Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
File: bfpKH_x0mxxPo7bagZttu5rohaA.mft (raw, json)
Hash identifier: b5RSvCsVLDaJRIBwsW/Mx4CmpQyfvyn6gv9ZdmrOfnA=
Subject key identifier: C3:AB:39:70:FA:75:06:AB:BF:6F:99:8A:57:7F:4C:34:19:7B:71:A6
Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Certificate serial: 019A52D25175F07BA05F12062106882B6EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 07:01:46 +0000
Manifest this update: Wed 05 Nov 2025 07:01:46 +0000
Manifest next update: Thu 06 Nov 2025 07:01:46 +0000
Files and hashes: 1: bfpKH_x0mxxPo7bagZttu5rohaA.crl (hash: TCwEglAOjJ/WlRem7HK6X/CAnp/ExiczYOR5YFoe6cI=)
2: dwh4D1mLE-BJM3O3JRIbCS8CiAE.roa (hash: 0ebutZnVkcZLLmshdUGZMamHfBLJzhHs685jtIwVRjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:51:75:f0:7b:a0:5f:12:06:21:06:88:2b:6e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Validity
Not Before: Nov 5 07:01:46 2025 GMT
Not After : Nov 6 07:01:46 2025 GMT
Subject: CN=c3ab3970fa7506abbf6f998a577f4c34197b71a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:d3:aa:bf:67:ac:80:74:56:13:4e:df:c2:
91:23:66:93:d4:e4:47:b4:07:0b:05:a2:21:ee:81:
f5:59:e3:c2:41:cf:22:60:8b:9d:6f:83:2e:78:2c:
a6:78:cf:47:25:74:e7:20:9e:34:4a:b8:22:ed:3a:
64:0b:5e:7c:4b:6c:61:3a:19:11:8b:c5:de:52:8b:
5e:7b:81:fe:ed:d0:72:32:7f:d2:bb:f3:10:32:b4:
b4:19:0e:d3:84:aa:99:4a:6e:39:79:d3:c8:5a:d4:
49:68:4a:3b:f9:63:61:51:6a:32:c7:4a:97:bb:3b:
ae:1a:9d:18:e6:d0:bb:ec:97:e3:4e:fb:8b:76:f9:
d6:99:2d:6f:69:5d:94:ef:9c:34:d2:a6:70:9b:7a:
b8:49:63:f6:0a:30:39:43:65:55:36:5b:4f:ce:f1:
b2:07:da:65:c8:30:67:c6:bf:07:85:ef:86:05:94:
18:38:8a:db:ad:0a:8b:80:29:8d:4a:4c:47:7e:54:
36:b4:72:50:7e:a7:11:11:50:1b:32:d3:fa:3f:97:
1c:02:0c:18:45:92:21:38:36:68:c4:96:fc:d1:8a:
54:d1:de:6d:b1:a1:29:54:12:8f:ef:af:9d:d2:05:
4a:a5:3b:9d:28:57:7d:9d:6d:3b:38:b6:2c:df:cb:
46:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AB:39:70:FA:75:06:AB:BF:6F:99:8A:57:7F:4C:34:19:7B:71:A6
X509v3 Authority Key Identifier:
keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bf:7e:eb:0f:74:e3:6a:32:03:4b:f9:66:bd:16:b6:46:db:
69:96:d7:cc:6a:c5:75:fe:76:67:3c:4c:21:cd:86:e0:43:27:
af:71:ea:a9:e5:05:fd:0b:fc:8f:93:90:23:1f:4a:ac:ba:71:
e3:9a:f6:90:51:0c:69:39:8c:61:e9:16:52:6b:2a:f0:83:9c:
a4:66:d2:16:23:96:d6:1b:91:79:6d:7e:e2:6c:3d:75:53:28:
e2:60:6e:00:c6:88:e9:45:65:33:f3:d1:14:85:6e:57:37:d1:
04:6e:98:cb:5f:57:93:19:00:85:ba:82:62:99:15:d5:c4:19:
a4:9b:89:1a:de:75:5a:b6:42:76:60:cb:8e:10:00:eb:10:cf:
28:3d:40:9e:e4:46:e9:90:5e:91:81:fb:f4:50:62:72:d3:49:
d8:1b:e7:bd:e0:83:3b:51:1d:c0:b3:0d:79:44:29:28:f0:e1:
c3:d6:60:c7:74:4e:9b:5f:c0:86:a8:1a:5a:19:cc:3d:ab:2f:
09:a8:81:6c:88:c2:d3:ff:4c:ba:cb:dc:49:b1:5e:bc:56:e4:
f8:c7:ae:33:49:5c:dd:04:b6:d6:96:2b:bc:65:58:a8:48:60:
2f:c7:9e:c5:17:9d:ff:db:ae:dd:ba:12:b4:de:b1:92:42:3c:
9a:ba:7e:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0lF18HugXxIGIQaIK26sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmE0YTFmZmM3NDliMWM0ZmEzYjZkYTgxOWI2ZGJiOWFl
ODg1YTAwHhcNMjUxMTA1MDcwMTQ2WhcNMjUxMTA2MDcwMTQ2WjAzMTEwLwYDVQQD
EyhjM2FiMzk3MGZhNzUwNmFiYmY2Zjk5OGE1NzdmNGMzNDE5N2I3MWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl77Tqr9nrIB0VhNO38KRI2aT1ORH
tAcLBaIh7oH1WePCQc8iYIudb4MueCymeM9HJXTnIJ40Srgi7TpkC158S2xhOhkR
i8XeUotee4H+7dByMn/Su/MQMrS0GQ7ThKqZSm45edPIWtRJaEo7+WNhUWoyx0qX
uzuuGp0Y5tC77JfjTvuLdvnWmS1vaV2U75w00qZwm3q4SWP2CjA5Q2VVNltPzvGy
B9plyDBnxr8Hhe+GBZQYOIrbrQqLgCmNSkxHflQ2tHJQfqcREVAbMtP6P5ccAgwY
RZIhODZoxJb80YpU0d5tsaEpVBKP76+d0gVKpTudKFd9nW07OLYs38tG7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOrOXD6dQarv2+Zild/TDQZe3GmMB8GA1UdIwQY
MBaAFG36Sh/8dJscT6O22oGbbbua6IWgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9mMmYxYzUtODY2Yy00MmI1LThiNDYt
Mzg2NjlkMWUyMzAxLzEvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9mMmYxYzUtODY2Yy00MmI1LThiNDYtMzg2NjlkMWUyMzAx
LzEvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXb9+6w90
42oyA0v5Zr0WtkbbaZbXzGrFdf52ZzxMIc2G4EMnr3HqqeUF/Qv8j5OQIx9KrLpx
45r2kFEMaTmMYekWUmsq8IOcpGbSFiOW1huReW1+4mw9dVMo4mBuAMaI6UVlM/PR
FIVuVzfRBG6Yy19XkxkAhbqCYpkV1cQZpJuJGt51WrZCdmDLjhAA6xDPKD1AnuRG
6ZBekYH79FBictNJ2BvnveCDO1EdwLMNeUQpKPDhw9Zgx3ROm1/AhqgaWhnMPasv
CaiBbIjC0/9MusvcSbFevFbk+MeuM0lc3QS21pYrvGVYqEhgL8eexRed/9uu3boS
tN6xkkI8mrp+2w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:15:49 2025 by rpki-client