Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
File: bcXjzvXaXn_fw2TF1aBALTpnhtw.mft (raw, json)
Hash identifier: xvZklINysU7QG3cb92UsS7dI+b2hHRKCbRsHfXugSAY=
Subject key identifier: 16:A2:C5:41:A3:91:DC:AD:63:74:6A:26:47:35:2E:86:8A:28:B6:B2
Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
Certificate issuer: /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Certificate serial: 019A4E86AB0622E5A8F0823597706989B98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
Manifest number: 0FA7
Signing time: Tue 04 Nov 2025 11:00:39 +0000
Manifest this update: Tue 04 Nov 2025 11:00:39 +0000
Manifest next update: Wed 05 Nov 2025 11:00:39 +0000
Files and hashes: 1: DoUsi8lBp24xgpF7Cj5k0M8Xf1k.roa (hash: 8DoQ+UjZ0y3DouoJyhRBNdxsuMKM8IPBGox8SgTwz/M=)
2: bcXjzvXaXn_fw2TF1aBALTpnhtw.crl (hash: vvDFsrIMKxHuFZN8CM2X8Qsl0vwJGg/VOibF8AJNmng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:ab:06:22:e5:a8:f0:82:35:97:70:69:89:b9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Validity
Not Before: Nov 4 11:00:39 2025 GMT
Not After : Nov 5 11:00:39 2025 GMT
Subject: CN=16a2c541a391dcad63746a2647352e868a28b6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:73:17:b3:42:19:7a:59:96:e2:d3:6f:bf:
b5:25:ac:ac:f9:11:dd:cf:5f:f6:aa:7c:b6:ff:c2:
38:39:99:63:3f:77:60:40:ec:8e:08:5e:f7:ef:b7:
df:cb:8a:cf:db:c8:26:7a:05:60:ef:31:8e:42:7f:
4b:8a:b0:65:1c:94:f4:85:12:9b:82:56:ee:0e:aa:
7c:89:05:3b:81:4b:28:61:22:93:2c:99:73:ee:da:
06:b1:e5:f3:7f:ca:e6:20:b0:b1:ac:50:db:03:a5:
04:45:de:b5:71:9b:1c:41:22:5a:e6:88:6e:c1:79:
ec:1a:17:82:49:62:57:a0:e5:48:5e:04:30:52:d7:
67:e3:c5:6a:91:66:9d:1e:b9:4e:6c:00:b4:63:4a:
d6:25:49:53:15:74:f2:a3:80:2c:88:7e:1f:ac:a1:
7a:fe:f9:aa:14:a7:23:a5:73:00:7a:0e:4f:14:39:
90:5c:5b:18:f7:4a:20:68:db:e5:0c:eb:a1:6f:51:
47:7e:2b:1e:6c:28:3d:b4:2a:65:22:5f:a0:93:21:
0a:22:82:3f:53:e8:ed:05:b9:22:7f:d2:46:b9:df:
a9:60:3f:53:6e:12:3b:f3:6e:f4:91:3b:c1:a4:e4:
5f:71:06:ef:65:3f:e6:ea:8f:fe:e1:3f:b2:be:f5:
31:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A2:C5:41:A3:91:DC:AD:63:74:6A:26:47:35:2E:86:8A:28:B6:B2
X509v3 Authority Key Identifier:
keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:03:3e:0f:fe:6c:eb:ad:6a:2d:29:9e:37:0d:f0:54:e8:7a:
8c:ac:2d:9e:95:58:b5:fb:d0:1c:25:e3:14:25:22:e0:8b:9b:
9b:78:70:89:bd:bb:09:e0:b7:9b:bd:b4:26:8f:c5:3c:80:29:
e4:f5:e0:4c:cf:c7:6c:3e:60:63:c5:cf:c3:49:80:26:d4:cc:
dc:4a:53:76:00:59:7e:5b:33:54:a4:7f:af:dc:9d:58:c9:a6:
0f:d4:6c:b7:60:12:8a:5f:a5:17:f5:83:7a:2d:54:33:ea:ca:
eb:df:5b:51:b5:82:c6:3f:76:a6:27:07:f5:8c:94:31:95:d4:
83:76:84:7a:03:3b:11:5a:f0:87:8d:47:f0:5e:13:7b:5c:9b:
5c:f4:88:7f:9f:23:6d:4f:c7:6c:b0:cc:97:6f:f3:6a:65:91:
44:dc:4f:00:d8:10:70:59:94:29:82:24:57:0f:f8:04:39:1d:
12:46:0f:fa:02:df:18:c0:ec:9b:97:30:a6:d9:f3:4a:48:97:
de:4b:be:33:74:4b:17:3a:a0:ab:be:8a:38:f1:f2:c0:41:ca:
1a:9d:2d:d6:33:a6:ea:98:2f:d1:e9:fb:eb:a5:d8:7a:37:05:
70:96:bc:e9:e2:f1:fe:8f:5c:a3:39:7c:d0:d8:d8:6b:bc:be:
99:7f:1d:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhqsGIuWo8II1l3BpibmNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYzVlM2NlZjVkYTVlN2ZkZmMzNjRjNWQ1YTA0MDJkM2E2
Nzg2ZGMwHhcNMjUxMTA0MTEwMDM5WhcNMjUxMTA1MTEwMDM5WjAzMTEwLwYDVQQD
EygxNmEyYzU0MWEzOTFkY2FkNjM3NDZhMjY0NzM1MmU4NjhhMjhiNmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1tzF7NCGXpZluLTb7+1Jays+RHd
z1/2qny2/8I4OZljP3dgQOyOCF7377ffy4rP28gmegVg7zGOQn9LirBlHJT0hRKb
glbuDqp8iQU7gUsoYSKTLJlz7toGseXzf8rmILCxrFDbA6UERd61cZscQSJa5ohu
wXnsGheCSWJXoOVIXgQwUtdn48VqkWadHrlObAC0Y0rWJUlTFXTyo4AsiH4frKF6
/vmqFKcjpXMAeg5PFDmQXFsY90ogaNvlDOuhb1FHfisebCg9tCplIl+gkyEKIoI/
U+jtBbkif9JGud+pYD9TbhI78270kTvBpORfcQbvZT/m6o/+4T+yvvUxRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaixUGjkdytY3RqJkc1LoaKKLayMB8GA1UdIwQY
MBaAFG3F48712l5/38NkxdWgQC06Z4bcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYt
Y2RjYzk2NjA3YjlhLzEvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYtY2RjYzk2NjA3Yjlh
LzEvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQM+D/5s
661qLSmeNw3wVOh6jKwtnpVYtfvQHCXjFCUi4Iubm3hwib27CeC3m720Jo/FPIAp
5PXgTM/HbD5gY8XPw0mAJtTM3EpTdgBZflszVKR/r9ydWMmmD9Rst2ASil+lF/WD
ei1UM+rK699bUbWCxj92picH9YyUMZXUg3aEegM7EVrwh41H8F4Te1ybXPSIf58j
bU/HbLDMl2/zamWRRNxPANgQcFmUKYIkVw/4BDkdEkYP+gLfGMDsm5cwptnzSkiX
3ku+M3RLFzqgq76KOPHywEHKGp0t1jOm6pgv0en766XYejcFcJa86eLx/o9cozl8
0NjYa7y+mX8dhQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:31 2025 by rpki-client