Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
File: BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft (raw, json)
Hash identifier: sMlP2+9Do/8B3F3ihil5FgJkEHpYLA3qUUwZcSlUzcY=
Subject key identifier: FB:E6:0A:F3:34:57:6C:BE:26:42:0C:07:3B:CD:AA:65:24:95:00:2B
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 019A4DE1676C7A4276692B84E6620EDE13E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
Manifest number: 171D
Signing time: Tue 04 Nov 2025 08:00:08 +0000
Manifest this update: Tue 04 Nov 2025 08:00:08 +0000
Manifest next update: Wed 05 Nov 2025 08:00:08 +0000
Files and hashes: 1: AzqwEnHg1SyZac2xM8YrOrTBmKs.roa (hash: bWS77EdYPn213uSVuq+Rq1Onu0IbUZI9gFRwi3wlTog=)
2: BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl (hash: map9k/BW4Phv+sT6fGm7AI9aHpdcD1PeMQioev93tzA=)
3: EBKkLbAWIgUN_1ExAM_3PwhqLzk.roa (hash: sabysmysP8b4aNHHqq6eNU7v0c6260EktWAc+FuDTDI=)
4: EGHE8mHjGVObxzVhlLsbqxuIFaE.roa (hash: g8QL/OjyGBw2KnLbgHtF/B7984D0evEQPaL4gj/TGvY=)
5: RUBK6YgAvaDdWQcnoq_c2QP-xe4.roa (hash: Uqv+aEnH2dA3s4zAi+ZXrmM5vUYHFe7H5OkNDJW1qSI=)
6: lW6KevOszM5D-5TUsA8x1cxhIzM.roa (hash: DXJ77HAEhtTW/nPv0xeO4AWTtb6lD2Omn5LCPAFZFkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:67:6c:7a:42:76:69:2b:84:e6:62:0e:de:13:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Nov 4 08:00:08 2025 GMT
Not After : Nov 5 08:00:08 2025 GMT
Subject: CN=fbe60af334576cbe26420c073bcdaa652495002b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6c:87:3a:4c:92:2c:df:50:be:9c:be:e6:f3:
71:35:14:b6:3b:32:92:cc:65:85:7c:19:a2:24:86:
47:ce:45:97:41:4d:8e:f9:ae:fe:79:5d:32:00:99:
a5:ca:51:d7:3c:c0:f0:11:a1:80:c6:2a:d5:c2:0f:
58:85:f0:b7:cf:2d:fb:44:bc:2a:dc:fc:6e:5f:3b:
a8:00:64:78:47:f0:1b:20:c6:67:87:6d:49:57:7a:
99:11:a3:8c:48:d3:d3:8f:b2:59:ae:81:fe:69:f3:
6c:96:15:b8:98:88:14:f4:94:73:9b:b9:fa:4b:e4:
94:52:8d:9c:24:c6:91:47:12:77:e8:e1:a5:09:09:
c4:a6:0d:66:88:ac:9f:71:f6:27:ee:d0:a2:6a:40:
31:ec:9a:76:75:1e:6d:ed:d9:28:e1:fb:d4:8b:fa:
05:bc:01:03:48:ae:28:db:a8:81:11:e0:21:2d:af:
9d:fe:c6:24:8f:53:df:45:d7:50:ee:3c:cc:9d:9d:
ab:03:48:36:b6:11:51:68:25:89:d0:58:e2:26:53:
e8:cc:97:35:95:0c:72:4b:09:1c:04:fa:22:a4:be:
4e:e6:22:b6:20:e8:cd:19:9e:18:bc:a7:1a:b1:3a:
a8:6e:77:81:1b:27:c2:63:78:fc:c2:b8:dd:a1:12:
4c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E6:0A:F3:34:57:6C:BE:26:42:0C:07:3B:CD:AA:65:24:95:00:2B
