Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
File: bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft (raw, json)
Hash identifier: 37m+tt+oXyDQRrWiylcJmkKUhqJB7vGUS4jdyVSWVOY=
Subject key identifier: AD:15:47:38:7D:7E:38:D4:20:86:44:87:09:57:0A:A2:18:72:F9:8A
Authority key identifier: 6E:99:CC:CD:6F:0F:F2:6D:E8:ED:39:36:F4:A6:4B:EE:98:D9:DC:66
Certificate issuer: /CN=6e99cccd6f0ff26de8ed3936f4a64bee98d9dc66
Certificate serial: 0198729860DBDAB3BBDCC3C25A05F45DC5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
Manifest number: 15C8
Signing time: Mon 04 Aug 2025 01:00:45 +0000
Manifest this update: Mon 04 Aug 2025 01:00:45 +0000
Manifest next update: Tue 05 Aug 2025 01:00:45 +0000
Files and hashes: 1: bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl (hash: QcU2XTrQEvBb+qJYry17RPSXgqxs/6WuuxuXXqk8gnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:60:db:da:b3:bb:dc:c3:c2:5a:05:f4:5d:c5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e99cccd6f0ff26de8ed3936f4a64bee98d9dc66
Validity
Not Before: Aug 4 01:00:45 2025 GMT
Not After : Aug 5 01:00:45 2025 GMT
Subject: CN=ad1547387d7e38d42086448709570aa21872f98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:22:1b:50:2a:e4:8f:9b:3d:73:06:7c:49:d7:
fa:d7:2c:64:9c:bc:97:6c:a9:7c:dc:c2:0a:a9:cf:
f3:76:30:e1:97:da:63:b0:d2:41:ff:87:91:b5:c1:
94:55:bb:2d:fb:ca:33:ee:1f:1f:83:0a:18:44:a4:
24:89:22:22:af:dd:84:35:04:43:ee:2c:ca:a8:87:
f9:91:e6:84:ad:2d:f7:fc:a4:81:01:b1:e6:36:d0:
d3:1e:bd:2f:38:c9:6c:dc:e8:0a:63:69:ed:3b:c3:
b9:b0:c5:b3:d4:80:be:83:f5:06:d9:fb:2f:3a:4f:
c6:92:97:d7:cf:81:f9:27:3b:91:de:bb:6f:3d:19:
20:4c:e1:9d:59:cc:8a:e5:32:b0:6f:77:be:cf:61:
f0:6f:81:82:de:79:63:55:93:c4:3d:4e:fd:4a:bf:
cb:a9:5c:b5:41:03:ae:e0:03:e6:08:cc:83:ac:ba:
1e:6f:ac:7f:4f:b0:bf:40:24:5c:14:47:b4:83:48:
4e:86:78:13:b0:f4:7d:c3:ed:3f:07:4f:6b:86:69:
d6:f8:eb:f7:43:39:f5:21:ce:6f:e6:44:0b:41:af:
bd:47:13:05:ae:54:b8:f6:ad:84:be:5e:3c:b0:53:
e3:a5:79:e8:0a:07:b0:a0:df:89:72:6e:e1:10:c1:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:15:47:38:7D:7E:38:D4:20:86:44:87:09:57:0A:A2:18:72:F9:8A
X509v3 Authority Key Identifier:
keyid:6E:99:CC:CD:6F:0F:F2:6D:E8:ED:39:36:F4:A6:4B:EE:98:D9:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:27:f8:9a:43:0e:09:95:41:4c:15:11:e3:b4:d1:53:68:e5:
bf:3a:8f:5b:87:d2:44:5a:08:e8:e0:41:6a:17:6c:4a:01:37:
