Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
File: BqTBjS4g22T_nbUpKzefU4t2oVE.mft (raw, json)
Hash identifier: +kia+L0u6FxuHOdwdwKdZ0ouA2Sa6p7GAFouHcgdyAQ=
Subject key identifier: F7:1B:41:87:70:2B:AD:AE:A1:08:5E:D0:CB:A9:58:B7:B8:E0:00:A8
Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
Certificate issuer: /CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Certificate serial: 0199FD6B52099536BF85F7B355BF612531BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
Manifest number: 0DE0
Signing time: Sun 19 Oct 2025 17:01:32 +0000
Manifest this update: Sun 19 Oct 2025 17:01:32 +0000
Manifest next update: Mon 20 Oct 2025 17:01:32 +0000
Files and hashes: 1: BqTBjS4g22T_nbUpKzefU4t2oVE.crl (hash: HBalsRPiK2IsSW1eafppIW6hBiS3qM8sHTH9RxDFHmc=)
2: wr12a9AIrcr_aNyfTvBnBd_4UPk.roa (hash: q/68eMJ+gUB4PpFkh+pkPW+TmRs5+PPrtN+mSwC3zqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:52:09:95:36:bf:85:f7:b3:55:bf:61:25:31:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Validity
Not Before: Oct 19 17:01:32 2025 GMT
Not After : Oct 20 17:01:32 2025 GMT
Subject: CN=f71b4187702badaea1085ed0cba958b7b8e000a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:79:e1:56:8d:f2:ad:43:be:cd:e3:ba:06:
40:50:60:93:82:9e:e7:fb:33:39:75:8a:d8:ac:86:
51:99:99:fb:af:94:bf:d4:2d:2c:78:45:51:88:00:
72:49:08:8b:36:2d:cc:25:4e:83:41:16:4d:9c:b8:
df:2c:82:71:3d:06:e9:9d:f2:0d:4f:9c:f6:50:b9:
9d:6f:96:a4:eb:1a:5b:2d:ef:03:51:06:36:1c:d0:
8d:ee:e4:0f:ec:3b:b2:d2:f8:1d:63:88:f3:99:02:
cd:d4:ac:b8:05:be:c5:58:67:9b:0c:c2:8d:2a:fd:
8a:a8:20:98:b5:a7:d0:78:3c:0a:66:c4:77:cb:48:
f7:5b:c9:07:38:d7:7d:1b:fa:7c:c7:0d:17:ae:03:
49:c2:0d:dd:27:aa:ca:91:6f:ea:5a:5e:2e:c6:35:
c9:f6:fd:c3:91:7a:f2:19:c7:08:7c:78:b3:a4:c3:
7c:ed:ff:d2:d0:bc:16:a0:c8:b9:69:3c:99:bc:c7:
30:2f:63:67:15:c5:a3:70:df:cc:6d:fa:53:5a:a9:
0e:e7:f0:9a:9b:e0:9d:cb:17:e3:62:ef:ae:b8:da:
45:6f:58:49:6b:1b:fd:e7:b4:44:fd:7d:45:39:bc:
89:2b:ab:63:6d:6d:2a:d7:df:48:c5:3a:e3:15:da:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1B:41:87:70:2B:AD:AE:A1:08:5E:D0:CB:A9:58:B7:B8:E0:00:A8
X509v3 Authority Key Identifier:
keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:62:2b:71:81:e1:4b:4d:26:19:0a:0a:a4:ef:00:76:c9:50:
d9:b1:bc:6a:c5:68:2e:de:cb:4d:84:c4:cb:73:ed:76:9a:0d:
10:1f:2e:ac:f1:f5:f2:af:4f:f7:92:c4:26:12:cd:86:fd:5f:
