Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
File: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft (raw, json)
Hash identifier: RnLsM3wacXj5y+V6u6X66jYP8WojwGt14ZL2b3Q0df4=
Subject key identifier: 8C:F5:E8:76:BE:10:A1:45:76:90:9D:B2:A5:D2:6F:36:73:E1:9F:FD
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial: 0199FDD9887642B3C295DD13F100FBB854BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:01:55 +0000
Manifest this update: Sun 19 Oct 2025 19:01:55 +0000
Manifest next update: Mon 20 Oct 2025 19:01:55 +0000
Files and hashes: 1: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl (hash: MVexhfscWiOf76bdU1n03LV+eMQXqkOjxEg73E1Kvxk=)
2: x6seRwBOq_CRZGJqhRd1EBp_kiI.roa (hash: rR2gIHJRwQudNQFzsP+C+tD9iC/4YNN6FWVD4AJ320s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:88:76:42:b3:c2:95:dd:13:f1:00:fb:b8:54:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Validity
Not Before: Oct 19 19:01:55 2025 GMT
Not After : Oct 20 19:01:55 2025 GMT
Subject: CN=8cf5e876be10a14576909db2a5d26f3673e19ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:70:1d:4e:29:ee:93:06:2e:e7:5b:a8:35:
97:56:b7:fc:64:93:f2:2d:97:17:c0:55:f1:2e:8a:
b2:2e:8a:5a:5f:6e:84:51:cc:81:c4:16:9a:c1:4b:
dd:64:0a:e5:12:e0:e0:26:37:f9:79:1c:d6:e1:a2:
99:38:9b:d5:30:0d:1c:10:d6:f2:25:ed:4e:fa:e3:
5b:03:c0:6b:9b:5d:22:6a:8d:0a:ac:42:92:a0:b7:
ce:ef:b2:a2:91:43:af:2b:26:d3:b8:c6:50:ed:ff:
ad:21:5d:26:a3:1a:5c:66:31:81:88:51:12:bf:db:
28:9e:77:71:34:09:bd:b8:51:9e:83:7c:5e:13:b6:
30:67:9a:bd:fb:09:d5:04:39:ce:c6:1d:b7:a1:0c:
f7:c7:c3:fd:65:dc:ae:a6:3c:58:17:bc:6b:7c:92:
b8:35:aa:23:d3:b7:a5:ba:b0:b1:37:88:2a:2f:15:
3e:4d:b3:46:29:f8:20:ec:35:3f:6c:48:58:f2:4c:
6b:c0:d5:ce:fb:2e:e0:c9:98:fe:04:62:b8:3f:b3:
93:7b:82:4e:ae:ac:4e:03:84:8e:75:a4:7b:cb:4b:
d0:43:1d:f8:c5:fa:b1:c8:b9:f8:c6:ba:9e:eb:21:
a8:9e:9e:cd:ec:4b:d8:d2:82:8f:73:42:75:5c:fc:
c0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F5:E8:76:BE:10:A1:45:76:90:9D:B2:A5:D2:6F:36:73:E1:9F:FD
X509v3 Authority Key Identifier:
keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:29:4e:d4:8f:63:79:fe:e9:9e:9b:d5:24:e6:79:6c:07:f3:
f3:78:ef:d2:ef:b7:ea:ad:e7:28:ab:1d:a2:21:35:b9:a5:b0:
6f:20:0f:80:60:4d:4f:a2:6f:71:69:24:d9:3c:95:ec:59:b7:
d2:75:eb:a1:b2:f0:c8:2f:85:9b:df:ea:ca:b2:bc:c0:8d:d5:
39:6d:19:43:4f:2a:85:5c:8e:6b:1f:71:5b:89:8b:7c:34:1d:
51:a4:db:9c:41:08:1a:6d:49:a9:bf:8a:45:60:d6:26:08:9e:
bf:d3:25:a2:ae:04:95:82:75:65:37:85:98:78:a4:a6:10:b7:
45:ed:d3:c2:09:0c:68:91:2e:84:ad:74:05:07:6e:01:64:08:
98:16:8c:ab:cc:b3:ab:52:25:72:3e:d3:7c:b2:55:54:ff:80:
ec:fe:2d:26:5f:f1:73:4b:e6:a0:f4:73:63:16:d3:83:7e:5d:
96:4e:ca:9c:0c:e1:8b:e1:e3:ca:17:c4:10:69:56:81:bd:d5:
78:81:a9:68:1b:a6:b1:ae:c6:fc:3b:ab:7a:38:87:c5:ef:bb:
20:f1:fb:6c:83:fd:0a:49:09:24:53:d0:42:47:c8:ba:75:5d:
28:3d:fa:af:d5:de:ec:03:37:9a:fd:b0:8b:3f:c6:d1:1b:59:
87:c0:d4:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92Yh2QrPCld0T8QD7uFS9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MzVkYWE4Y2ZlMjVkZDEyYTJjMjZlMGZmY2NlOTc2MzY3
NDhlYmQwHhcNMjUxMDE5MTkwMTU1WhcNMjUxMDIwMTkwMTU1WjAzMTEwLwYDVQQD
Eyg4Y2Y1ZTg3NmJlMTBhMTQ1NzY5MDlkYjJhNWQyNmYzNjczZTE5ZmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgxwHU4p7pMGLudbqDWXVrf8ZJPy
LZcXwFXxLoqyLopaX26EUcyBxBaawUvdZArlEuDgJjf5eRzW4aKZOJvVMA0cENby
Je1O+uNbA8Brm10iao0KrEKSoLfO77KikUOvKybTuMZQ7f+tIV0moxpcZjGBiFES
v9sonndxNAm9uFGeg3xeE7YwZ5q9+wnVBDnOxh23oQz3x8P9ZdyupjxYF7xrfJK4
Naoj07elurCxN4gqLxU+TbNGKfgg7DU/bEhY8kxrwNXO+y7gyZj+BGK4P7OTe4JO
rqxOA4SOdaR7y0vQQx34xfqxyLn4xrqe6yGonp7N7EvY0oKPc0J1XPzApQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIz16Ha+EKFFdpCdsqXSbzZz4Z/9MB8GA1UdIwQY
MBaAFAc12qjP4l3RKiwm4P/M6XY2dI69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpYYXFNX2lYZEVxTENiZ184enBkalowanIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yYTRiZjUtNDBjZi00NDdhLTk3ZTAt
Njc5Y2YwMjEwZDQ5LzEvQnpYYXFNX2lYZEVxTENiZ184enBkalowanIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8yYTRiZjUtNDBjZi00NDdhLTk3ZTAtNjc5Y2YwMjEwZDQ5
LzEvQnpYYXFNX2lYZEVxTENiZ184enBkalowanIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoClO1I9j
ef7pnpvVJOZ5bAfz83jv0u+36q3nKKsdoiE1uaWwbyAPgGBNT6JvcWkk2TyV7Fm3
0nXrobLwyC+Fm9/qyrK8wI3VOW0ZQ08qhVyOax9xW4mLfDQdUaTbnEEIGm1Jqb+K
RWDWJgiev9Mloq4ElYJ1ZTeFmHikphC3Re3TwgkMaJEuhK10BQduAWQImBaMq8yz
q1Ilcj7TfLJVVP+A7P4tJl/xc0vmoPRzYxbTg35dlk7KnAzhi+HjyhfEEGlWgb3V
eIGpaBumsa7G/DurejiHxe+7IPH7bIP9CkkJJFPQQkfIunVdKD36r9Xe7AM3mv2w
iz/G0RtZh8DUKA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:53 2025 by rpki-client