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c8:dd:25:fc:2d:a5:06:d4:3c:7a:b1:01:11:c0:0e:2c:c3:
08:e2:39:92:4b:0f:0f:1d:bb:db:72:5e:72:60:6e:bc:4d:bc:
f2:5e:93:91:f5:35:b7:80:34:1c:c2:cd:b6:9f:f2:d7:57:91:
b2:f4:55:45:1a:c0:c8:8d:fb:cd:cc:43:17:06:f2:cc:ea:45:
f7:33:c0:bf:77:5e:13:18:3c:37:31:fc:2d:be:f7:7e:e2:3c:
ad:5b:63:b6:12:a7:b0:06:b8:24:e4:d7:5d:e0:4e:c1:a1:06:
1e:ec:9b:08:dd:ff:92:45:d6:0e:e9:0c:f7:a7:86:fc:cf:89:
79:a7:63:a3:03:d3:33:c8:d2:60:90:9c:4f:37:b6:3c:1a:fc:
57:e8:00:95:e0:c3:58:e2:ad:da:03:be:06:45:d8:e8:07:bb:
22:00:96:4e:24:a3:f7:b4:98:a4:f7:04:3e:f7:ca:70:94:d3:
a5:68:6c:f4:9c:98:91:03:bf:93:09:0a:72:6b:82:a6:74:49:
e9:a0:a0:8d:a7:a8:85:47:07:80:15:8d:dc:71:03:d7:7c:18:
e4:68:83:38:f3:50:65:ff:e4:0e:c5:c2:f3:6c:77:ce:3e:ef:
90:e0:d8:8a:60:fe:38:39:cd:9e:4c:be:f4:8a:8f:56:ec:b7:
9e:4e:0e:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4WdsekJ2aSuE5mIO3hPpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MjBlYWRiMmUxNTYyYjRlMmU0ZjQ4MDc3MmMzNjg4N2E3
NzdmMjQwHhcNMjUxMTA0MDgwMDA4WhcNMjUxMTA1MDgwMDA4WjAzMTEwLwYDVQQD
EyhmYmU2MGFmMzM0NTc2Y2JlMjY0MjBjMDczYmNkYWE2NTI0OTUwMDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmyHOkySLN9Qvpy+5vNxNRS2OzKS
zGWFfBmiJIZHzkWXQU2O+a7+eV0yAJmlylHXPMDwEaGAxirVwg9YhfC3zy37RLwq
3PxuXzuoAGR4R/AbIMZnh21JV3qZEaOMSNPTj7JZroH+afNslhW4mIgU9JRzm7n6
S+SUUo2cJMaRRxJ36OGlCQnEpg1miKyfcfYn7tCiakAx7Jp2dR5t7dko4fvUi/oF
vAEDSK4o26iBEeAhLa+d/sYkj1PfRddQ7jzMnZ2rA0g2thFRaCWJ0FjiJlPozJc1
lQxySwkcBPoipL5O5iK2IOjNGZ4YvKcasTqobneBGyfCY3j8wrjdoRJM/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvmCvM0V2y+JkIMBzvNqmUklQArMB8GA1UdIwQY
MBaAFAYg6tsuFWK04uT0gHcsNoh6d38kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQt
YTVmZGI1NzBmZTlhLzEvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQtYTVmZGI1NzBmZTlh
LzEvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcjdJfwt
pQbUPHqxARHADizDCOI5kksPDx2723JecmBuvE288l6TkfU1t4A0HMLNtp/y11eR
svRVRRrAyI37zcxDFwbyzOpF9zPAv3deExg8NzH8Lb73fuI8rVtjthKnsAa4JOTX
XeBOwaEGHuybCN3/kkXWDukM96eG/M+JeadjowPTM8jSYJCcTze2PBr8V+gAleDD
WOKt2gO+BkXY6Ae7IgCWTiSj97SYpPcEPvfKcJTTpWhs9JyYkQO/kwkKcmuCpnRJ
6aCgjaeohUcHgBWN3HED13wY5GiDOPNQZf/kDsXC82x3zj7vkODYimD+ODnNnky+
9IqPVuy3nk4OXw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:00 2025 by rpki-client