Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json)
Hash identifier: MIqtLvNqZbc8TDwxZqd+BNjg3iszo78xeTmQQZtgVTA=
Subject key identifier: B2:23:1B:F4:FB:34:E4:A9:AD:8F:E1:D3:C4:60:B6:49:73:6B:52:87
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 019A4F2B4FF43D0C72F48062B9124CF310A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
Manifest number: 1751
Signing time: Tue 04 Nov 2025 14:00:29 +0000
Manifest this update: Tue 04 Nov 2025 14:00:29 +0000
Manifest next update: Wed 05 Nov 2025 14:00:29 +0000
Files and hashes: 1: 4ZdVBNZ_S4MPlECyp4uaoJNDnoM.roa (hash: ZgQab93TqT8XuUNyna7Zjv75Gd8+1Mfr5tNmb6ereyU=)
2: AJM-6Zm39xTWDgtragWJQRfYqM8.roa (hash: VMj18TvJaA2yJmPMgPMt6hsb7JE59Ed9FEylWh2nn3U=)
3: MtUNZWuEtv_AgAvU3cIWhKTi-Gg.roa (hash: ySbSia2jLKcCoCeLqt1N9qsuOZJeTIf7i11M9Z0B4Zw=)
4: Y4NmZbZuhs1viCkczDnrgcVKsPA.roa (hash: iZ00KX52faCxPLqFBBgbaxFYB5kh7DTKiprocjPi7OY=)
5: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: 241QWenJikrK0fNuh6Z6uvxwNWHPgflecx2VI+AX/RU=)
6: exu2V3MDMWUgQoAAO324t6RZezE.roa (hash: vzXnLaEVU/+BdpdjEE/HgCx55xSHkRHFXGxKZLhvrto=)
7: qYTgMdJGkAUtjDYiuMMhTxfJQuE.roa (hash: s9YOPVDXUwDCUpFUzrcMrXpu0dW70tO1ii9LPQmYpUc=)
8: sWIjgX3QVxVSX26S9pHF5E3pjN4.roa (hash: d9FlA8hG+kNnltDamJSIQnXgFCOCvEUasZrP2Lzdiqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:4f:f4:3d:0c:72:f4:80:62:b9:12:4c:f3:10:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Nov 4 14:00:29 2025 GMT
Not After : Nov 5 14:00:29 2025 GMT
Subject: CN=b2231bf4fb34e4a9ad8fe1d3c460b649736b5287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c2:68:12:59:d4:4e:df:71:e4:9d:4d:12:75:
54:43:97:dc:57:30:88:b1:86:70:7b:71:11:f1:91:
7f:89:a6:3a:11:21:9f:19:0e:ee:41:01:a1:cf:d2:
d3:41:2b:25:c6:ca:5e:7a:22:09:17:96:ee:81:5f:
b4:e6:1e:bc:23:c5:db:62:27:8b:3d:ae:2a:0d:23:
56:8f:68:a0:63:2f:85:2d:84:f7:b8:cf:e4:73:7d:
a0:d0:53:b9:30:46:27:00:14:4f:9c:bc:5b:6e:1e:
a4:cc:23:c1:06:2e:4b:8f:a5:e6:da:71:ff:83:77:
46:a6:2e:fb:49:b6:c5:e4:0f:9e:62:05:43:b5:b7:
7e:f3:01:11:2d:47:b2:dc:57:ac:19:62:1f:99:d6:
9d:8b:3c:ec:3f:7a:3d:00:fb:54:2a:42:f4:45:4b:
c1:6a:64:85:a8:6e:0b:1b:3b:9f:6e:08:d4:b7:48:
7a:61:40:0e:12:12:3e:08:f9:ac:16:69:94:1b:57:
20:a9:8c:41:68:d1:60:8f:a8:49:eb:e3:00:38:68:
c1:cf:c6:16:f0:50:c4:41:ab:d9:9f:b8:f1:6a:e9:
b2:52:5c:cc:a7:cb:46:a7:66:15:cb:2c:af:ca:d6:
