Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
File: bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft (raw, json)
Hash identifier: fbtGohM248VKaQ4AZ5KMEJ1vtNzAI/mbinMlFzwRWcM=
Subject key identifier: 45:37:E6:9E:35:F9:D3:CF:AF:49:82:AD:E2:6C:5C:A3:D5:77:22:02
Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
Certificate issuer: /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Certificate serial: 0199FAD7BC5F2A52CF67067BE400D6A87E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
Manifest number: 16F2
Signing time: Sun 19 Oct 2025 05:01:06 +0000
Manifest this update: Sun 19 Oct 2025 05:01:06 +0000
Manifest next update: Mon 20 Oct 2025 05:01:06 +0000
Files and hashes: 1: bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl (hash: /zmIIR2XL08YL8p0JMODouIarrp0rK7LWEnAy0zroxk=)
2: q95LSd8GymIeo50Qm8hbVA1RWoY.roa (hash: 7jNaAGPtx4Ao10+H4Yq9jrjgoF40dHvaQCVKd1ONv9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:bc:5f:2a:52:cf:67:06:7b:e4:00:d6:a8:7e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Validity
Not Before: Oct 19 05:01:06 2025 GMT
Not After : Oct 20 05:01:06 2025 GMT
Subject: CN=4537e69e35f9d3cfaf4982ade26c5ca3d5772202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8d:df:22:db:c6:19:55:f4:a1:ab:9f:b5:4f:
68:e6:56:24:c3:47:4c:be:79:8a:53:a1:86:0b:55:
41:c6:10:3a:c9:21:78:6d:e7:26:98:31:94:a6:33:
4c:45:af:94:d4:4a:ee:fc:b1:e6:e8:10:cb:fe:13:
c3:ac:c7:96:ec:57:7d:03:b7:52:92:3b:14:bc:90:
70:16:1f:e3:c1:9c:84:67:81:d7:4e:b0:c8:9c:26:
85:16:aa:c4:c5:81:64:cf:1b:25:de:9a:6a:73:62:
d2:ce:17:c2:2c:23:a3:68:02:5c:2d:5f:af:7c:c7:
bf:4a:85:d1:2a:e1:3a:5b:9f:96:2a:59:90:c5:4d:
24:74:f1:4d:f1:38:f0:34:e4:7f:3c:b1:13:82:41:
44:49:42:03:5f:c5:20:c3:30:86:9c:14:5d:d5:2c:
d4:a2:8a:02:59:5a:9f:a4:13:7a:ae:32:2a:4a:08:
05:7c:4c:26:c2:c4:31:65:4e:a4:8b:bf:b4:41:6b:
8d:32:c5:4a:ae:45:23:eb:3c:f4:5e:dc:62:8b:9e:
13:e7:66:d7:d0:c3:cc:4d:d2:25:35:2c:2e:42:3e:
75:f0:a7:67:13:bb:b8:31:3d:95:36:e8:bd:0c:dc:
87:79:62:bb:5d:76:98:99:34:7b:62:04:6d:dd:48:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:37:E6:9E:35:F9:D3:CF:AF:49:82:AD:E2:6C:5C:A3:D5:77:22:02
X509v3 Authority Key Identifier:
keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:28:42:0d:7f:d0:3f:18:c4:ee:3b:1e:97:30:1c:89:27:ed:
10:a3:15:8e:f5:a5:1c:fe:bd:fd:53:70:a9:8a:bd:53:b1:9f:
