC+1xebdgj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMt
YWQ4ZWRmZTVmMGY3LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMtYWQ4ZWRmZTVmMGY3
LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4CgNK9R
z28rg58J3Ei2nsjkF5kQ2ETfccKqu6mfWgoI6aDObTC9BhnTJoYE5f4AYge2V8xj
yEQSeoZ/fvKZhjNsKlB3jNuH7GRRjYjxJoiV7I3u67zKEkAragJuYIN0nXV4TjwZ
eHT5+wwneId50k1QLk957ImwRA48rcgtVT4ST383SvJK8tro0w3HvVfYSMP/d8TC
vIuDz5Zm5qY+OFydxpgYgLwTWGFTiGcnJGX4tPbV31PjKrq3k6qZFHYWN9GbRXw6
m1c1I7xAGf+sEm1AiKKO9DX8s1pvQF48e7AaQqiPp1Jyxxv11DRdtxUulQHyqacT
iF2yJRfnnjGCPQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:10 2025 by rpki-client