Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: gI9X8Ujraugp65cqqKoy6PSxMnqHgrt9QcwIRRQE6uI=
Subject key identifier: A8:65:AE:22:B3:4B:FE:19:79:42:B8:13:52:F5:DD:78:8A:C6:9B:2C
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 019A5074E26C5A1905A4ACADA858D627E1E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0BD2
Signing time: Tue 04 Nov 2025 20:00:28 +0000
Manifest this update: Tue 04 Nov 2025 20:00:28 +0000
Manifest next update: Wed 05 Nov 2025 20:00:28 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: bBQpv7WPeGlWEkaSNr5tfD1uFhTXIbIp8BDNZfcEdN8=)
2: UiH643w1GrSMb8MdWOXuMKoflu8.roa (hash: Ox1u3sls+4F8aVo0Ns4HTUNM65vIvg8OdP6tILBOlsE=)
3: rLCMQEvNZKScfiZ6xzabxSP9S3Q.roa (hash: pzK0hpbuvro5D5X8t6Q8snrn8GpjD/ysREOxL+vWCA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:e2:6c:5a:19:05:a4:ac:ad:a8:58:d6:27:e1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Nov 4 20:00:28 2025 GMT
Not After : Nov 5 20:00:28 2025 GMT
Subject: CN=a865ae22b34bfe197942b81352f5dd788ac69b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ec:d8:f6:e5:af:94:78:d7:0e:a5:e0:fd:c4:
62:e9:a5:9e:5c:ae:1a:9e:85:d7:50:e9:27:be:4c:
ef:a5:69:54:49:31:bf:4a:ba:91:20:05:31:f4:b4:
43:10:d9:18:67:a5:c7:e8:d9:88:ac:33:26:0f:c3:
6a:ab:e1:8e:1f:2b:0c:49:d4:7c:e2:5c:50:b0:93:
5e:c2:fb:8d:81:bd:2b:45:d2:26:88:7b:b8:8d:78:
0c:4a:e5:57:58:a2:d2:75:27:61:ae:fd:cd:70:48:
b9:15:12:26:82:9a:2b:c6:5b:70:e9:62:e4:5f:19:
f5:0b:03:d4:51:62:13:5f:9d:0b:dd:a3:27:63:eb:
88:b8:35:99:2d:e2:69:79:36:b9:b1:ad:ab:0f:4b:
e2:c9:30:ed:df:fb:40:3c:e6:4b:a2:91:91:d0:de:
6d:6b:ab:16:e0:f1:cd:29:5b:0a:53:68:08:92:1e:
43:50:f4:8d:98:76:0c:aa:f0:ba:48:ea:42:9d:de:
40:b2:17:84:b9:a6:95:62:94:ed:0a:ed:ef:15:7c:
27:0a:de:b5:94:d9:c3:fd:55:d0:18:8f:ca:be:9e:
db:1e:cf:26:c0:09:4f:56:df:09:66:df:5b:59:05:
4a:88:d2:ce:37:72:04:a1:96:b7:22:67:7e:c1:4f:
df:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:65:AE:22:B3:4B:FE:19:79:42:B8:13:52:F5:DD:78:8A:C6:9B:2C
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e5:cf:1f:7a:95:06:33:d2:de:58:90:7d:4a:5f:2a:88:24:
f5:44:60:b4:c8:1b:d9:d6:37:6a:5a:98:e3:0c:f4:0e:64:76:
d9:af:8e:f7:fa:e6:43:7b:65:5b:c0:70:35:cc:88:9e:03:80:
f4:4f:1a:a3:82:71:5a:35:cc:1b:c4:88:e1:8e:5f:f1:95:05:
6b:16:54:40:9d:f9:55:de:27:7f:08:f6:17:c5:9e:77:b4:ae:
35:e8:50:33:8b:53:62:3c:95:d2:34:9c:d1:a1:a4:83:af:43:
e0:37:b8:73:2f:c8:cf:b8:41:14:91:a9:b1:19:61:da:e5:56:
48:a9:e3:a5:f9:c4:73:05:0a:4e:2c:a7:ce:9e:e0:d4:7a:4d:
bc:bd:83:3a:4a:e5:ee:1a:9d:89:77:b2:0e:99:d4:dc:45:15:
11:8e:0b:32:29:f3:d7:24:c8:54:46:fa:36:50:a6:3d:b1:ea:
cf:76:10:b2:0b:87:8b:c6:a9:e9:e0:c2:e8:4a:26:e8:61:74:
82:1f:41:cd:a9:44:a4:a4:7b:ff:d0:50:fa:4d:4c:3f:96:19:
5e:cb:8f:ab:83:fd:49:18:9a:a9:48:a1:64:c6:53:c7:5f:23:
3f:85:1b:ed:93:d7:1a:2d:65:86:b0:71:e9:4b:24:a9:87:35:
39:7b:bf:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdOJsWhkFpKytqFjWJ+HlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YzVmMWQxNzc5ZWI3MDkwOTAzNjVkYjk4MjkxN2FkZmQw
ZjgwNDkwHhcNMjUxMTA0MjAwMDI4WhcNMjUxMTA1MjAwMDI4WjAzMTEwLwYDVQQD
EyhhODY1YWUyMmIzNGJmZTE5Nzk0MmI4MTM1MmY1ZGQ3ODhhYzY5YjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ezY9uWvlHjXDqXg/cRi6aWeXK4a
noXXUOknvkzvpWlUSTG/SrqRIAUx9LRDENkYZ6XH6NmIrDMmD8Nqq+GOHysMSdR8
4lxQsJNewvuNgb0rRdImiHu4jXgMSuVXWKLSdSdhrv3NcEi5FRImgporxltw6WLk
Xxn1CwPUUWITX50L3aMnY+uIuDWZLeJpeTa5sa2rD0viyTDt3/tAPOZLopGR0N5t
a6sW4PHNKVsKU2gIkh5DUPSNmHYMqvC6SOpCnd5AsheEuaaVYpTtCu3vFXwnCt61
lNnD/VXQGI/Kvp7bHs8mwAlPVt8JZt9bWQVKiNLON3IEoZa3Imd+wU/fpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhlriKzS/4ZeUK4E1L13XiKxpssMB8GA1UdIwQY
MBaAFATF8dF3nrcJCQNl25gpF639D4BJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYt
MDU5MjQ1M2RmN2QyLzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYtMDU5MjQ1M2RmN2Qy
LzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+XPH3qV
BjPS3liQfUpfKogk9URgtMgb2dY3alqY4wz0DmR22a+O9/rmQ3tlW8BwNcyIngOA
9E8ao4JxWjXMG8SI4Y5f8ZUFaxZUQJ35Vd4nfwj2F8Wed7SuNehQM4tTYjyV0jSc
0aGkg69D4De4cy/Iz7hBFJGpsRlh2uVWSKnjpfnEcwUKTiynzp7g1HpNvL2DOkrl
7hqdiXeyDpnU3EUVEY4LMinz1yTIVEb6NlCmPbHqz3YQsguHi8ap6eDC6Eom6GF0
gh9BzalEpKR7/9BQ+k1MP5YZXsuPq4P9SRiaqUihZMZTx18jP4Ub7ZPXGi1lhrBx
6UskqYc1OXu/nA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:21:29 2025 by rpki-client