
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
File: bkBn13v-qZ3yXOXgipIT0RKAFM8.mft (raw, json)
Hash identifier: WeVxlVnVToN552f9UDnH6jkHtrzGibcw6bLzRo2A0O8=
Subject key identifier: D4:C0:C4:9D:4F:B1:4B:7F:F2:55:AE:8F:A2:60:3D:84:D6:FF:06:90
Authority key identifier: 6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
Certificate issuer: /CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Certificate serial: 0199FD3441EFD3CB96E461374B4439920211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 16:01:24 +0000
Manifest this update: Sun 19 Oct 2025 16:01:24 +0000
Manifest next update: Mon 20 Oct 2025 16:01:24 +0000
Files and hashes: 1: adNDLvUmYkNZRHIO-8EvQkOny3U.roa (hash: JFJ+lodVDeHLySNvitcsYBxq8cfuImJHPxEA0H+DjjY=)
2: bkBn13v-qZ3yXOXgipIT0RKAFM8.crl (hash: hQO68ComlFo270ai/CQ2QjfPChbbIvOFI1Nxd6ELfrY=)
3: iktdBTw9X8o6AOOEkLAyuZNK_gg.roa (hash: 2nzjnmBtk5vklJiWyvmO30xEFTmYF5gvtQ11fyrTZUE=)
4: mQ9zePbKKPrER63rktmN5-Z8AoQ.roa (hash: qfFxiv4hVcYLNON7vIi9UIknKo4icjwq21EoSvpzScg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:41:ef:d3:cb:96:e4:61:37:4b:44:39:92:02:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Validity
Not Before: Oct 19 16:01:24 2025 GMT
Not After : Oct 20 16:01:24 2025 GMT
Subject: CN=d4c0c49d4fb14b7ff255ae8fa2603d84d6ff0690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:e2:fb:bc:c4:b0:e8:f9:1f:c2:ca:82:08:
5b:9f:cf:e9:14:82:07:45:5f:9e:6a:a8:a2:5b:86:
d2:c1:f1:7f:e1:05:1c:c4:9e:78:d0:6c:5e:64:ba:
b6:30:f2:b7:e5:1b:dc:11:7c:fc:21:d4:f9:78:48:
da:2d:a6:08:5d:c5:09:0d:9c:1a:0f:a1:36:48:5e:
40:7f:a5:a3:84:7a:23:9e:00:db:f6:85:f1:36:a1:
e1:76:9e:8a:5c:d9:ba:ea:da:97:ef:a7:14:d5:45:
be:63:18:a7:9b:d0:e4:7e:f5:04:c3:71:78:d0:fb:
58:79:0e:cc:4e:ed:ac:51:13:9a:1a:11:c9:ac:4c:
90:15:c8:c2:bf:29:05:db:0f:18:8f:0a:db:5c:ea:
68:ba:75:da:84:b9:f6:e2:8f:e4:ea:a3:05:8f:59:
9b:cd:75:6b:38:4d:ba:bd:35:5f:a4:a7:8d:ad:ca:
33:44:7e:77:de:77:6d:f7:45:bd:a6:98:fa:ae:53:
d1:69:fa:d9:b5:e5:d9:42:19:c7:4f:03:fc:5c:60:
90:03:6b:f1:81:04:6e:3a:5c:a0:c6:8a:28:01:3a:
d8:c3:24:e8:99:fc:83:1a:ec:ab:86:8d:30:5d:b6:
d4:af:c9:0d:99:1d:34:c2:83:71:e3:98:4f:8e:6c:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C0:C4:9D:4F:B1:4B:7F:F2:55:AE:8F:A2:60:3D:84:D6:FF:06:90
X509v3 Authority Key Identifier:
keyid:6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a2:5f:bb:6d:75:f7:ed:6a:9d:4a:07:06:16:e6:09:57:8b:
