Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
File: BhYY9tMA3yz1ni35f_6flWoj5jw.mft (raw, json)
Hash identifier: ww0pTZKTXlKMKAdy5fGplks7LvL/w4ic3/c/HW3DwjI=
Subject key identifier: E6:87:FF:AC:9A:4A:36:D5:06:AD:C4:85:C9:A1:96:03:E6:9B:64:15
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial: 019A00356F5A4E01BEFCF33C38511FF08074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 06:01:32 +0000
Manifest this update: Mon 20 Oct 2025 06:01:32 +0000
Manifest next update: Tue 21 Oct 2025 06:01:32 +0000
Files and hashes: 1: BhYY9tMA3yz1ni35f_6flWoj5jw.crl (hash: tfRkIvt8FY8ydxF/KZzyO61wudHfkMPgFOWenSaOftE=)
2: PpLMyuWEi7GW-Zo7FScOzQEDqmw.roa (hash: tpDYLlf85669UfO2WjK12JWkdre1n2ZIYLt0uyeHU34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:6f:5a:4e:01:be:fc:f3:3c:38:51:1f:f0:80:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Validity
Not Before: Oct 20 06:01:32 2025 GMT
Not After : Oct 21 06:01:32 2025 GMT
Subject: CN=e687ffac9a4a36d506adc485c9a19603e69b6415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:80:7d:d7:5b:dd:ce:9f:7f:51:44:cf:df:
27:d6:6b:9d:15:a3:bf:fe:9c:78:60:02:1b:ea:8b:
16:24:7b:1e:c1:c5:ca:c8:2b:fb:af:b9:08:76:55:
a7:1f:03:21:e5:1b:b9:14:c6:3f:15:64:f1:5a:9b:
72:09:5d:be:84:ff:23:6f:2b:48:7c:6b:dc:fd:57:
42:28:dc:67:bd:dc:6b:19:02:7e:89:63:72:a2:20:
30:cf:cf:3b:03:44:1a:7c:95:c0:77:1c:73:a1:01:
92:26:21:03:03:f6:ba:08:25:f1:ea:46:2f:b2:75:
c9:71:aa:42:48:4f:34:9f:37:6c:96:86:1f:9e:5c:
39:cd:23:00:2e:69:04:5c:a6:37:19:b8:48:59:78:
1c:a5:03:46:ce:32:e9:6c:e9:0f:1c:43:23:6c:f5:
60:20:ec:2f:5c:34:38:ac:7e:ec:cb:8a:a8:1a:49:
77:db:40:f4:95:19:8c:98:4f:94:88:83:59:9a:81:
83:b9:ef:31:6f:32:2a:bc:ca:e7:1a:6b:e6:3a:1f:
e1:c1:cc:01:cb:b9:59:b5:8f:8f:b5:a8:55:00:19:
0c:6d:23:d3:b2:74:a7:a9:82:27:0b:29:9b:db:6d:
08:a6:93:72:f4:a0:ed:97:11:e4:c7:a6:3d:89:06:
8b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:87:FF:AC:9A:4A:36:D5:06:AD:C4:85:C9:A1:96:03:E6:9B:64:15
X509v3 Authority Key Identifier:
keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fb:1c:85:86:14:14:aa:5d:bf:77:d6:e2:eb:aa:b5:7a:e4:
ca:19:da:61:35:72:5e:92:1f:86:c1:32:e4:65:ff:74:11:89:
00:16:50:9f:de:f0:80:69:77:e5:ba:47:70:d5:14:f1:80:86:
36:7c:22:06:4a:be:33:d9:28:f0:33:0e:4c:a5:2c:52:67:a9:
31:9e:98:0c:bf:6c:00:c5:dd:66:ee:5b:aa:12:fc:2f:12:ed:
a5:69:30:f9:99:6a:f7:cd:9a:98:9e:ed:8c:13:43:d7:1c:1d:
5c:85:06:fb:bc:1b:86:2f:0b:99:4f:0d:ae:b6:4d:86:13:0a:
16:c7:84:7f:58:e9:e6:7c:0d:0b:e3:89:59:0c:29:0a:43:47:
14:cc:bb:1e:67:de:9e:00:5f:9b:e1:7d:1b:32:b0:00:1e:bf:
03:ff:39:39:a6:35:a4:06:ff:d7:0c:f7:65:ea:15:00:1d:0f:
9a:63:da:e4:60:3e:50:4e:d1:50:32:e6:78:11:fd:c6:b8:e5:
1a:d8:c7:86:f8:0b:31:47:bb:f3:53:00:7d:57:ac:3a:8c:76:
31:56:1a:18:c0:e5:f4:8a:73:e0:db:0b:6d:50:59:b8:46:ff:
59:28:40:12:fe:fb:26:51:20:fd:5d:26:56:14:7f:64:4b:91:
4f:50:9b:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANW9aTgG+/PM8OFEf8IB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MTYxOGY2ZDMwMGRmMmNmNTllMmRmOTdmZmU5Zjk1NmEy
M2U2M2MwHhcNMjUxMDIwMDYwMTMyWhcNMjUxMDIxMDYwMTMyWjAzMTEwLwYDVQQD
EyhlNjg3ZmZhYzlhNGEzNmQ1MDZhZGM0ODVjOWExOTYwM2U2OWI2NDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pKAfddb3c6ff1FEz98n1mudFaO/
/px4YAIb6osWJHsewcXKyCv7r7kIdlWnHwMh5Ru5FMY/FWTxWptyCV2+hP8jbytI
fGvc/VdCKNxnvdxrGQJ+iWNyoiAwz887A0QafJXAdxxzoQGSJiEDA/a6CCXx6kYv
snXJcapCSE80nzdsloYfnlw5zSMALmkEXKY3GbhIWXgcpQNGzjLpbOkPHEMjbPVg
IOwvXDQ4rH7sy4qoGkl320D0lRmMmE+UiINZmoGDue8xbzIqvMrnGmvmOh/hwcwB
y7lZtY+PtahVABkMbSPTsnSnqYInCymb220IppNy9KDtlxHkx6Y9iQaLEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOaH/6yaSjbVBq3EhcmhlgPmm2QVMB8GA1UdIwQY
MBaAFAYWGPbTAN8s9Z4t+X/+n5VqI+Y8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmhZWTl0TUEzeXoxbmkzNWZfNmZsV29qNWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iODU3NWEtOGI2My00NTMyLTgxZWQt
ZWZlNWJmYzc5OTk0LzEvQmhZWTl0TUEzeXoxbmkzNWZfNmZsV29qNWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9iODU3NWEtOGI2My00NTMyLTgxZWQtZWZlNWJmYzc5OTk0
LzEvQmhZWTl0TUEzeXoxbmkzNWZfNmZsV29qNWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPschYYU
FKpdv3fW4uuqtXrkyhnaYTVyXpIfhsEy5GX/dBGJABZQn97wgGl35bpHcNUU8YCG
NnwiBkq+M9ko8DMOTKUsUmepMZ6YDL9sAMXdZu5bqhL8LxLtpWkw+Zlq982amJ7t
jBND1xwdXIUG+7wbhi8LmU8NrrZNhhMKFseEf1jp5nwNC+OJWQwpCkNHFMy7Hmfe
ngBfm+F9GzKwAB6/A/85OaY1pAb/1wz3ZeoVAB0PmmPa5GA+UE7RUDLmeBH9xrjl
GtjHhvgLMUe781MAfVesOox2MVYaGMDl9Ipz4NsLbVBZuEb/WShAEv77JlEg/V0m
VhR/ZEuRT1Cbuw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:32:49 2025 by rpki-client