Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: LIc+Sr1JVClqh7gfNMGePHo+dVXwuB6jn5YbV9MFJT4=
Subject key identifier: 2C:87:9F:D0:1B:3E:94:36:3C:BE:84:06:84:18:D3:C9:B7:57:6A:13
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 019A4F62D23C016FC8F60DFB82A4DA258A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 1055
Signing time: Tue 04 Nov 2025 15:01:07 +0000
Manifest this update: Tue 04 Nov 2025 15:01:07 +0000
Manifest next update: Wed 05 Nov 2025 15:01:07 +0000
Files and hashes: 1: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: dHx2d0y5PL6BZ/chEKdDOgpcUIaXvvfbTNjNZiMwdRA=)
2: IPBjPnxSIVvmSGcBy9yI7U96itA.roa (hash: 33R3ZOy6ChkV5qeO5hqmZWS98dbexMjvZEVSQ8kFlso=)
3: IoQeF12RJ4sobu5Ga8Eq38fp9lU.roa (hash: ZHXqTkRKDBNra810QH5vCpMO7yqivWRXintrYhNzM9E=)
4: SQ8WO3hellEKsQ4Y9NCRSIjTvBQ.roa (hash: BhoaWfa6WtuVRoo3cEi7UmyVvyoDyPTAAx6/lySfFlU=)
5: VHskNMe_9EcN5Ps8VV0dA6UjJfM.roa (hash: +hDMAKuEEYDkIBhUAQS0ED3/5LZ3DcqLT6h5fu0q5Vc=)
6: du_h3WrA0m1xhUnyJPLIuGO4kpA.roa (hash: JDpeOD7xV2ekG+eEesG9qUfLmZmSMWruOGhX64DbBEc=)
7: icyI7vtUu_VifuFeglKfEW94_GM.roa (hash: GtavNKaMLIdLn9+Xx38qptYW+E+bTW1Tx9pUb3Adoq0=)
8: slVrsnHd8rCIfEnbwuX_9NfM9i4.roa (hash: /3BENw/pyYjv+JfWEh8xWz895hOHXgoCQXPnKDlVros=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:d2:3c:01:6f:c8:f6:0d:fb:82:a4:da:25:8a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Nov 4 15:01:07 2025 GMT
Not After : Nov 5 15:01:07 2025 GMT
Subject: CN=2c879fd01b3e94363cbe84068418d3c9b7576a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:3f:9e:88:09:ca:53:bb:dd:1c:0a:e8:3a:
6f:16:dc:98:24:ec:da:7f:0d:4b:be:f4:b4:3d:fc:
31:dc:68:2e:21:76:36:f3:69:4e:dd:60:f4:01:71:
5f:e4:67:62:76:06:8b:72:13:c7:d9:c9:54:ae:21:
70:3c:ff:d4:f7:de:7b:02:52:93:d1:dc:74:8e:35:
27:02:5a:ba:d3:00:fe:98:7a:51:ff:3f:ab:a8:10:
50:8f:23:32:a5:da:07:8c:c7:df:a3:94:2d:c2:a3:
e1:e0:10:7b:97:05:c7:03:19:8c:f9:dc:ee:8a:71:
cc:03:8a:46:c8:1c:29:fe:f6:1f:47:c7:e8:73:39:
8a:26:da:09:12:59:2f:dd:09:d9:fc:93:4c:39:73:
89:52:b7:e3:38:e5:84:3f:54:97:d5:d0:ab:6e:58:
51:3a:d7:68:77:6a:f0:4c:76:2d:5c:ed:7d:ef:f7:
cb:2f:05:f0:2f:78:07:14:fa:88:32:d8:e7:fb:27:
6d:36:41:9b:9c:7d:90:d7:d2:b1:e0:d6:f2:66:35:
cc:a0:d0:3c:27:be:6d:86:3b:e7:42:d2:ef:de:1f:
38:93:90:b2:b4:7a:65:6e:39:87:f1:0e:31:74:02:
8e:3f:29:f3:9c:b5:92:8a:91:2b:06:e5:b9:f9:64:
