Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
File: BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft (raw, json)
Hash identifier: ik6w8NfreH89w9IjwcDYWjkBuNNzIx9F24GYo5/5iPU=
Subject key identifier: 19:17:EB:8F:C9:E0:1D:B5:98:D7:39:B6:EE:D3:E8:59:39:D3:B3:E3
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial: 019A4F2B58C8B5383FB669A1B6F679CFC1DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
Manifest number: 1717
Signing time: Tue 04 Nov 2025 14:00:32 +0000
Manifest this update: Tue 04 Nov 2025 14:00:32 +0000
Manifest next update: Wed 05 Nov 2025 14:00:32 +0000
Files and hashes: 1: 74ie5YhiWCpEdYw1osP6lOLENo8.roa (hash: AISylC4LJSWYY19JWF/C07coR9FQEVOV3zwowa8Jq8A=)
2: BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl (hash: goLedVtkX6BDMgl8naVyCvJFbQdS11DsZcEIgnFtbpE=)
3: CFOEQzJpDfyIX_oaNWeu5lzrryg.roa (hash: IIn5PGhc9iJknynMgMeEVyICP0S0I656B95iMkmFmVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:58:c8:b5:38:3f:b6:69:a1:b6:f6:79:cf:c1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Validity
Not Before: Nov 4 14:00:32 2025 GMT
Not After : Nov 5 14:00:32 2025 GMT
Subject: CN=1917eb8fc9e01db598d739b6eed3e85939d3b3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0d:17:95:25:3a:55:3d:04:a5:3e:f2:d9:f4:
87:13:e9:f7:14:d6:4c:1f:ea:d2:43:27:e4:bb:e5:
96:84:cf:22:cd:0c:c4:55:56:2f:5d:33:f9:34:07:
09:bd:80:2a:85:2d:b8:ea:1f:c6:99:0a:04:94:e2:
e3:1c:7e:46:6f:49:9e:67:83:c3:b4:31:81:4d:d0:
c9:e5:bc:b1:50:26:d1:9b:af:2a:92:a8:aa:30:5c:
a5:74:ee:cb:24:d9:a3:0f:75:e5:2b:67:14:b9:49:
d1:e2:e2:d2:31:b3:bd:5e:9b:b9:3e:4f:14:d3:25:
ac:74:4e:41:56:c2:3a:49:cc:9c:02:6d:4d:c9:ab:
29:cc:a1:7f:d8:15:65:6e:84:9a:b6:1d:79:8a:93:
5c:f4:d7:41:56:8c:4e:fe:83:da:3a:7e:23:33:c5:
ff:d1:52:ab:f1:7c:e0:17:b9:10:e8:3b:ea:d5:ca:
0c:8f:37:99:d6:b6:cd:78:de:5c:63:e9:2c:db:5d:
f9:37:e4:2a:9e:ad:60:24:bd:14:12:77:70:df:d5:
68:20:3d:e6:37:9a:41:f8:a0:12:cb:f8:f1:59:67:
5f:cc:e5:3f:d0:46:77:dd:86:36:09:d6:79:be:2e:
2e:7c:57:e4:60:37:b6:12:48:c4:e5:9a:eb:ef:b8:
00:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:17:EB:8F:C9:E0:1D:B5:98:D7:39:B6:EE:D3:E8:59:39:D3:B3:E3
X509v3 Authority Key Identifier:
keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bd:46:13:ee:5b:6f:8a:05:f3:83:14:80:21:35:6d:20:bc:
77:99:ee:03:8f:5a:c6:e1:51:5b:8a:fc:71:fb:49:57:16:96:
4d:ed:c6:1d:f3:67:1c:25:23:a8:e4:e7:a7:52:a7:4f:25:a8:
47:58:73:fa:1c:75:56:85:e8:0e:88:f2:be:48:07:44:6b:e2:
9f:82:a5:e4:a5:4a:4d:c9:a8:5c:ba:6d:4c:6a:01:83:e9:03:
d8:63:19:c1:6e:70:6a:ca:54:9d:3c:01:6c:6f:c3:7c:8c:d2:
91:21:f3:a6:54:0a:53:f8:13:57:3c:b0:de:5c:15:77:f1:25:
21:5d:8d:40:b8:ff:f4:ff:7f:c7:61:8b:96:eb:5e:00:b2:0b:
35:8a:f6:34:84:f3:cd:4b:f2:ae:e2:eb:71:0b:a9:d5:50:97:
e3:b5:8a:02:0b:1e:6b:6b:af:fd:32:82:8e:4f:6b:26:be:1f:
12:c1:7d:78:6f:cc:86:c6:8f:53:4a:f0:17:87:49:0b:5c:63:
a3:ad:8f:f7:86:e0:e6:72:6c:88:c4:f5:85:39:4b:93:81:81:
9f:de:4b:74:a8:32:db:35:d2:90:1f:7d:01:fb:ed:33:c3:29:
52:b1:1f:da:04:b5:e4:6b:36:7e:95:2a:78:5d:9b:2b:87:42:
e5:18:dd:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK1jItTg/tmmhtvZ5z8HeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmFkMmY0ZmZjNTg3MmUzNWE0MjllNTNlZjE3OTkyNWZm
NDIxNWUwHhcNMjUxMTA0MTQwMDMyWhcNMjUxMTA1MTQwMDMyWjAzMTEwLwYDVQQD
EygxOTE3ZWI4ZmM5ZTAxZGI1OThkNzM5YjZlZWQzZTg1OTM5ZDNiM2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Q0XlSU6VT0EpT7y2fSHE+n3FNZM
H+rSQyfku+WWhM8izQzEVVYvXTP5NAcJvYAqhS246h/GmQoElOLjHH5Gb0meZ4PD
tDGBTdDJ5byxUCbRm68qkqiqMFyldO7LJNmjD3XlK2cUuUnR4uLSMbO9Xpu5Pk8U
0yWsdE5BVsI6ScycAm1NyaspzKF/2BVlboSath15ipNc9NdBVoxO/oPaOn4jM8X/
0VKr8XzgF7kQ6Dvq1coMjzeZ1rbNeN5cY+ks2135N+Qqnq1gJL0UEndw39VoID3m
N5pB+KASy/jxWWdfzOU/0EZ33YY2CdZ5vi4ufFfkYDe2EkjE5Zrr77gAyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkX64/J4B21mNc5tu7T6Fk507PjMB8GA1UdIwQY
MBaAFAVq0vT/xYcuNaQp5T7xeZJf9CFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDkt
MWU0ZmNiMWM2MGNiLzEvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDktMWU0ZmNiMWM2MGNi
LzEvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP71GE+5b
b4oF84MUgCE1bSC8d5nuA49axuFRW4r8cftJVxaWTe3GHfNnHCUjqOTnp1KnTyWo
R1hz+hx1VoXoDojyvkgHRGvin4Kl5KVKTcmoXLptTGoBg+kD2GMZwW5waspUnTwB
bG/DfIzSkSHzplQKU/gTVzyw3lwVd/ElIV2NQLj/9P9/x2GLluteALILNYr2NITz
zUvyruLrcQup1VCX47WKAgsea2uv/TKCjk9rJr4fEsF9eG/MhsaPU0rwF4dJC1xj
o62P94bg5nJsiMT1hTlLk4GBn95LdKgy2zXSkB99AfvtM8MpUrEf2gS15Gs2fpUq
eF2bK4dC5RjdpQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:18 2025 by rpki-client