a1:78:31:b0:f4:48:42:b9:36:14:a4:95:b5:b0:a1:e1:f7:35:
13:c4:3d:38:06:07:fc:6b:dc:bd:39:b0:a4:a9:e6:95:b4:11:
7a:f0:61:05:eb:20:2b:cb:3e:de:8b:25:0b:df:aa:61:ce:e0:
8d:bf:26:aa:91:09:14:30:82:fd:08:6c:0d:22:a2:d3:de:50:
b7:29:c4:8a:67:e2:5c:5c:50:89:fe:bf:db:46:2d:ff:c9:70:
54:ef:5a:77:f3:71:7f:94:6b:0f:c2:92:3a:b0:e1:61:05:bf:
a4:ce:21:c4:3c:14:ac:43:57:2f:37:e7:e7:90:b0:82:06:af:
ac:6b:f3:13:26:ba:06:33:c0:5e:a1:ab:a5:1d:d2:d1:09:5e:
b1:c1:10:97:e8:d5:a5:f7:e9:20:8c:c1:4b:dd:b7:28:45:7c:
05:a6:2b:15:f5:dc:b7:d0:dd:8c:82:1a:3b:49:6c:eb:7d:51:
9d:79:d9:b4:43:9c:54:05:85:4e:d6:90:e2:55:e2:64:c3:ca:
31:f6:b3:93:ff:85:d2:3e:6e:35:83:46:f1:1d:2e:74:b0:e6:
43:05:f3:b5:d3:af:58:dd:81:04:1e:9a:53:26:ce:f3:f6:59:
06:6f:3d:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NEHv08uW5GE3S0Q5kgIRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNDA2N2Q3N2JmZWE5OWRmMjVjZTVlMDhhOTIxM2QxMTI4
MDE0Y2YwHhcNMjUxMDE5MTYwMTI0WhcNMjUxMDIwMTYwMTI0WjAzMTEwLwYDVQQD
EyhkNGMwYzQ5ZDRmYjE0YjdmZjI1NWFlOGZhMjYwM2Q4NGQ2ZmYwNjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cDi+7zEsOj5H8LKgghbn8/pFIIH
RV+eaqiiW4bSwfF/4QUcxJ540GxeZLq2MPK35RvcEXz8IdT5eEjaLaYIXcUJDZwa
D6E2SF5Af6WjhHojngDb9oXxNqHhdp6KXNm66tqX76cU1UW+Yxinm9DkfvUEw3F4
0PtYeQ7MTu2sUROaGhHJrEyQFcjCvykF2w8YjwrbXOpounXahLn24o/k6qMFj1mb
zXVrOE26vTVfpKeNrcozRH533ndt90W9ppj6rlPRafrZteXZQhnHTwP8XGCQA2vx
gQRuOlygxoooATrYwyTomfyDGuyrho0wXbbUr8kNmR00woNx45hPjmwxEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTAxJ1PsUt/8lWuj6JgPYTW/waQMB8GA1UdIwQY
MBaAFG5AZ9d7/qmd8lzl4IqSE9ESgBTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmtCbjEzdi1xWjN5WE9YZ2lwSVQwUktBRk04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81ODllY2EtM2YxOS00ZTIzLWEzZmIt
MzMwM2Y3MTYyMmY5LzEvYmtCbjEzdi1xWjN5WE9YZ2lwSVQwUktBRk04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81ODllY2EtM2YxOS00ZTIzLWEzZmItMzMwM2Y3MTYyMmY5
LzEvYmtCbjEzdi1xWjN5WE9YZ2lwSVQwUktBRk04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKJfu211
9+1qnUoHBhbmCVeLoXgxsPRIQrk2FKSVtbCh4fc1E8Q9OAYH/GvcvTmwpKnmlbQR
evBhBesgK8s+3oslC9+qYc7gjb8mqpEJFDCC/QhsDSKi095QtynEimfiXFxQif6/
20Yt/8lwVO9ad/Nxf5RrD8KSOrDhYQW/pM4hxDwUrENXLzfn55CwggavrGvzEya6
BjPAXqGrpR3S0QlescEQl+jVpffpIIzBS923KEV8BaYrFfXct9DdjIIaO0ls631R
nXnZtEOcVAWFTtaQ4lXiZMPKMfazk/+F0j5uNYNG8R0udLDmQwXztdOvWN2BBB6a
UybO8/ZZBm89ow==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:50 2025 by rpki-client