Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
File: BUdoDlOuWJdMtpQdCGldPA3swq4.mft (raw, json)
Hash identifier: WyIwusbcohuT9TVb6LL58IywUr5GmV3dQ7Obogtb76U=
Subject key identifier: 4B:8C:C0:3D:5D:16:F3:A2:8C:A3:0E:44:C1:79:22:C6:DA:9F:A3:A0
Authority key identifier: 05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE
Certificate issuer: /CN=0547680e53ae58974cb6941d08695d3c0decc2ae
Certificate serial: 019A515105759F170460D35B5447BDC3BC77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
Manifest number: 020B
Signing time: Wed 05 Nov 2025 00:00:55 +0000
Manifest this update: Wed 05 Nov 2025 00:00:55 +0000
Manifest next update: Thu 06 Nov 2025 00:00:55 +0000
Files and hashes: 1: BUdoDlOuWJdMtpQdCGldPA3swq4.crl (hash: GQc9uCAmXt27Xs6Rxkq87yy1mqUMKIX8NuwWDofIYbE=)
2: zV2FqjFlGJe1sQ7mobIeiW5XHzk.roa (hash: qBKcaNstJOD1ItKIM/todQYRv+HqCOCgyFPfIIjpV2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:05:75:9f:17:04:60:d3:5b:54:47:bd:c3:bc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0547680e53ae58974cb6941d08695d3c0decc2ae
Validity
Not Before: Nov 5 00:00:55 2025 GMT
Not After : Nov 6 00:00:55 2025 GMT
Subject: CN=4b8cc03d5d16f3a28ca30e44c17922c6da9fa3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:92:83:46:6e:2e:56:10:ee:d6:36:02:53:8e:
87:d8:48:78:8a:af:68:eb:96:26:93:12:9e:de:71:
62:91:ac:fc:a7:7e:aa:d9:56:a9:8f:0a:32:3a:20:
3d:a8:9e:c0:62:5f:d2:11:07:04:18:a6:a9:35:be:
bf:ee:73:27:d8:5c:fa:9a:31:88:f5:66:27:c4:e4:
07:e8:bc:81:a8:f6:fb:07:93:c9:29:89:50:8b:b4:
04:5a:dc:58:c3:1d:2f:8b:be:2e:c0:bd:f0:35:0d:
9c:98:38:2f:fb:fe:c0:5e:4d:05:85:23:c9:e5:4d:
24:68:a3:2b:b2:df:ba:84:86:9c:77:26:f1:21:19:
76:84:b2:18:0f:af:3a:76:69:70:c1:ea:23:31:40:
7c:59:82:df:08:ef:75:f9:47:6f:38:6b:53:25:21:
89:97:37:8c:8c:e8:18:40:90:d0:be:23:73:f9:b8:
06:aa:21:ca:d1:1b:25:ba:f7:f5:4c:2d:93:86:ed:
60:28:78:f6:b4:76:f9:4f:e4:b4:21:4c:70:1b:b8:
64:76:39:11:30:aa:0f:88:ce:f7:fb:dc:4e:a2:57:
04:3e:36:30:62:26:39:69:16:00:77:78:c7:93:9c:
77:40:b1:db:0b:b3:c0:bb:46:88:d3:c2:c9:77:0f:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8C:C0:3D:5D:16:F3:A2:8C:A3:0E:44:C1:79:22:C6:DA:9F:A3:A0
X509v3 Authority Key Identifier:
keyid:05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d7:e0:4d:58:3d:26:86:b6:4d:e2:4c:4a:ee:be:65:c7:19:
