Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
File: bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft (raw, json)
Hash identifier: +jEOQ/oPg/4ebSiiGGbTB/79aEFzaMzQlgenjmcFTY8=
Subject key identifier: 3B:C3:A6:86:9E:1F:F2:52:E4:B3:68:30:EA:B5:42:FD:52:8D:93:C5
Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
Certificate issuer: /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Certificate serial: 0199FDD904866261FD352E1BD987BA12664A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
Manifest number: 0BFE
Signing time: Sun 19 Oct 2025 19:01:22 +0000
Manifest this update: Sun 19 Oct 2025 19:01:22 +0000
Manifest next update: Mon 20 Oct 2025 19:01:22 +0000
Files and hashes: 1: ENnWwF0vmdv43P7jgDpOBWdDipc.roa (hash: 6ywQWq+YpeM+QYJxsua0ysg5X/K6fdwSexzVmdsk58s=)
2: bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl (hash: AFP/80LJJp6wyO3EAQ7Mpl9vJK+k57irzOpX5n3ER98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:04:86:62:61:fd:35:2e:1b:d9:87:ba:12:66:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Validity
Not Before: Oct 19 19:01:22 2025 GMT
Not After : Oct 20 19:01:22 2025 GMT
Subject: CN=3bc3a6869e1ff252e4b36830eab542fd528d93c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:f8:0c:3a:f9:cd:e0:11:04:f6:e8:10:3d:
6b:65:3a:83:5a:02:ca:8f:3f:87:1e:ed:e2:bd:8e:
76:76:89:5c:2b:4d:ac:ac:7b:85:6d:10:1d:c5:a4:
ac:bd:d3:c7:fb:70:aa:36:1b:04:3a:3c:4b:a7:21:
a1:41:18:36:6f:48:c9:75:f2:35:40:5a:33:d3:b2:
12:f5:4a:8c:64:59:80:74:f3:00:3e:37:65:ab:35:
ac:e6:d1:3d:2d:34:6e:5b:a1:7c:41:1d:97:76:42:
97:ad:0b:e9:03:d5:46:82:f2:c2:23:05:3c:15:39:
3a:a9:91:72:61:ce:cb:d2:fa:e3:e8:61:44:bf:17:
76:a4:84:20:a0:33:d2:3e:04:78:c0:a0:c0:73:af:
69:78:c7:9c:80:3b:ba:c7:b9:1b:a5:62:42:e4:34:
64:ea:30:f0:30:d0:52:47:bd:07:78:16:51:76:60:
b8:25:e8:19:0a:a6:bc:31:64:8a:d6:0f:7a:35:fb:
35:a7:e1:ea:b2:b4:cd:9e:d1:99:cd:ad:3f:1a:bd:
55:ba:8f:8b:e6:d8:c6:ba:6c:f3:eb:1a:8c:ad:03:
8f:d9:5a:3b:57:67:57:38:12:13:17:07:63:60:3b:
20:c0:64:a7:ed:ef:3f:89:f7:39:8b:27:5f:50:03:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C3:A6:86:9E:1F:F2:52:E4:B3:68:30:EA:B5:42:FD:52:8D:93:C5
X509v3 Authority Key Identifier:
keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:33:5d:03:73:e6:96:db:f6:b3:55:bb:2c:b8:b7:ce:27:9d:
23:34:6e:51:46:dc:df:9b:a4:db:27:db:2e:68:49:88:ee:0c:
f5:3c:11:6d:e3:d7:fe:b1:05:7c:4a:ad:e6:dc:ce:ac:ca:66:
5d:4a:d7:5b:c2:0d:61:25:3f:4c:03:27:60:15:84:49:0d:32:
d0:79:cf:21:13:fa:98:d2:37:7a:14:35:1a:cb:c1:00:9a:3e:
82:7c:5e:b8:56:3b:36:3e:13:80:6c:96:75:ec:b3:8d:81:56:
2e:cd:64:d8:bc:59:b1:f1:12:0c:ad:e9:a7:7f:aa:47:d2:b0:
34:af:60:89:9c:d8:33:1e:da:ce:2f:c4:09:71:71:83:2d:bd:
41:e0:4b:c0:56:86:1a:63:09:0b:1d:8e:7e:51:a1:5e:05:fd:
ad:a7:e0:c1:be:79:59:e4:53:75:b4:3b:b0:70:aa:5c:00:13:
b5:22:ec:19:79:34:a3:c3:07:88:fa:8c:99:19:c6:6d:0c:bc:
39:74:c6:aa:c7:fc:97:54:a5:fb:71:98:5f:f9:53:0a:98:3f:
49:3e:40:b6:f9:3f:66:ca:f6:33:33:59:95:16:62:ee:b0:9e:
c8:1c:18:7e:6f:8b:0f:23:37:91:86:21:8a:81:16:c2:02:34:
ba:99:1b:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92QSGYmH9NS4b2Ye6EmZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNjA4ODNhYWU0OTFlNWZiNzczYTkyNjQwMTlmZjRmODg4
ZDVjYTUwHhcNMjUxMDE5MTkwMTIyWhcNMjUxMDIwMTkwMTIyWjAzMTEwLwYDVQQD
EygzYmMzYTY4NjllMWZmMjUyZTRiMzY4MzBlYWI1NDJmZDUyOGQ5M2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwH4DDr5zeARBPboED1rZTqDWgLK
jz+HHu3ivY52dolcK02srHuFbRAdxaSsvdPH+3CqNhsEOjxLpyGhQRg2b0jJdfI1
QFoz07IS9UqMZFmAdPMAPjdlqzWs5tE9LTRuW6F8QR2XdkKXrQvpA9VGgvLCIwU8
FTk6qZFyYc7L0vrj6GFEvxd2pIQgoDPSPgR4wKDAc69peMecgDu6x7kbpWJC5DRk
6jDwMNBSR70HeBZRdmC4JegZCqa8MWSK1g96Nfs1p+HqsrTNntGZza0/Gr1Vuo+L
5tjGumzz6xqMrQOP2Vo7V2dXOBITFwdjYDsgwGSn7e8/ifc5iydfUANJ9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvDpoaeH/JS5LNoMOq1Qv1SjZPFMB8GA1UdIwQY
MBaAFG5giDquSR5ft3OpJkAZ/0+IjVylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kOGUwOTYtNDMxMC00MmI5LWJkMjAt
YjU2MDJkM2RhOGE2LzEvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9kOGUwOTYtNDMxMC00MmI5LWJkMjAtYjU2MDJkM2RhOGE2
LzEvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5jNdA3Pm
ltv2s1W7LLi3ziedIzRuUUbc35uk2yfbLmhJiO4M9TwRbePX/rEFfEqt5tzOrMpm
XUrXW8INYSU/TAMnYBWESQ0y0HnPIRP6mNI3ehQ1GsvBAJo+gnxeuFY7Nj4TgGyW
deyzjYFWLs1k2LxZsfESDK3pp3+qR9KwNK9giZzYMx7azi/ECXFxgy29QeBLwFaG
GmMJCx2OflGhXgX9rafgwb55WeRTdbQ7sHCqXAATtSLsGXk0o8MHiPqMmRnGbQy8
OXTGqsf8l1Sl+3GYX/lTCpg/ST5Atvk/Zsr2MzNZlRZi7rCeyBwYfm+LDyM3kYYh
ioEWwgI0upkbUw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:24 2025 by rpki-client