Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
File: BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json)
Hash identifier: ZmnbrLsIywl8hHwHwEq9GJZ6yVxJoeMvBiaTfUKen9k=
Subject key identifier: 40:AE:72:1B:38:EB:BF:9B:45:6F:D1:A5:25:DE:8E:39:E3:79:11:EB
Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2
Certificate serial: 0199FC8F2A93464CA69F4F6DFC2E53DF28AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
Manifest number: 0646
Signing time: Sun 19 Oct 2025 13:01:04 +0000
Manifest this update: Sun 19 Oct 2025 13:01:04 +0000
Manifest next update: Mon 20 Oct 2025 13:01:04 +0000
Files and hashes: 1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: jrhvKnBOADL1i+x4A++7rYmFz0KBFNZDQP/XdsMk7ts=)
2: gWxtw4ZWlclsFDoK9_z8YzvsRBM.roa (hash: Q3hqFT8VcOBOjGEi5qKDmuRuKylU6JzGGHfWbsdZjmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2a:93:46:4c:a6:9f:4f:6d:fc:2e:53:df:28:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2
Validity
Not Before: Oct 19 13:01:04 2025 GMT
Not After : Oct 20 13:01:04 2025 GMT
Subject: CN=40ae721b38ebbf9b456fd1a525de8e39e37911eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dc:83:09:94:38:d1:8d:3b:a1:98:15:93:a1:
84:4b:30:37:8f:7e:5a:1b:ce:1e:51:c9:44:9e:04:
c8:1e:d9:9b:37:e1:6f:09:2d:d6:fc:65:2c:0f:ed:
e0:fb:75:68:0a:70:91:ac:75:ff:fd:5c:86:17:0d:
58:fa:94:8c:ed:3b:c1:a0:09:e5:b1:76:92:a9:c2:
57:76:c5:30:15:a8:ea:65:0f:9e:4d:fa:1d:8a:8c:
07:8f:cc:a1:ec:d2:45:85:c3:8d:c3:07:cf:6e:42:
06:b5:7d:12:33:db:10:a7:fd:ec:db:05:ef:2f:e0:
bd:a0:0e:14:97:e3:37:07:4c:4d:4a:67:f4:cc:18:
a6:84:6f:be:d0:c4:dd:91:cd:0e:c2:93:1c:ce:c4:
b2:51:82:2c:ce:49:78:52:ad:38:fb:bf:22:e5:ef:
5c:9a:86:18:46:79:07:b0:38:e0:e3:50:a7:a9:23:
10:fb:5b:4b:72:e7:67:af:78:98:11:90:7c:f3:eb:
c9:ba:b1:90:c2:22:1a:c0:33:a9:5c:48:52:83:2e:
ed:2e:97:5b:10:29:69:67:5c:71:c9:d2:d5:25:e7:
ae:f7:c7:b3:69:eb:4d:5c:fa:91:0c:1f:e4:1d:3f:
de:36:22:f6:17:9c:dc:c1:0d:5f:a3:71:4f:e1:f3:
02:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AE:72:1B:38:EB:BF:9B:45:6F:D1:A5:25:DE:8E:39:E3:79:11:EB
X509v3 Authority Key Identifier:
keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f9:1c:12:a3:f1:4e:3a:59:8c:55:17:57:11:92:7b:f5:ce:
33:4f:df:80:4a:c9:5b:6b:66:65:5e:12:4e:d0:5a:3e:0a:9c:
25:d4:f8:97:00:29:ed:ef:0a:d7:ad:db:64:6e:34:00:87:fd:
37:90:73:12:36:d4:2c:c9:08:de:82:6f:bc:f6:98:2b:cf:d9:
d1:44:fc:b7:70:db:7a:78:3b:d9:ed:7b:4f:85:db:f3:4a:e8:
82:10:5b:1b:dd:6f:e3:65:d9:1a:8e:32:8e:c7:19:19:d9:74:
4c:cb:08:b9:f2:06:5c:32:0d:26:32:34:a8:7e:dd:e3:17:f1:
b4:ea:30:db:60:fb:bc:b3:f0:eb:f7:04:cb:bc:f3:de:b9:1f:
a4:20:6a:43:4f:8d:1a:42:05:8f:52:9b:4a:94:9e:0a:7d:54:
09:f4:ce:74:54:8f:54:17:f5:9f:92:56:25:81:9f:67:cf:ca:
a1:a2:d5:a6:aa:ef:97:42:0a:8b:bf:ad:63:8d:d4:63:06:d1:
e1:9d:db:e1:3e:de:dc:28:eb:e0:2d:c6:8f:b6:e7:f5:d1:ee:
85:e7:54:e0:17:30:97:f5:ca:17:a5:dc:b6:2b:46:6b:f5:10:
0c:4d:17:29:58:33:09:17:95:f7:0f:0b:0f:ee:51:4c:27:1e:
dd:f2:47:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jyqTRkymn09t/C5T3yitMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MTVkNWM5NWNkN2I1OGQyOTdkNDc5MjY3Yzc2MmNkZTkx
MDYzZTIwHhcNMjUxMDE5MTMwMTA0WhcNMjUxMDIwMTMwMTA0WjAzMTEwLwYDVQQD
Eyg0MGFlNzIxYjM4ZWJiZjliNDU2ZmQxYTUyNWRlOGUzOWUzNzkxMWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tyDCZQ40Y07oZgVk6GESzA3j35a
G84eUclEngTIHtmbN+FvCS3W/GUsD+3g+3VoCnCRrHX//VyGFw1Y+pSM7TvBoAnl
sXaSqcJXdsUwFajqZQ+eTfodiowHj8yh7NJFhcONwwfPbkIGtX0SM9sQp/3s2wXv
L+C9oA4Ul+M3B0xNSmf0zBimhG++0MTdkc0OwpMczsSyUYIszkl4Uq04+78i5e9c
moYYRnkHsDjg41CnqSMQ+1tLcudnr3iYEZB88+vJurGQwiIawDOpXEhSgy7tLpdb
EClpZ1xxydLVJeeu98ezaetNXPqRDB/kHT/eNiL2F5zcwQ1fo3FP4fMCqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECuchs467+bRW/RpSXejjnjeRHrMB8GA1UdIwQY
MBaAFAQV1clc17WNKX1HkmfHYs3pEGPiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hNWM1ZTEtYmRhNy00ZThhLWIxYjEt
NTc5YzkwYzBkZTJhLzEvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hNWM1ZTEtYmRhNy00ZThhLWIxYjEtNTc5YzkwYzBkZTJh
LzEvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPkcEqPx
TjpZjFUXVxGSe/XOM0/fgErJW2tmZV4STtBaPgqcJdT4lwAp7e8K163bZG40AIf9
N5BzEjbULMkI3oJvvPaYK8/Z0UT8t3Dbeng72e17T4Xb80roghBbG91v42XZGo4y
jscZGdl0TMsIufIGXDINJjI0qH7d4xfxtOow22D7vLPw6/cEy7zz3rkfpCBqQ0+N
GkIFj1KbSpSeCn1UCfTOdFSPVBf1n5JWJYGfZ8/KoaLVpqrvl0IKi7+tY43UYwbR
4Z3b4T7e3Cjr4C3Gj7bn9dHuhedU4Bcwl/XKF6XctitGa/UQDE0XKVgzCReV9w8L
D+5RTCce3fJH1g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:59 2025 by rpki-client