09:29:fe:1f:31:15:41:0f:9f:da:f1:8d:d3:b1:e0:
c4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:23:1B:F4:FB:34:E4:A9:AD:8F:E1:D3:C4:60:B6:49:73:6B:52:87
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1d:c1:f8:df:18:bc:b9:fd:03:ef:07:52:51:8e:9f:e5:fd:
b6:ab:81:c5:1f:7b:2e:c7:fd:00:16:d8:3e:4d:22:b0:95:e0:
e8:67:c3:fe:88:6b:e6:86:f2:d2:41:fd:02:06:48:54:60:2d:
c6:57:e2:54:1f:8e:46:97:27:c4:82:dd:8e:55:08:ad:3e:10:
9d:af:c4:67:ca:14:d6:69:f6:58:33:65:6c:a9:87:b0:23:2e:
92:f1:5f:25:60:3f:dd:f6:e8:fb:5d:7a:f9:df:4d:a2:1b:c4:
01:b4:09:13:d7:af:74:41:cc:91:7e:1a:46:32:df:8c:a0:30:
a5:24:a1:20:03:6b:42:94:cc:28:ea:f6:ae:48:72:73:2f:b8:
6a:80:60:4b:56:aa:93:ea:fe:73:b9:c3:a3:75:d8:aa:43:12:
ae:a0:5e:06:f5:a2:b6:ee:81:0f:6f:80:e1:0b:7e:e8:36:f6:
92:79:5c:8f:53:bc:0e:48:14:e9:df:15:6e:c3:2b:17:d2:05:
d9:84:fb:d8:fc:59:d0:8c:f8:07:bf:38:60:c3:ec:1c:e9:d6:
83:29:e2:21:7a:48:f8:8d:76:c2:a7:f8:8a:16:e8:ab:d1:1c:
a7:f2:85:c3:3e:52:d5:e8:34:98:6b:ec:4c:10:03:41:75:66:
3e:48:e5:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK0/0PQxy9IBiuRJM8xCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw
ZmM2MmEwHhcNMjUxMTA0MTQwMDI5WhcNMjUxMTA1MTQwMDI5WjAzMTEwLwYDVQQD
EyhiMjIzMWJmNGZiMzRlNGE5YWQ4ZmUxZDNjNDYwYjY0OTczNmI1Mjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38JoElnUTt9x5J1NEnVUQ5fcVzCI
sYZwe3ER8ZF/iaY6ESGfGQ7uQQGhz9LTQSslxspeeiIJF5bugV+05h68I8XbYieL
Pa4qDSNWj2igYy+FLYT3uM/kc32g0FO5MEYnABRPnLxbbh6kzCPBBi5Lj6Xm2nH/
g3dGpi77SbbF5A+eYgVDtbd+8wERLUey3FesGWIfmdadizzsP3o9APtUKkL0RUvB
amSFqG4LGzufbgjUt0h6YUAOEhI+CPmsFmmUG1cgqYxBaNFgj6hJ6+MAOGjBz8YW
8FDEQavZn7jxaumyUlzMp8tGp2YVyyyvytYJKf4fMRVBD5/a8Y3TseDEfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIjG/T7NOSprY/h08Rgtklza1KHMB8GA1UdIwQY
MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt
MjYxNzBkYTRhMGIxLzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx
LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWR3B+N8Y
vLn9A+8HUlGOn+X9tquBxR97Lsf9ABbYPk0isJXg6GfD/ohr5oby0kH9AgZIVGAt
xlfiVB+ORpcnxILdjlUIrT4Qna/EZ8oU1mn2WDNlbKmHsCMukvFfJWA/3fbo+116
+d9NohvEAbQJE9evdEHMkX4aRjLfjKAwpSShIANrQpTMKOr2rkhycy+4aoBgS1aq
k+r+c7nDo3XYqkMSrqBeBvWitu6BD2+A4Qt+6Db2knlcj1O8DkgU6d8VbsMrF9IF
2YT72PxZ0Iz4B784YMPsHOnWgyniIXpI+I12wqf4ihboq9Ecp/KFwz5S1eg0mGvs
TBADQXVmPkjliw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:23:17 2025 by rpki-client