5e:94:ab:aa:df:38:b4:f8:6b:e5:d1:6f:e9:60:62:e5:64:29:
cc:47:6f:bb:0f:03:e4:0b:ca:b2:c9:12:98:6f:5d:ba:65:51:
2d:55:2f:ce:35:40:50:b9:57:81:12:a2:33:14:3d:b6:24:e7:
5d:71:37:70:2e:29:07:b1:69:7e:28:e9:24:14:19:b8:0b:a4:
d3:3e:46:8b:ce:1b:7e:21:da:63:b7:ca:fe:69:0f:f8:ab:88:
f6:b8:07:76:51:dd:89:be:fb:0f:55:ba:5c:91:cd:66:90:e2:
da:ff:d8:0a:59:e8:c4:f6:9c:0c:20:81:30:df:8c:70:29:2f:
fd:a4:5d:c9:9e:c7:eb:09:d0:fb:24:50:cc:79:ff:63:63:6f:
92:c0:76:e6:fc:dd:8b:3f:09:36:c4:fb:97:ce:b8:34:7e:d4:
7d:32:90:ce:d4:ca:fb:74:e9:7f:7e:55:32:01:a2:e7:d0:f9:
85:f3:58:fa:56:b9:9c:56:ff:27:e9:0d:33:18:2f:03:84:75:
d5:8e:b7:03:a9:1b:78:36:1f:12:eb:86:1a:38:68:25:71:d7:
e6:38:a7:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymGDb2rO73MPCWgX0XcXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlOTljY2NkNmYwZmYyNmRlOGVkMzkzNmY0YTY0YmVlOThk
OWRjNjYwHhcNMjUwODA0MDEwMDQ1WhcNMjUwODA1MDEwMDQ1WjAzMTEwLwYDVQQD
EyhhZDE1NDczODdkN2UzOGQ0MjA4NjQ0ODcwOTU3MGFhMjE4NzJmOThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iIbUCrkj5s9cwZ8Sdf61yxknLyX
bKl83MIKqc/zdjDhl9pjsNJB/4eRtcGUVbst+8oz7h8fgwoYRKQkiSIir92ENQRD
7izKqIf5keaErS33/KSBAbHmNtDTHr0vOMls3OgKY2ntO8O5sMWz1IC+g/UG2fsv
Ok/GkpfXz4H5JzuR3rtvPRkgTOGdWcyK5TKwb3e+z2Hwb4GC3nljVZPEPU79Sr/L
qVy1QQOu4APmCMyDrLoeb6x/T7C/QCRcFEe0g0hOhngTsPR9w+0/B09rhmnW+Ov3
Qzn1Ic5v5kQLQa+9RxMFrlS49q2Evl48sFPjpXnoCgewoN+Jcm7hEMH/HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0VRzh9fjjUIIZEhwlXCqIYcvmKMB8GA1UdIwQY
MBaAFG6ZzM1vD/Jt6O05NvSmS+6Y2dxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnBuTXpXOFA4bTNvN1RrMjlLWkw3cGpaM0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wYmU4MWEtYTQ5YS00NjgyLTgwZWUt
ZTdmMGI3ODliYzczLzEvYnBuTXpXOFA4bTNvN1RrMjlLWkw3cGpaM0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8wYmU4MWEtYTQ5YS00NjgyLTgwZWUtZTdmMGI3ODliYzcz
LzEvYnBuTXpXOFA4bTNvN1RrMjlLWkw3cGpaM0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCf4mkMO
CZVBTBUR47TRU2jlvzqPW4fSRFoI6OBBahdsSgE3XpSrqt84tPhr5dFv6WBi5WQp
zEdvuw8D5AvKsskSmG9dumVRLVUvzjVAULlXgRKiMxQ9tiTnXXE3cC4pB7Fpfijp
JBQZuAuk0z5Gi84bfiHaY7fK/mkP+KuI9rgHdlHdib77D1W6XJHNZpDi2v/YClno
xPacDCCBMN+McCkv/aRdyZ7H6wnQ+yRQzHn/Y2NvksB25vzdiz8JNsT7l864NH7U
fTKQztTK+3Tpf35VMgGi59D5hfNY+la5nFb/J+kNMxgvA4R11Y63A6kbeDYfEuuG
GjhoJXHX5jinqw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:13 2025 by rpki-client