Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier: 1eo+zczvGmpCtFu8zHNR7yaw1K2w2msL0DUg21utL2I=
Subject key identifier: 57:4A:EF:25:EC:07:E2:79:78:57:B5:86:75:97:35:42:34:EB:6A:6E
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 019A4DE22A07E0BDD062FB01076D71EF6661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:58 +0000
Manifest this update: Tue 04 Nov 2025 08:00:58 +0000
Manifest next update: Wed 05 Nov 2025 08:00:58 +0000
Files and hashes: 1: 0pJ-rwxVG5S_Uu-XF3E61P1dlA8.roa (hash: dUKNac33kPa6HT3Uru5uUtqJz9KxFM++FuLr8tWIwQw=)
2: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: uzmOjFcbhuuUpNI8xZC52zqALYGiMS7l2FU/vmMDhvU=)
3: C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa (hash: py0bRoLaWPaWD7mBA8fr/sS/KCotH7gRuFvSUFDN9Vk=)
4: H0pXo5dsrJce4F8oF2aIhMCPMVs.roa (hash: ZGDB62uG+S6SJD7pxCgAYxf3KDMdMuMZc4Ygah4Ns68=)
5: NUPQRS0ooRsar2f147MR7z_4vbA.roa (hash: CmMZuOujUXhdqhz27/qbC9mkinQYp7izfWsg278vT1s=)
6: SY-0R9mhRAOxVSEqgVexZv7lI7M.roa (hash: 6QqgZClw2wSt67aU88jN6fAOVu+vkIOWukLNHCc1CkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:2a:07:e0:bd:d0:62:fb:01:07:6d:71:ef:66:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Nov 4 08:00:58 2025 GMT
Not After : Nov 5 08:00:58 2025 GMT
Subject: CN=574aef25ec07e2797857b5867597354234eb6a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:80:a4:75:21:ff:b0:da:20:80:df:95:7e:8b:
ad:fa:90:11:4d:af:8f:78:79:b5:ef:a6:9b:cf:b6:
32:69:4f:0f:3f:2d:de:e5:ce:70:d0:a4:c8:7e:89:
53:52:a7:59:b9:5f:88:cb:35:6b:be:45:27:36:5c:
21:79:cb:75:af:5e:b3:15:4e:b6:eb:d7:40:fb:f4:
0c:26:55:62:6c:d9:5a:f1:d2:ee:15:3e:89:50:7a:
e9:81:d5:58:d1:0c:c2:c8:c7:57:1d:22:b9:18:08:
b0:0b:61:45:b8:8a:c2:c4:24:ba:16:25:cf:b5:91:
e9:f0:85:4a:fa:1a:23:b6:6b:7c:c1:97:8a:6f:ec:
7b:60:8c:fc:b3:11:a6:db:58:7e:03:88:d2:98:8e:
2a:ba:dd:b3:98:e9:95:71:2e:b1:05:a2:a4:64:26:
f8:bc:b7:05:dd:00:6a:fc:10:87:5e:3d:70:f0:26:
61:41:e1:62:ad:13:91:6f:a9:f5:22:d1:9c:57:21:
4c:50:9f:b7:b6:a1:76:21:83:8f:db:e1:b9:6e:d0:
fc:f3:c5:84:47:db:d6:2a:78:d0:b3:8c:a2:63:24:
78:0b:35:f4:0b:52:23:c5:8a:bb:c7:2b:53:95:31:
0e:a2:bb:0f:eb:17:6f:8e:0f:32:e8:73:f3:9d:d6:
79:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4A:EF:25:EC:07:E2:79:78:57:B5:86:75:97:35:42:34:EB:6A:6E
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e1:50:87:ed:fc:fc:01:a6:39:6b:54:66:7f:fb:db:34:84:
93:3d:19:16:7b:d3:7f:20:91:b5:bc:d5:ec:03:51:c1:5f:5c:
5d:fe:99:37:4c:e6:95:01:6d:fe:4b:d4:98:4c:16:c0:31:05:
4f:82:57:4f:7c:88:ac:30:98:ca:43:61:a1:6a:11:a7:b5:53:
04:dd:5b:a7:71:c0:78:da:88:d4:f0:1b:20:9a:a3:cb:50:7b:
48:58:10:37:68:96:b1:28:56:68:b6:71:12:30:55:a6:aa:7f:
2c:f0:2c:16:1e:38:d5:0d:c8:e2:fd:47:7a:60:06:e3:fb:3a:
d9:e5:0c:66:7e:07:73:21:1f:fc:09:a6:b3:a1:ee:a8:6f:21:
54:37:e1:36:79:7e:db:14:d8:cf:6e:7d:c8:23:7e:68:8f:28:
aa:f7:66:8a:48:18:2f:bb:24:64:e9:d6:f0:f8:03:01:2b:59:
4e:ee:dc:43:b6:bc:7d:b5:3b:b5:42:35:81:56:c8:35:b0:84:
c8:0d:dd:55:58:40:ca:a1:94:1a:2d:1b:79:8b:1e:9c:3b:23:
6a:85:d4:e4:a1:05:ce:59:4e:48:c7:45:0e:ba:cb:31:b9:49:
6b:46:08:c9:84:89:c2:9d:70:15:b3:8c:fb:a1:10:63:34:ef:
71:d9:0b:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4ioH4L3QYvsBB21x72ZhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz
MGFlMzkwHhcNMjUxMTA0MDgwMDU4WhcNMjUxMTA1MDgwMDU4WjAzMTEwLwYDVQQD
Eyg1NzRhZWYyNWVjMDdlMjc5Nzg1N2I1ODY3NTk3MzU0MjM0ZWI2YTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YCkdSH/sNoggN+Vfout+pARTa+P
eHm176abz7YyaU8PPy3e5c5w0KTIfolTUqdZuV+IyzVrvkUnNlwhect1r16zFU62
69dA+/QMJlVibNla8dLuFT6JUHrpgdVY0QzCyMdXHSK5GAiwC2FFuIrCxCS6FiXP
tZHp8IVK+hojtmt8wZeKb+x7YIz8sxGm21h+A4jSmI4qut2zmOmVcS6xBaKkZCb4
vLcF3QBq/BCHXj1w8CZhQeFirRORb6n1ItGcVyFMUJ+3tqF2IYOP2+G5btD888WE
R9vWKnjQs4yiYyR4CzX0C1IjxYq7xytTlTEOorsP6xdvjg8y6HPzndZ53wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdK7yXsB+J5eFe1hnWXNUI062puMB8GA1UdIwQY
MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt
YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw
LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeFQh+38
/AGmOWtUZn/72zSEkz0ZFnvTfyCRtbzV7ANRwV9cXf6ZN0zmlQFt/kvUmEwWwDEF
T4JXT3yIrDCYykNhoWoRp7VTBN1bp3HAeNqI1PAbIJqjy1B7SFgQN2iWsShWaLZx
EjBVpqp/LPAsFh441Q3I4v1HemAG4/s62eUMZn4HcyEf/Amms6HuqG8hVDfhNnl+
2xTYz259yCN+aI8oqvdmikgYL7skZOnW8PgDAStZTu7cQ7a8fbU7tUI1gVbINbCE
yA3dVVhAyqGUGi0beYsenDsjaoXU5KEFzllOSMdFDrrLMblJa0YIyYSJwp1wFbOM
+6EQYzTvcdkLcw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:46 2025 by rpki-client