Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
File: BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json)
Hash identifier: 9HjXUOOxrYnRbZTwJnvxl/dvMwyZabF1C3OYrr/EbqE=
Subject key identifier: 80:34:11:76:07:2B:53:C9:F5:C5:C0:BF:4E:56:D8:3F:B6:89:57:96
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Certificate issuer: /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial: 019A4F9914EFC0742ABD589D8C9A9FD00983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
Manifest number: 0691
Signing time: Tue 04 Nov 2025 16:00:23 +0000
Manifest this update: Tue 04 Nov 2025 16:00:23 +0000
Manifest next update: Wed 05 Nov 2025 16:00:23 +0000
Files and hashes: 1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: MjaxK+i2YbddNkA3EiRRIsl9gH1P50+Tm5OIFE1Ct4Q=)
2: whgLIqQCCtaIFPGvrV-g35mBN8g.roa (hash: /96dk6CmGs9V0nPouKCLYMlqNQg4LfFeUQg3VaKiMzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:14:ef:c0:74:2a:bd:58:9d:8c:9a:9f:d0:09:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Validity
Not Before: Nov 4 16:00:23 2025 GMT
Not After : Nov 5 16:00:23 2025 GMT
Subject: CN=80341176072b53c9f5c5c0bf4e56d83fb6895796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a7:b5:cb:08:7a:8c:59:a2:cb:20:cb:0c:70:
72:0c:bc:5c:e8:f1:48:75:6b:95:73:36:2d:89:45:
e3:dd:62:ec:66:f2:8b:a6:62:50:86:1d:0f:3a:25:
85:d2:6b:ff:7d:13:ea:fd:37:05:a9:87:5b:34:27:
58:20:b2:17:1a:8b:71:5e:fb:34:52:10:6c:c2:bc:
48:67:4a:6e:e7:5c:cd:14:58:58:c4:88:d5:aa:63:
57:33:ef:cd:e6:81:e7:c6:9c:2e:b4:64:58:30:f7:
cf:7a:3e:f4:b9:c2:dd:8d:aa:4e:cb:e8:16:9a:bb:
e8:8b:a7:8c:ed:91:a2:a6:6e:98:44:37:34:49:c4:
9e:29:2f:dd:e8:47:bb:5d:f3:8f:1d:45:ca:b0:d0:
60:fb:7c:04:1d:65:64:5c:b8:3c:46:e9:cc:54:8b:
7e:88:75:c5:8e:09:8c:26:8c:9e:b6:d3:fb:60:4a:
50:7d:ad:0f:62:0a:b2:13:35:72:b5:55:13:b2:7e:
db:df:f9:4f:24:8e:df:6e:17:f8:15:96:5c:b9:1e:
49:72:14:7c:09:14:48:21:b0:0d:d4:df:a6:84:92:
06:12:8b:f4:4b:28:42:6d:51:3e:db:59:95:27:52:
a2:45:5e:19:95:0d:0d:c8:07:07:48:40:8e:89:26:
0e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:34:11:76:07:2B:53:C9:F5:C5:C0:BF:4E:56:D8:3F:B6:89:57:96
X509v3 Authority Key Identifier:
keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:14:3f:f4:84:13:bb:65:ce:b1:1a:c8:09:db:1e:d0:78:34:
e8:73:a5:9b:04:cc:90:d5:7a:66:2f:f6:e6:7f:c5:f9:8a:31:
ed:c5:88:11:0e:ac:8d:86:5d:b6:79:ae:d6:d7:da:f1:ab:45:
fc:83:86:a9:54:61:5b:75:22:92:41:d2:8e:c0:b9:c9:06:6d:
9f:2d:8d:79:16:1f:d6:7b:ab:e1:bb:96:da:36:d8:86:90:2a:
ac:91:bb:2c:93:fa:af:91:91:3a:f2:30:d9:38:a4:c7:38:70:
d4:00:90:05:ea:aa:31:03:5b:43:e5:8f:4f:d4:ac:36:cd:8e:
41:9c:90:3b:9d:94:c3:35:e7:2d:16:e5:90:78:13:55:15:35:
a7:de:60:f3:0c:d1:41:d6:dc:77:ee:76:c4:4c:2d:d4:4b:8e:
29:d0:fa:f4:89:f1:1c:70:a7:02:4e:36:82:01:ac:78:35:20:
6c:c8:bb:51:3b:a1:bc:17:51:87:11:f5:cd:c4:3f:5f:2f:8b:
4b:46:60:f0:ce:9f:d7:e4:e8:47:8b:1a:d9:3f:2d:c3:ad:87:
f5:9a:ad:16:ed:84:2c:d3:43:26:a2:0e:cd:ef:47:49:6d:d0:
65:56:da:85:4c:0d:d3:61:3d:a8:08:f0:56:95:95:3e:6f:77:
c9:37:7c:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmRTvwHQqvVidjJqf0AmDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NjcxNGQxOTkwN2E3NGJlOTVjYmIxNzM3OWUwYzhhMWI1
YTgzY2EwHhcNMjUxMTA0MTYwMDIzWhcNMjUxMTA1MTYwMDIzWjAzMTEwLwYDVQQD
Eyg4MDM0MTE3NjA3MmI1M2M5ZjVjNWMwYmY0ZTU2ZDgzZmI2ODk1Nzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66e1ywh6jFmiyyDLDHByDLxc6PFI
dWuVczYtiUXj3WLsZvKLpmJQhh0POiWF0mv/fRPq/TcFqYdbNCdYILIXGotxXvs0
UhBswrxIZ0pu51zNFFhYxIjVqmNXM+/N5oHnxpwutGRYMPfPej70ucLdjapOy+gW
mrvoi6eM7ZGipm6YRDc0ScSeKS/d6Ee7XfOPHUXKsNBg+3wEHWVkXLg8RunMVIt+
iHXFjgmMJoyettP7YEpQfa0PYgqyEzVytVUTsn7b3/lPJI7fbhf4FZZcuR5JchR8
CRRIIbAN1N+mhJIGEov0SyhCbVE+21mVJ1KiRV4ZlQ0NyAcHSECOiSYOWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIA0EXYHK1PJ9cXAv05W2D+2iVeWMB8GA1UdIwQY
MBaAFAZnFNGZB6dL6Vy7FzeeDIobWoPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83YmZmNWItMmU5NS00NjRiLWFiMDQt
ZmYwMTBlMjEyMzNhLzEvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS83YmZmNWItMmU5NS00NjRiLWFiMDQtZmYwMTBlMjEyMzNh
LzEvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehQ/9IQT
u2XOsRrICdse0Hg06HOlmwTMkNV6Zi/25n/F+Yox7cWIEQ6sjYZdtnmu1tfa8atF
/IOGqVRhW3UikkHSjsC5yQZtny2NeRYf1nur4buW2jbYhpAqrJG7LJP6r5GROvIw
2Tikxzhw1ACQBeqqMQNbQ+WPT9SsNs2OQZyQO52UwzXnLRblkHgTVRU1p95g8wzR
Qdbcd+52xEwt1EuOKdD69InxHHCnAk42ggGseDUgbMi7UTuhvBdRhxH1zcQ/Xy+L
S0Zg8M6f1+ToR4sa2T8tw62H9ZqtFu2ELNNDJqIOze9HSW3QZVbahUwN02E9qAjw
VpWVPm93yTd8tw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:49 2025 by rpki-client