Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.mft
File: BhJClTAYPA_O3K258VBVg5LwG4k.mft (raw, json)
Hash identifier: A+cHw5xdjPKg2K95/bQ+QefecTvzLsRYCZcsZvGz3XY=
Subject key identifier: 8D:1C:DD:BE:1F:63:96:26:3D:20:C9:6A:28:2B:CD:27:6E:9A:10:14
Authority key identifier: 06:12:42:95:30:18:3C:0F:CE:DC:AD:B9:F1:50:55:83:92:F0:1B:89
Certificate issuer: /CN=0612429530183c0fcedcadb9f150558392f01b89
Certificate serial: 0199FAD7BBF39B9D4715EC2C82A6626E2EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhJClTAYPA_O3K258VBVg5LwG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.mft
Manifest number: 86
Signing time: Sun 19 Oct 2025 05:01:06 +0000
Manifest this update: Sun 19 Oct 2025 05:01:06 +0000
Manifest next update: Mon 20 Oct 2025 05:01:06 +0000
Files and hashes: 1: BhJClTAYPA_O3K258VBVg5LwG4k.crl (hash: p4tsBf/45F/qhbfEZW6TtSiEIaDLYduV8AplbxYMrYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhJClTAYPA_O3K258VBVg5LwG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:bb:f3:9b:9d:47:15:ec:2c:82:a6:62:6e:2e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0612429530183c0fcedcadb9f150558392f01b89
Validity
Not Before: Oct 19 05:01:06 2025 GMT
Not After : Oct 20 05:01:06 2025 GMT
Subject: CN=8d1cddbe1f6396263d20c96a282bcd276e9a1014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:3e:2e:ce:82:23:0d:c3:f7:92:a2:77:d1:
ae:6c:5a:8f:74:ad:c9:08:44:ee:59:08:a9:44:ff:
cd:80:c0:4c:17:88:f2:61:c4:dd:1f:da:5e:a0:c0:
89:0e:e5:4b:36:41:16:f1:3e:06:4c:36:a4:c9:72:
d8:1c:43:79:1e:f9:d8:26:a1:56:7a:7b:d9:ed:ee:
b8:83:e3:68:5d:0e:75:7c:51:d7:33:40:86:d8:0d:
04:48:21:3b:d6:93:5d:29:e2:1c:ec:67:0a:3a:69:
82:39:5a:0a:c3:b3:5d:1c:ee:20:fa:0e:a4:34:a5:
b2:fa:62:8f:0a:73:ea:50:63:3b:e9:29:7e:45:dc:
0a:4c:36:52:06:38:c7:17:d7:e5:12:8e:c6:f3:3a:
b2:4b:76:8c:88:de:3a:dc:55:ef:d3:72:53:a3:9e:
47:46:38:af:c6:3e:d5:85:48:38:05:67:40:10:be:
bb:26:08:35:de:1c:fd:cd:56:0f:2e:3f:8b:ea:f7:
99:5a:71:32:f5:44:8a:73:42:08:3c:3b:a4:82:ac:
44:26:a6:13:ac:a2:5c:db:3e:0b:b2:1f:c4:ac:95:
c8:6d:0f:c1:02:c3:26:6f:b1:53:60:5f:f6:8e:29:
23:03:d0:2f:c3:46:5f:bc:ba:94:b8:65:9e:b3:c3:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1C:DD:BE:1F:63:96:26:3D:20:C9:6A:28:2B:CD:27:6E:9A:10:14
X509v3 Authority Key Identifier:
keyid:06:12:42:95:30:18:3C:0F:CE:DC:AD:B9:F1:50:55:83:92:F0:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhJClTAYPA_O3K258VBVg5LwG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:61:99:5a:26:7e:39:0b:e8:a7:56:93:8a:46:03:41:05:0f:
