Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: ikfoabmLFpXDnJfoI1eaYQWy2zzN/Jxg0FVXI82sTW0=
Subject key identifier: 21:4F:DD:27:60:4C:64:65:B1:7D:77:FC:D1:6A:CD:06:F5:B5:AC:C3
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 019A51879FCDCD736F5CB613C59B16DB478C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 01:00:33 +0000
Manifest this update: Wed 05 Nov 2025 01:00:33 +0000
Manifest next update: Thu 06 Nov 2025 01:00:33 +0000
Files and hashes: 1: 2GrFuxyxyHkqumdayYRyftHOCCA.roa (hash: 58WfiupeF7jv1/JuV3+ZtSw5ZmglbAvhKCWRK1cfUPw=)
2: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: rElxHcv6eNGCZh/yoXNOzQLu/qRM1pJ5Ef7y7va81Z0=)
3: EFrmvdYAVAISDnJyY9LHHEwKIkE.roa (hash: VVoG4KmLy8MCQlXZBg6STGy/fzjISq/IYVzwvcg57xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:9f:cd:cd:73:6f:5c:b6:13:c5:9b:16:db:47:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Nov 5 01:00:33 2025 GMT
Not After : Nov 6 01:00:33 2025 GMT
Subject: CN=214fdd27604c6465b17d77fcd16acd06f5b5acc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:76:33:ad:9f:62:59:c8:43:e0:c4:7f:9a:
ab:70:aa:ac:53:8e:4f:05:fb:c0:ab:4d:5a:f1:dd:
7f:37:47:eb:00:35:24:06:18:17:6c:0a:35:27:a2:
1b:37:c6:eb:1e:04:7a:a3:d6:dc:02:7f:cb:43:84:
7c:92:b3:a2:a8:45:47:f0:6b:e8:7f:5e:5c:6e:0c:
8b:cb:88:60:56:8e:f1:a5:f7:0e:98:42:04:cb:f2:
2b:a4:15:fd:2f:83:ec:28:6e:92:e3:00:59:93:b3:
48:16:c4:79:89:bb:14:bd:56:39:bc:a1:c2:e0:94:
3a:96:7d:ed:39:92:2d:ca:cb:69:d5:cc:56:6d:95:
25:35:ed:19:96:fb:26:01:9e:c2:8b:f4:bc:60:0e:
89:2c:5c:b9:3a:d0:ef:2c:c8:47:2c:3f:9c:d0:3b:
8e:d0:22:10:f0:91:7e:84:b2:f6:ce:9a:ff:9d:e2:
73:78:7e:2c:09:d0:8b:4f:8c:ed:83:d6:37:d7:32:
1a:c1:7f:a5:d7:65:18:d7:a8:d4:a6:f9:44:b1:92:
b7:13:d8:b9:59:bb:32:05:53:63:24:74:de:24:58:
84:ad:50:82:cd:07:5e:f5:b8:13:71:a0:52:72:16:
33:e3:e0:a9:40:e8:33:a5:f2:39:a6:83:5c:ec:5d:
10:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4F:DD:27:60:4C:64:65:B1:7D:77:FC:D1:6A:CD:06:F5:B5:AC:C3
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a6:78:95:fd:d9:27:b6:d6:07:13:e6:d9:e3:20:b1:50:8d:
cc:b6:69:36:39:de:7c:0a:9e:41:d7:bb:05:63:2d:15:2f:0d:
9b:5b:37:a5:b1:62:cf:d9:de:fd:46:9d:cd:78:3d:d4:63:f0:
b0:cb:f8:25:37:01:ad:8a:8e:f2:f4:d2:b6:16:9c:02:d2:be:
89:d8:0b:e0:59:75:a3:8e:34:72:b0:2f:3f:6f:a4:94:84:a5:
97:81:0a:dc:94:05:c6:0e:a9:73:53:c0:1a:ef:bc:d1:77:3c:
78:62:78:d5:bb:a5:2f:e4:9e:fe:b8:9d:2f:fc:5e:34:91:66:
42:72:73:21:03:e1:d7:0b:6b:fc:75:35:55:34:31:f4:15:e9:
b8:25:2d:c1:f2:cc:68:43:63:18:54:92:82:ac:04:cf:02:98:
06:ec:23:ce:83:2b:c4:d0:40:da:44:48:a4:06:e9:3d:11:9f:
f2:bc:38:a8:11:27:04:72:ae:15:65:7f:62:f7:b8:d8:b5:aa:
40:6a:6c:64:13:ac:ca:eb:df:9c:a2:a7:19:c2:06:7b:1d:25:
9d:ea:4b:82:87:ca:2e:2a:b9:a9:15:9b:73:bc:95:7a:9e:9d:
40:40:6e:f0:42:7b:02:07:94:61:c7:9c:32:80:64:b6:19:02:
64:fe:9d:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh5/NzXNvXLYTxZsW20eMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NzMyYjk4NWY4ZjYzZmY4YWU4ZWFjN2M3MDgzMmIzMGNl
ZTgwYWQwHhcNMjUxMTA1MDEwMDMzWhcNMjUxMTA2MDEwMDMzWjAzMTEwLwYDVQQD
EygyMTRmZGQyNzYwNGM2NDY1YjE3ZDc3ZmNkMTZhY2QwNmY1YjVhY2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiN2M62fYlnIQ+DEf5qrcKqsU45P
BfvAq01a8d1/N0frADUkBhgXbAo1J6IbN8brHgR6o9bcAn/LQ4R8krOiqEVH8Gvo
f15cbgyLy4hgVo7xpfcOmEIEy/IrpBX9L4PsKG6S4wBZk7NIFsR5ibsUvVY5vKHC
4JQ6ln3tOZItystp1cxWbZUlNe0ZlvsmAZ7Ci/S8YA6JLFy5OtDvLMhHLD+c0DuO
0CIQ8JF+hLL2zpr/neJzeH4sCdCLT4ztg9Y31zIawX+l12UY16jUpvlEsZK3E9i5
WbsyBVNjJHTeJFiErVCCzQde9bgTcaBSchYz4+CpQOgzpfI5poNc7F0QlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFP3SdgTGRlsX13/NFqzQb1tazDMB8GA1UdIwQY
MBaAFARzK5hfj2P/iujqx8cIMrMM7oCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDct
YWRhMjcwODI1MjE4LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDctYWRhMjcwODI1MjE4
LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaZ4lf3Z
J7bWBxPm2eMgsVCNzLZpNjnefAqeQde7BWMtFS8Nm1s3pbFiz9ne/UadzXg91GPw
sMv4JTcBrYqO8vTSthacAtK+idgL4Fl1o440crAvP2+klISll4EK3JQFxg6pc1PA
Gu+80Xc8eGJ41bulL+Se/ridL/xeNJFmQnJzIQPh1wtr/HU1VTQx9BXpuCUtwfLM
aENjGFSSgqwEzwKYBuwjzoMrxNBA2kRIpAbpPRGf8rw4qBEnBHKuFWV/Yve42LWq
QGpsZBOsyuvfnKKnGcIGex0lnepLgofKLiq5qRWbc7yVep6dQEBu8EJ7AgeUYcec
MoBkthkCZP6dfw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:31 2025 by rpki-client