Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft
File: bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft (raw, json)
Hash identifier: cccLeMMqD6mEJEU2gz27pBXaHiK1zRhRBSjeo8TbVAo=
Subject key identifier: C5:9A:30:2E:42:91:CF:88:AC:EC:69:41:53:0C:83:2B:F5:DB:3B:EB
Authority key identifier: 6C:C1:85:02:45:D2:BF:0B:58:3A:33:9F:2E:B4:F7:C0:90:59:64:0C
Certificate issuer: /CN=6cc1850245d2bf0b583a339f2eb4f7c09059640c
Certificate serial: 0199FB7C7F560CEE1DE84065619F9A6FB0C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft
Manifest number: 79
Signing time: Sun 19 Oct 2025 08:01:04 +0000
Manifest this update: Sun 19 Oct 2025 08:01:04 +0000
Manifest next update: Mon 20 Oct 2025 08:01:04 +0000
Files and hashes: 1: H6SveOSdHkqZ9ueQGmlndrunnIo.roa (hash: ZjmMhBHkwqQ5K2xq1IB/uiZwUc1feHjVtHr/OyBPgVI=)
2: bMGFAkXSvwtYOjOfLrT3wJBZZAw.crl (hash: xBxJzsXNSIjzLhzw9FEutSFIpvdYOqWHW/ppG0fzB3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7f:56:0c:ee:1d:e8:40:65:61:9f:9a:6f:b0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc1850245d2bf0b583a339f2eb4f7c09059640c
Validity
Not Before: Oct 19 08:01:04 2025 GMT
Not After : Oct 20 08:01:04 2025 GMT
Subject: CN=c59a302e4291cf88acec6941530c832bf5db3beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2b:ed:e8:b3:b3:7b:82:be:67:32:f1:98:9c:
61:67:c8:16:bc:77:25:b8:85:e1:02:54:d5:ed:eb:
0d:b5:5a:b7:20:e4:10:a3:9f:e0:90:64:66:cf:38:
2c:29:55:78:7e:4b:4f:84:bc:78:a4:6d:f1:67:7b:
4f:fe:43:54:bd:ef:50:d3:44:45:51:b9:e8:55:70:
be:f5:b6:d1:82:07:fc:a0:48:12:af:a7:ed:23:8d:
7e:9b:57:b1:d4:bb:a5:d9:e4:15:02:36:a2:c3:03:
52:cd:4e:b2:7c:17:2c:fc:30:45:d7:fc:83:b6:16:
de:8d:31:02:09:ba:7f:94:ef:85:a8:43:7b:81:14:
77:fd:9e:df:f8:f9:e3:6b:2c:55:c9:f1:30:72:8d:
77:ae:a4:4d:e2:af:ee:73:30:a1:b6:50:20:a3:a5:
59:07:87:b6:81:2e:42:8b:a6:b2:47:32:b5:80:be:
10:ac:ca:d5:ba:a5:d5:3e:a5:7f:a8:ba:fe:03:2a:
fc:0b:c4:54:c9:e8:b4:ee:0f:c5:1d:a3:b6:28:2a:
50:7d:40:32:a3:44:de:ce:14:4c:15:fe:8c:c4:55:
12:6d:5b:e8:19:7e:46:bd:09:83:6d:1d:9e:7e:2a:
1f:3d:95:98:e4:f9:7b:4c:33:42:3a:38:9f:0b:6e:
26:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9A:30:2E:42:91:CF:88:AC:EC:69:41:53:0C:83:2B:F5:DB:3B:EB
X509v3 Authority Key Identifier:
keyid:6C:C1:85:02:45:D2:BF:0B:58:3A:33:9F:2E:B4:F7:C0:90:59:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:49:d7:04:bd:4c:04:f0:df:36:fa:47:8d:53:f6:9c:75:64:
