Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
File: bnED-oWs7FfEZIWRzD5Bzff-45c.mft (raw, json)
Hash identifier: qzva+oAVr/EOHMHtuGRlWjyqLpJhGnElJCqDu6HM4Vg=
Subject key identifier: 70:B1:C8:F5:6D:F8:02:5D:E3:36:98:74:34:EC:40:DA:CC:D9:BA:F6
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Certificate issuer: /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial: 019A4E86D0EEFE1D3B9947007AF7A8682F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
Manifest number: 0EC1
Signing time: Tue 04 Nov 2025 11:00:49 +0000
Manifest this update: Tue 04 Nov 2025 11:00:49 +0000
Manifest next update: Wed 05 Nov 2025 11:00:49 +0000
Files and hashes: 1: Q75VcKpJN1_xp-QM_NM8W4Tp-04.roa (hash: Wt2+g51E+wWSkSdRcanf7BFfmX/qewZOJ77oXxIMQTM=)
2: bnED-oWs7FfEZIWRzD5Bzff-45c.crl (hash: 1uP+N3Lnrulqvk5yruv2S2JR0P+ickmX/Kl5s5x1L1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:d0:ee:fe:1d:3b:99:47:00:7a:f7:a8:68:2f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Validity
Not Before: Nov 4 11:00:49 2025 GMT
Not After : Nov 5 11:00:49 2025 GMT
Subject: CN=70b1c8f56df8025de336987434ec40daccd9baf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:cb:fe:9b:cc:7a:01:f9:ff:49:dc:9a:03:
7e:38:18:fe:54:81:4d:f2:aa:ce:dc:6d:19:68:19:
78:d2:d9:28:d7:f7:e7:20:2c:f6:b1:a3:b2:53:4e:
27:2b:35:9f:a7:02:82:94:4b:d3:c5:11:51:25:24:
9b:6e:55:e8:27:7f:c9:f2:53:dd:a1:1a:36:d3:68:
02:28:9e:8f:cb:4e:e5:6d:92:3d:02:5a:02:0b:36:
0a:21:57:5c:fe:c8:a9:9e:cb:74:7c:eb:6f:3b:d3:
9c:4c:f6:3f:ad:a7:c8:17:a3:ec:bc:ac:2d:18:11:
2f:7d:73:99:e1:a8:ec:d6:8c:aa:af:70:4f:a4:c8:
0d:0c:80:d6:fc:c8:53:5b:7f:20:7f:38:ab:c4:a6:
9c:1a:39:03:a1:c0:40:33:cf:d7:29:41:9c:03:65:
1a:57:30:65:cd:82:c4:4f:4b:46:8b:98:19:b3:bd:
48:bd:c1:57:10:39:9e:7d:e5:aa:f9:a0:75:a2:55:
ff:4d:84:76:60:b4:10:5c:71:e3:8f:06:27:cc:60:
62:a3:08:88:72:ae:f2:66:ef:e0:d7:ac:12:00:a6:
b1:9c:b1:54:17:ae:20:8d:9b:23:80:ee:57:40:4c:
73:70:b9:70:a2:6c:6e:9e:48:af:12:9d:cc:0a:eb:
9d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B1:C8:F5:6D:F8:02:5D:E3:36:98:74:34:EC:40:DA:CC:D9:BA:F6
X509v3 Authority Key Identifier:
keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9e:25:44:8e:d9:6e:b1:a2:a1:8e:5a:7e:cb:a6:b6:cb:33:
ea:55:b0:13:b1:ae:7f:05:0f:b4:58:ec:9c:95:36:98:b1:48:
15:46:cd:26:52:17:fb:81:7c:1c:00:fd:15:06:f3:89:4f:8b:
95:39:ff:ab:4b:63:8d:c3:0f:5e:f7:8d:9d:5d:65:90:d4:12:
c9:bc:35:5e:18:1e:97:49:d0:ea:d0:56:5e:bc:11:46:29:11:
ee:c9:33:ca:7b:2c:c4:ab:e0:06:0b:6d:68:b6:f3:91:01:c2:
42:55:9e:e3:e5:0f:76:dc:4f:19:ba:63:17:ba:4e:94:6d:71:
27:f2:aa:6f:5d:b1:91:7b:61:a0:57:7c:83:d4:a8:90:14:4e:
a7:1e:55:dd:53:61:21:2a:09:15:20:e0:5b:19:6b:89:45:ee:
d9:8e:11:46:7c:8c:1f:f9:71:17:a3:e7:90:de:fe:f7:cf:ab:
e9:7a:93:d4:84:f3:e6:0e:c5:71:a7:39:ac:7f:77:ca:a5:72:
34:9c:08:18:1c:59:6f:c5:e3:91:41:73:2e:bc:42:a3:b3:cb:
9a:1a:c9:17:90:0e:7c:82:44:fb:27:33:32:03:0b:7c:f3:d2:
cb:d3:2e:85:48:6f:84:42:f9:b8:7a:b7:68:83:03:16:3a:b1:
4a:ad:45:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhtDu/h07mUcAeveoaC+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNzEwM2ZhODVhY2VjNTdjNDY0ODU5MWNjM2U0MWNkZjdm
ZWUzOTcwHhcNMjUxMTA0MTEwMDQ5WhcNMjUxMTA1MTEwMDQ5WjAzMTEwLwYDVQQD
Eyg3MGIxYzhmNTZkZjgwMjVkZTMzNjk4NzQzNGVjNDBkYWNjZDliYWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznjL/pvMegH5/0ncmgN+OBj+VIFN
8qrO3G0ZaBl40tko1/fnICz2saOyU04nKzWfpwKClEvTxRFRJSSbblXoJ3/J8lPd
oRo202gCKJ6Py07lbZI9AloCCzYKIVdc/sipnst0fOtvO9OcTPY/rafIF6PsvKwt
GBEvfXOZ4ajs1oyqr3BPpMgNDIDW/MhTW38gfzirxKacGjkDocBAM8/XKUGcA2Ua
VzBlzYLET0tGi5gZs71IvcFXEDmefeWq+aB1olX/TYR2YLQQXHHjjwYnzGBiowiI
cq7yZu/g16wSAKaxnLFUF64gjZsjgO5XQExzcLlwomxunkivEp3MCuudRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCxyPVt+AJd4zaYdDTsQNrM2br2MB8GA1UdIwQY
MBaAFG5xA/qFrOxXxGSFkcw+Qc33/uOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wNjgwM2YtZGQyZS00ZmQxLTlhN2Yt
YmJmODI2YWE2N2MwLzEvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wNjgwM2YtZGQyZS00ZmQxLTlhN2YtYmJmODI2YWE2N2Mw
LzEvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb54lRI7Z
brGioY5afsumtssz6lWwE7GufwUPtFjsnJU2mLFIFUbNJlIX+4F8HAD9FQbziU+L
lTn/q0tjjcMPXveNnV1lkNQSybw1Xhgel0nQ6tBWXrwRRikR7skzynssxKvgBgtt
aLbzkQHCQlWe4+UPdtxPGbpjF7pOlG1xJ/Kqb12xkXthoFd8g9SokBROpx5V3VNh
ISoJFSDgWxlriUXu2Y4RRnyMH/lxF6PnkN7+98+r6XqT1ITz5g7Fcac5rH93yqVy
NJwIGBxZb8XjkUFzLrxCo7PLmhrJF5AOfIJE+yczMgMLfPPSy9MuhUhvhEL5uHq3
aIMDFjqxSq1FQw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:16 2025 by rpki-client