e6:2e:80:10:b8:85:28:b3:11:75:aa:62:46:6d:c9:69:c1:fc:
16:77:9a:14:28:34:2e:81:e1:f8:2d:57:b0:9b:40:38:ed:a6:
69:85:d0:50:f2:bd:e5:58:d5:ae:e0:19:7c:6a:46:6d:06:56:
5d:98:f6:4a:e5:e7:23:d8:83:6b:7c:0d:8a:07:85:7a:2d:8e:
fc:c3:29:2c:26:32:81:45:c8:77:74:a3:a9:ff:13:5a:c3:a5:
1a:13:6c:07:4f:41:97:6c:12:17:1d:27:b5:b9:cd:a8:44:5c:
3b:03:4e:04:94:b4:b2:3b:37:b2:cf:33:85:2e:0b:59:cb:3f:
89:2d:cc:f5:2c:b3:7b:68:bf:d7:a5:4c:32:9e:67:9a:07:11:
eb:86:aa:78:3f:fd:46:77:f2:90:e1:ac:f5:49:bf:8c:fb:8d:
f0:25:09:1a:7c:a8:6b:d4:da:b7:a6:d7:14:64:aa:79:33:a6:
0c:b7:33:42:18:87:3b:20:04:e6:73:73:52:d6:e1:55:d0:d7:
88:65:66:d8:ca:ab:dc:8a:2b:00:99:e8:76:be:e8:d3:d2:44:
ba:33:67:e1:4b:6e:ab:06:24:0e:7e:c6:d9:9d:a8:29:c8:f2:
ee:11:a7:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUQV1nxcEYNNbVEe9w7x3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDc2ODBlNTNhZTU4OTc0Y2I2OTQxZDA4Njk1ZDNjMGRl
Y2MyYWUwHhcNMjUxMTA1MDAwMDU1WhcNMjUxMTA2MDAwMDU1WjAzMTEwLwYDVQQD
Eyg0YjhjYzAzZDVkMTZmM2EyOGNhMzBlNDRjMTc5MjJjNmRhOWZhM2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZKDRm4uVhDu1jYCU46H2Eh4iq9o
65YmkxKe3nFikaz8p36q2VapjwoyOiA9qJ7AYl/SEQcEGKapNb6/7nMn2Fz6mjGI
9WYnxOQH6LyBqPb7B5PJKYlQi7QEWtxYwx0vi74uwL3wNQ2cmDgv+/7AXk0FhSPJ
5U0kaKMrst+6hIacdybxIRl2hLIYD686dmlwweojMUB8WYLfCO91+UdvOGtTJSGJ
lzeMjOgYQJDQviNz+bgGqiHK0Rsluvf1TC2Thu1gKHj2tHb5T+S0IUxwG7hkdjkR
MKoPiM73+9xOolcEPjYwYiY5aRYAd3jHk5x3QLHbC7PAu0aI08LJdw+29QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuMwD1dFvOijKMORMF5Isban6OgMB8GA1UdIwQY
MBaAFAVHaA5TrliXTLaUHQhpXTwN7MKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xMjI0MGItNzIzNy00OWJmLThmMjEt
ZTRlNmY4ZDdlNzdjLzEvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xMjI0MGItNzIzNy00OWJmLThmMjEtZTRlNmY4ZDdlNzdj
LzEvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINfgTVg9
Joa2TeJMSu6+ZccZ5i6AELiFKLMRdapiRm3JacH8FneaFCg0LoHh+C1XsJtAOO2m
aYXQUPK95VjVruAZfGpGbQZWXZj2SuXnI9iDa3wNigeFei2O/MMpLCYygUXId3Sj
qf8TWsOlGhNsB09Bl2wSFx0ntbnNqERcOwNOBJS0sjs3ss8zhS4LWcs/iS3M9Syz
e2i/16VMMp5nmgcR64aqeD/9RnfykOGs9Um/jPuN8CUJGnyoa9Tat6bXFGSqeTOm
DLczQhiHOyAE5nNzUtbhVdDXiGVm2Mqr3IorAJnodr7o09JEujNn4UtuqwYkDn7G
2Z2oKcjy7hGn7A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:33:05 2025 by rpki-client