a7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:87:9F:D0:1B:3E:94:36:3C:BE:84:06:84:18:D3:C9:B7:57:6A:13
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0e:11:17:a1:35:4b:07:bc:0e:4a:59:3a:27:56:02:61:0a:
bc:77:dc:c6:50:ac:5c:53:68:91:2d:40:5a:f5:5c:d0:53:cd:
01:b8:7f:12:ee:e8:a8:80:ca:c4:7b:ab:08:68:73:3d:51:cd:
cf:f2:4f:0d:d0:c8:69:15:0b:4f:ac:34:36:ce:60:17:22:a7:
30:4a:b5:fa:d4:60:2b:7d:d0:71:3c:7b:42:dc:9c:51:03:ba:
06:e6:23:69:34:44:57:62:70:91:57:c5:58:b8:fc:26:9b:ce:
01:7c:5d:5d:ad:4b:97:f9:66:b8:f7:e1:15:5b:72:03:a2:59:
a6:54:8e:fc:8e:c4:41:9a:a9:30:29:e8:9b:b7:44:61:c5:74:
0f:74:a5:11:72:9f:fc:fc:dd:62:16:0d:f2:02:47:5c:c7:0a:
14:02:ab:96:61:5c:10:89:97:8f:74:ee:a4:53:50:85:91:22:
4c:71:fe:e2:60:2b:08:7a:b5:22:01:33:aa:bd:c2:7e:be:05:
06:1a:9c:0d:4f:a2:96:aa:04:b8:37:53:8a:9f:7e:9f:00:42:
ed:28:5b:1d:1e:b8:8d:c1:96:47:dc:ff:44:b4:93:3e:32:87:
9d:7d:75:a8:38:43:41:c2:e3:6c:19:44:a6:45:87:08:98:29:
a8:87:f7:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYtI8AW/I9g37gqTaJYoFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTJhZTJjZDA5NDMzMzAxOGM0MWRhYWZiNDc0YzZjZmE4
MGQwN2QwHhcNMjUxMTA0MTUwMTA3WhcNMjUxMTA1MTUwMTA3WjAzMTEwLwYDVQQD
EygyYzg3OWZkMDFiM2U5NDM2M2NiZTg0MDY4NDE4ZDNjOWI3NTc2YTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsA/nogJylO73RwK6DpvFtyYJOza
fw1LvvS0Pfwx3GguIXY282lO3WD0AXFf5GdidgaLchPH2clUriFwPP/U9957AlKT
0dx0jjUnAlq60wD+mHpR/z+rqBBQjyMypdoHjMffo5QtwqPh4BB7lwXHAxmM+dzu
inHMA4pGyBwp/vYfR8foczmKJtoJElkv3QnZ/JNMOXOJUrfjOOWEP1SX1dCrblhR
Otdod2rwTHYtXO197/fLLwXwL3gHFPqIMtjn+ydtNkGbnH2Q19Kx4NbyZjXMoNA8
J75thjvnQtLv3h84k5CytHplbjmH8Q4xdAKOPynznLWSipErBuW5+WSnOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyHn9AbPpQ2PL6EBoQY08m3V2oTMB8GA1UdIwQY
MBaAFASirizQlDMwGMQdqvtHTGz6gNB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMt
NmU2ZThkOTMwM2U5LzEvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMtNmU2ZThkOTMwM2U5
LzEvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlA4RF6E1
Swe8DkpZOidWAmEKvHfcxlCsXFNokS1AWvVc0FPNAbh/Eu7oqIDKxHurCGhzPVHN
z/JPDdDIaRULT6w0Ns5gFyKnMEq1+tRgK33QcTx7QtycUQO6BuYjaTREV2JwkVfF
WLj8JpvOAXxdXa1Ll/lmuPfhFVtyA6JZplSO/I7EQZqpMCnom7dEYcV0D3SlEXKf
/PzdYhYN8gJHXMcKFAKrlmFcEImXj3TupFNQhZEiTHH+4mArCHq1IgEzqr3Cfr4F
BhqcDU+ilqoEuDdTip9+nwBC7ShbHR64jcGWR9z/RLSTPjKHnX11qDhDQcLjbBlE
pkWHCJgpqIf3uw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:34:17 2025 by rpki-client