c1:ed:48:c4:50:7c:5d:1e:bb:1f:22:60:88:9b:40:99:34:22:
0b:cf:fe:36:71:d9:a7:f8:ae:57:77:df:65:c1:51:ed:70:97:
b4:1a:5e:51:56:f6:43:fa:a2:20:66:57:1b:fa:6e:df:15:04:
05:e2:d0:a3:1b:80:65:d4:42:19:13:fb:65:dd:1f:ad:d2:ed:
f9:96:e0:7c:45:d0:ad:63:53:4f:07:af:d4:06:f3:35:4d:1a:
87:35:d8:00:73:32:54:21:35:42:e1:28:74:d4:0d:13:72:06:
88:9d:ae:84:ca:85:17:85:3b:f1:89:cd:15:1b:5b:0a:d4:c6:
6c:23:8c:4f:df:e3:20:9f:96:74:a2:c6:c1:7d:de:56:59:42:
c0:ca:19:7c:cb:da:df:cf:e4:1e:6d:09:6f:cc:2a:84:c8:71:
87:f0:f1:55:54:e3:80:f4:96:97:aa:ef:b4:34:2d:87:6a:32:
12:c0:ed:bf:43:ca:1b:26:53:00:50:22:bd:68:8a:31:8a:ce:
03:53:9a:1a:24:cb:fc:b6:de:18:56:21:96:17:c1:c8:cc:34:
a0:da:8d:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn617xfKlLPZwZ75ADWqH6CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMTBkOGUxNTY0ZTQwMzEyYzlkZGYyMWJhMmFhMDNiYTU1
OWVhZDYwHhcNMjUxMDE5MDUwMTA2WhcNMjUxMDIwMDUwMTA2WjAzMTEwLwYDVQQD
Eyg0NTM3ZTY5ZTM1ZjlkM2NmYWY0OTgyYWRlMjZjNWNhM2Q1NzcyMjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI3fItvGGVX0oauftU9o5lYkw0dM
vnmKU6GGC1VBxhA6ySF4becmmDGUpjNMRa+U1Eru/LHm6BDL/hPDrMeW7Fd9A7dS
kjsUvJBwFh/jwZyEZ4HXTrDInCaFFqrExYFkzxsl3ppqc2LSzhfCLCOjaAJcLV+v
fMe/SoXRKuE6W5+WKlmQxU0kdPFN8TjwNOR/PLETgkFESUIDX8UgwzCGnBRd1SzU
oooCWVqfpBN6rjIqSggFfEwmwsQxZU6ki7+0QWuNMsVKrkUj6zz0Xtxii54T52bX
0MPMTdIlNSwuQj518KdnE7u4MT2VNui9DNyHeWK7XXaYmTR7YgRt3UikmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEU35p41+dPPr0mCreJsXKPVdyICMB8GA1UdIwQY
MBaAFG8Q2OFWTkAxLJ3fIboqoDulWerWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnhEWTRWWk9RREVzbmQ4aHVpcWdPNlZaNnRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jZmRhMDUtMTkwZC00MTQyLWJkNGYt
YjZhOGY4ZTgwZjdiLzEvYnhEWTRWWk9RREVzbmQ4aHVpcWdPNlZaNnRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jZmRhMDUtMTkwZC00MTQyLWJkNGYtYjZhOGY4ZTgwZjdi
LzEvYnhEWTRWWk9RREVzbmQ4aHVpcWdPNlZaNnRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmShCDX/Q
PxjE7jselzAciSftEKMVjvWlHP69/VNwqYq9U7Gfwe1IxFB8XR67HyJgiJtAmTQi
C8/+NnHZp/iuV3ffZcFR7XCXtBpeUVb2Q/qiIGZXG/pu3xUEBeLQoxuAZdRCGRP7
Zd0frdLt+ZbgfEXQrWNTTwev1AbzNU0ahzXYAHMyVCE1QuEodNQNE3IGiJ2uhMqF
F4U78YnNFRtbCtTGbCOMT9/jIJ+WdKLGwX3eVllCwMoZfMva38/kHm0Jb8wqhMhx
h/DxVVTjgPSWl6rvtDQth2oyEsDtv0PKGyZTAFAivWiKMYrOA1OaGiTL/LbeGFYh
lhfByMw0oNqNzw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:15 2025 by rpki-client