12:f4:fd:32:56:db:f6:1c:cf:30:8c:34:4b:0e:9c:b2:be:3c:
ff:d9:f8:b5:85:39:43:3f:ea:a8:5d:d9:55:9a:2f:53:32:4a:
de:a3:22:8e:bd:2e:c1:e7:84:19:00:a1:e6:15:00:1c:dd:ef:
7b:85:76:28:b3:9e:52:62:bb:82:f9:20:58:e1:0d:cf:9b:ca:
6c:9b:f3:8e:ba:cf:3b:13:71:03:52:ef:7c:01:7f:1a:a5:09:
e8:c8:0b:a3:d4:48:b2:e6:8f:31:e0:7c:77:07:b4:4f:96:aa:
db:e1:c8:93:a6:08:bb:4c:b8:d8:2b:ab:70:39:dc:5c:d2:51:
70:7b:04:92:85:d9:bd:d8:53:54:31:31:37:11:dd:12:47:12:
63:0b:72:fe:78:55:4c:63:be:1b:7f:0e:ec:fa:03:9f:c5:ec:
12:4e:a0:73:66:5e:94:f0:8c:42:97:b0:b9:9b:dd:74:ce:12:
01:7d:2c:d0:20:1b:f2:8d:c7:24:cd:37:f4:b0:92:7e:14:ac:
fb:a7:f3:dc:b4:4e:65:2b:44:48:d4:5f:6b:c8:a9:1b:4a:91:
15:2e:a6:ca:4e:62:a2:33:fe:90:09:66:30:6c:d5:43:72:87:
45:92:26:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn617vzm51HFewsgqZibi6vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MTI0Mjk1MzAxODNjMGZjZWRjYWRiOWYxNTA1NTgzOTJm
MDFiODkwHhcNMjUxMDE5MDUwMTA2WhcNMjUxMDIwMDUwMTA2WjAzMTEwLwYDVQQD
Eyg4ZDFjZGRiZTFmNjM5NjI2M2QyMGM5NmEyODJiY2QyNzZlOWExMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC4+Ls6CIw3D95Kid9GubFqPdK3J
CETuWQipRP/NgMBMF4jyYcTdH9peoMCJDuVLNkEW8T4GTDakyXLYHEN5HvnYJqFW
envZ7e64g+NoXQ51fFHXM0CG2A0ESCE71pNdKeIc7GcKOmmCOVoKw7NdHO4g+g6k
NKWy+mKPCnPqUGM76Sl+RdwKTDZSBjjHF9flEo7G8zqyS3aMiN463FXv03JTo55H
Rjivxj7VhUg4BWdAEL67Jgg13hz9zVYPLj+L6veZWnEy9USKc0IIPDukgqxEJqYT
rKJc2z4Lsh/ErJXIbQ/BAsMmb7FTYF/2jikjA9Avw0ZfvLqUuGWes8NVBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0c3b4fY5YmPSDJaigrzSdumhAUMB8GA1UdIwQY
MBaAFAYSQpUwGDwPztytufFQVYOS8BuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmhKQ2xUQVlQQV9PM0syNThWQlZnNUx3RzRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xYzM3ZmEtMDVlOC00NDExLWExNDAt
ZTNiM2ZjYzVlYzIzLzEvQmhKQ2xUQVlQQV9PM0syNThWQlZnNUx3RzRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8xYzM3ZmEtMDVlOC00NDExLWExNDAtZTNiM2ZjYzVlYzIz
LzEvQmhKQ2xUQVlQQV9PM0syNThWQlZnNUx3RzRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2GZWiZ+
OQvop1aTikYDQQUPEvT9Mlbb9hzPMIw0Sw6csr48/9n4tYU5Qz/qqF3ZVZovUzJK
3qMijr0uweeEGQCh5hUAHN3ve4V2KLOeUmK7gvkgWOENz5vKbJvzjrrPOxNxA1Lv
fAF/GqUJ6MgLo9RIsuaPMeB8dwe0T5aq2+HIk6YIu0y42CurcDncXNJRcHsEkoXZ
vdhTVDExNxHdEkcSYwty/nhVTGO+G38O7PoDn8XsEk6gc2ZelPCMQpewuZvddM4S
AX0s0CAb8o3HJM039LCSfhSs+6fz3LROZStESNRfa8ipG0qRFS6myk5iojP+kAlm
MGzVQ3KHRZImHQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:54 2025 by rpki-client