Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
File: bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft (raw, json)
Hash identifier: w8EB0hkpp1VOooXWPrLn1Bg/dZANE+e0FSbR9cCWD8c=
Subject key identifier: FE:4A:43:E9:6F:2B:72:A1:F4:AA:73:35:AE:EA:32:00:3C:83:65:6D
Authority key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
Certificate issuer: /CN=6eae4bb0513980c87f9bac592952c095777ac12e
Certificate serial: 0198D661190CB44E484A8360CA6E701CC6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
Manifest number: 02A5
Signing time: Sat 23 Aug 2025 10:02:24 +0000
Manifest this update: Sat 23 Aug 2025 10:02:24 +0000
Manifest next update: Sun 24 Aug 2025 10:02:24 +0000
Files and hashes: 1: C_vZrzZdhy-uejOZ6_GWZTSm_n0.roa (hash: 79ZNhw6Fw3tlIyCfv3zLmQ4ilyJAmRJY2DfEyitGouQ=)
2: bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl (hash: AwSC73hdtiAEmnmi5S8TPvMn8vyJGS4dq715K7fUo44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:19:0c:b4:4e:48:4a:83:60:ca:6e:70:1c:c6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eae4bb0513980c87f9bac592952c095777ac12e
Validity
Not Before: Aug 23 10:02:24 2025 GMT
Not After : Aug 24 10:02:24 2025 GMT
Subject: CN=fe4a43e96f2b72a1f4aa7335aeea32003c83656d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3b:45:5b:6f:aa:71:c9:e6:ca:a4:7a:ac:b7:
87:4c:d3:b1:00:ce:ad:05:5e:12:ec:1a:3c:73:62:
ff:b3:38:3b:d9:48:fc:c0:0c:6a:a1:be:89:67:07:
1a:a9:af:2a:24:ad:3e:f2:f1:e7:fd:4f:0b:a1:a8:
f6:b2:a6:db:46:95:83:0b:8b:7f:76:95:0c:a3:15:
6e:8c:b2:be:84:19:76:55:f1:1d:39:b9:56:62:79:
05:6c:57:7e:48:d3:44:1b:69:61:06:23:2f:97:8e:
4e:b3:3a:ea:df:e5:ba:f7:19:74:f2:6f:db:4a:92:
0c:9f:85:b7:36:aa:76:3f:30:10:63:4b:97:85:42:
5d:b8:47:a8:97:b5:fb:c5:e6:5e:f4:63:92:c4:58:
78:f6:ad:9c:7a:51:52:f2:f0:7c:4e:0f:72:9e:73:
c1:34:ad:68:09:61:dd:b0:d7:9f:98:05:12:15:7a:
81:83:30:c2:0e:2e:c4:71:61:16:c5:88:81:2b:cd:
f2:b8:6e:69:99:7a:d5:20:d6:cf:0b:62:65:6b:e4:
52:01:6d:dc:a7:0b:f2:b8:c9:4f:ee:e4:3f:82:5a:
ec:f0:52:3c:59:b9:25:75:6f:8b:ce:7b:98:91:a9:
33:5a:45:b8:e6:6b:ed:63:5c:6a:80:53:c3:00:4c:
de:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4A:43:E9:6F:2B:72:A1:F4:AA:73:35:AE:EA:32:00:3C:83:65:6D
X509v3 Authority Key Identifier:
keyid:6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:46:46:99:1f:40:17:6b:ee:c9:4f:95:f1:63:ec:6c:c7:84:
65:a7:15:03:56:65:92:ca:d5:c3:b4:42:de:eb:a0:a5:39:dd:
10:41:d7:2e:5c:bd:8a:ec:8a:64:05:f5:a0:33:ff:ec:da:d2:
9d:2a:73:f5:34:be:94:04:f5:04:95:60:29:72:07:b1:b7:7a:
3b:f7:00:6a:9e:84:db:ae:f1:a6:9d:4b:7e:b7:4e:d6:6a:d5:
4f:3e:ae:54:89:1d:67:76:47:f8:03:02:39:0f:17:62:75:9d:
90:80:de:11:f3:b5:6b:0a:85:e8:95:01:39:bb:6d:e2:9c:3e:
7f:fd:63:8b:7c:7b:8b:5a:be:31:dd:7a:b8:fb:46:5d:03:f9:
0a:af:43:bc:87:72:9e:a8:80:9b:10:2b:a2:63:f4:7e:c2:3b:
c7:b9:e6:b2:5d:86:0d:f7:34:11:3a:62:db:15:69:41:c6:0e:
0b:4f:34:45:a1:fb:e0:54:c9:93:3a:e8:9c:62:7a:c4:6c:4b:
ea:c4:bc:d2:c8:5d:cf:e5:cd:f2:6f:99:3c:49:00:7d:cb:e9:
7b:dc:2e:81:6f:bb:79:ae:37:dd:8f:8d:b4:88:34:07:d5:c3:
3c:12:74:9d:56:9e:a1:04:47:0a:70:b4:1b:eb:6d:a4:fd:33:
90:b4:f3:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYRkMtE5ISoNgym5wHMb1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYWU0YmIwNTEzOTgwYzg3ZjliYWM1OTI5NTJjMDk1Nzc3
YWMxMmUwHhcNMjUwODIzMTAwMjI0WhcNMjUwODI0MTAwMjI0WjAzMTEwLwYDVQQD
EyhmZTRhNDNlOTZmMmI3MmExZjRhYTczMzVhZWVhMzIwMDNjODM2NTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TtFW2+qccnmyqR6rLeHTNOxAM6t
BV4S7Bo8c2L/szg72Uj8wAxqob6JZwcaqa8qJK0+8vHn/U8Loaj2sqbbRpWDC4t/
dpUMoxVujLK+hBl2VfEdOblWYnkFbFd+SNNEG2lhBiMvl45Oszrq3+W69xl08m/b
SpIMn4W3Nqp2PzAQY0uXhUJduEeol7X7xeZe9GOSxFh49q2celFS8vB8Tg9ynnPB
NK1oCWHdsNefmAUSFXqBgzDCDi7EcWEWxYiBK83yuG5pmXrVINbPC2Jla+RSAW3c
pwvyuMlP7uQ/glrs8FI8WbkldW+LznuYkakzWkW45mvtY1xqgFPDAEze1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5KQ+lvK3Kh9KpzNa7qMgA8g2VtMB8GA1UdIwQY
MBaAFG6uS7BROYDIf5usWSlSwJV3esEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zYTcyYmEtMWRjYS00MGQ5LWE4YWQt
NGNlNjIzMWYyYWQ5LzEvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8zYTcyYmEtMWRjYS00MGQ5LWE4YWQtNGNlNjIzMWYyYWQ5
LzEvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUZGmR9A
F2vuyU+V8WPsbMeEZacVA1ZlksrVw7RC3uugpTndEEHXLly9iuyKZAX1oDP/7NrS
nSpz9TS+lAT1BJVgKXIHsbd6O/cAap6E267xpp1LfrdO1mrVTz6uVIkdZ3ZH+AMC
OQ8XYnWdkIDeEfO1awqF6JUBObtt4pw+f/1ji3x7i1q+Md16uPtGXQP5Cq9DvIdy
nqiAmxAromP0fsI7x7nmsl2GDfc0ETpi2xVpQcYOC080RaH74FTJkzronGJ6xGxL
6sS80shdz+XN8m+ZPEkAfcvpe9wugW+7ea433Y+NtIg0B9XDPBJ0nVaeoQRHCnC0
G+ttpP0zkLTzXA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:37 2025 by rpki-client