e3:96:07:a7:cf:dc:da:ce:4a:83:03:8b:f7:66:d5:ad:5f:88:
98:78:07:3f:90:39:cc:76:b4:04:c1:76:55:24:57:e3:92:ce:
fc:34:58:9a:1c:d7:3f:b9:ab:d3:82:9d:65:4a:1c:b4:24:6f:
2b:b4:d7:48:13:24:77:49:c1:14:f3:f2:04:18:61:b2:c0:17:
ac:24:b5:5e:29:52:56:a5:11:42:b1:f6:ab:61:66:b4:7a:44:
d4:1e:21:7c:a8:06:7e:30:02:53:9d:c9:72:1d:f3:72:44:46:
c1:33:10:bc:95:f9:cd:61:88:4b:89:7b:e5:85:06:c7:2c:92:
f6:e7:68:0a:46:7c:ab:c3:7d:b4:21:2e:71:49:a5:34:a1:6b:
96:d2:b9:33:5f:72:07:05:f5:a3:b6:bb:45:90:49:e7:67:36:
9f:82:96:a6:98:db:5b:c4:dc:38:44:f4:ff:b4:44:fd:90:56:
70:19:7a:51:bb:f0:76:d7:38:9f:ee:da:e8:bb:7d:97:4d:25:
77:6e:84:ae:1c:7b:b4:64:c2:95:26:08:9b:fa:2d:d9:ff:e4:
c7:1f:7b:fb:be:ec:9d:6d:23:42:98:0c:17:c7:bd:25:3c:13:
77:74:75:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fH9WDO4d6EBlYZ+ab7DHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYzE4NTAyNDVkMmJmMGI1ODNhMzM5ZjJlYjRmN2MwOTA1
OTY0MGMwHhcNMjUxMDE5MDgwMTA0WhcNMjUxMDIwMDgwMTA0WjAzMTEwLwYDVQQD
EyhjNTlhMzAyZTQyOTFjZjg4YWNlYzY5NDE1MzBjODMyYmY1ZGIzYmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySvt6LOze4K+ZzLxmJxhZ8gWvHcl
uIXhAlTV7esNtVq3IOQQo5/gkGRmzzgsKVV4fktPhLx4pG3xZ3tP/kNUve9Q00RF
UbnoVXC+9bbRggf8oEgSr6ftI41+m1ex1Lul2eQVAjaiwwNSzU6yfBcs/DBF1/yD
thbejTECCbp/lO+FqEN7gRR3/Z7f+PnjayxVyfEwco13rqRN4q/uczChtlAgo6VZ
B4e2gS5Ci6ayRzK1gL4QrMrVuqXVPqV/qLr+Ayr8C8RUyei07g/FHaO2KCpQfUAy
o0TezhRMFf6MxFUSbVvoGX5GvQmDbR2efiofPZWY5Pl7TDNCOjifC24mKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWaMC5Ckc+IrOxpQVMMgyv12zvrMB8GA1UdIwQY
MBaAFGzBhQJF0r8LWDozny6098CQWWQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk1HRkFrWFN2d3RZT2pPZkxyVDN3SkJaWkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MGEwYjgtNDU0Mi00ODQwLThmMTkt
MGE2OGRhMjdiM2ExLzEvYk1HRkFrWFN2d3RZT2pPZkxyVDN3SkJaWkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC83MGEwYjgtNDU0Mi00ODQwLThmMTktMGE2OGRhMjdiM2Ex
LzEvYk1HRkFrWFN2d3RZT2pPZkxyVDN3SkJaWkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUnXBL1M
BPDfNvpHjVP2nHVk45YHp8/c2s5KgwOL92bVrV+ImHgHP5A5zHa0BMF2VSRX45LO
/DRYmhzXP7mr04KdZUoctCRvK7TXSBMkd0nBFPPyBBhhssAXrCS1XilSVqURQrH2
q2FmtHpE1B4hfKgGfjACU53Jch3zckRGwTMQvJX5zWGIS4l75YUGxyyS9udoCkZ8
q8N9tCEucUmlNKFrltK5M19yBwX1o7a7RZBJ52c2n4KWppjbW8TcOET0/7RE/ZBW
cBl6Ubvwdtc4n+7a6Lt9l00ld26Erhx7tGTClSYIm/ot2f/kxx97+77snW0jQpgM
F8e9JTwTd3R1aA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:41 2025 by rpki-client