58:ea:fc:23:e9:9e:0e:7e:0a:23:b2:7d:29:fb:4a:4e:a2:b0:
b2:3c:3a:66:f1:d8:f2:24:36:eb:dd:ab:70:1e:a5:a6:8b:7f:
d6:c6:13:92:b5:67:a2:ad:87:7c:e6:1b:6c:b6:1e:0e:9b:68:
ed:dc:8e:9d:3c:7d:83:b5:89:76:f0:9b:5b:28:c2:44:f2:8f:
60:5c:6a:51:e6:a2:ae:b8:a9:0f:32:7d:40:07:09:ac:c9:ab:
08:22:fa:77:e9:0f:5f:44:91:5b:9e:74:14:85:d6:af:bc:10:
46:83:37:24:4d:ac:c4:64:ca:7f:cb:ca:64:90:b4:4c:a6:ca:
30:74:9b:03:13:c8:42:f5:2c:5c:f8:67:0e:9a:3e:44:1c:81:
bf:fb:7f:9f:07:ed:b4:d5:52:61:ee:12:ae:aa:bf:1a:fe:94:
e0:ed:d1:85:dd:4c:5a:d1:4e:1a:c1:d5:b4:0d:a1:73:f1:1e:
16:22:6a:e8:b8:cd:aa:de:4e:77:1e:7e:0e:a4:ec:27:ce:ce:
73:f1:78:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9a1IJlTa/hfezVb9hJTG+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YTRjMThkMmUyMGRiNjRmZjlkYjUyOTJiMzc5ZjUzOGI3
NmExNTEwHhcNMjUxMDE5MTcwMTMyWhcNMjUxMDIwMTcwMTMyWjAzMTEwLwYDVQQD
EyhmNzFiNDE4NzcwMmJhZGFlYTEwODVlZDBjYmE5NThiN2I4ZTAwMGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxp54VaN8q1Dvs3jugZAUGCTgp7n
+zM5dYrYrIZRmZn7r5S/1C0seEVRiABySQiLNi3MJU6DQRZNnLjfLIJxPQbpnfIN
T5z2ULmdb5ak6xpbLe8DUQY2HNCN7uQP7Duy0vgdY4jzmQLN1Ky4Bb7FWGebDMKN
Kv2KqCCYtafQeDwKZsR3y0j3W8kHONd9G/p8xw0XrgNJwg3dJ6rKkW/qWl4uxjXJ
9v3DkXryGccIfHizpMN87f/S0LwWoMi5aTyZvMcwL2NnFcWjcN/MbfpTWqkO5/Ca
m+CdyxfjYu+uuNpFb1hJaxv957RE/X1FObyJK6tjbW0q199IxTrjFdqocwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcbQYdwK62uoQhe0MupWLe44ACoMB8GA1UdIwQY
MBaAFAakwY0uINtk/521KSs3n1OLdqFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnFUQmpTNGcyMlRfbmJVcEt6ZWZVNHQyb1ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zZDI4OTQtMzJlOS00ZjAyLWE4Yjkt
NTMyZWQyNTY3ZTliLzEvQnFUQmpTNGcyMlRfbmJVcEt6ZWZVNHQyb1ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8zZDI4OTQtMzJlOS00ZjAyLWE4YjktNTMyZWQyNTY3ZTli
LzEvQnFUQmpTNGcyMlRfbmJVcEt6ZWZVNHQyb1ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGIrcYHh
S00mGQoKpO8AdslQ2bG8asVoLt7LTYTEy3PtdpoNEB8urPH18q9P95LEJhLNhv1f
WOr8I+meDn4KI7J9KftKTqKwsjw6ZvHY8iQ2692rcB6lpot/1sYTkrVnoq2HfOYb
bLYeDpto7dyOnTx9g7WJdvCbWyjCRPKPYFxqUeairripDzJ9QAcJrMmrCCL6d+kP
X0SRW550FIXWr7wQRoM3JE2sxGTKf8vKZJC0TKbKMHSbAxPIQvUsXPhnDpo+RByB
v/t/nwfttNVSYe4Srqq/Gv6U4O3Rhd1MWtFOGsHVtA2hc/EeFiJq6LjNqt5Odx5+
DqTsJ87Oc/F43A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:50 2025 by rpki-client