Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: Q/jMJnhMHue41D9SOGHXhqCxeytaxiAOMDvEK1V/te4=
Subject key identifier: 82:C0:B9:0F:7E:F7:A1:AB:E5:AD:A7:28:30:27:C8:0C:24:8F:7D:1B
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 0199FDD8F314C98188328316E77ED0EC3056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 0EE4
Signing time: Sun 19 Oct 2025 19:01:17 +0000
Manifest this update: Sun 19 Oct 2025 19:01:17 +0000
Manifest next update: Mon 20 Oct 2025 19:01:17 +0000
Files and hashes: 1: E4Z3vbTECoIeWAX-nTU7dyjahu0.roa (hash: GRl1qEVfqwDbxNSFnBtUIIbDFbsrhFOvP3cHyBgF290=)
2: NOxJnoU4lwihn16i4CMOYrsiBKg.roa (hash: 5FYdl3/DrqY2o6XapqngUb5quoQMLJ6ufA49O6K0iqA=)
3: TRLssSByve8p7zVYSOimtplK7a0.roa (hash: 8S+o32DqiKQ6FrfFZueA3QrWJ407pI0AN9h5W+tL+lE=)
4: XBbWlDtkaQ_YQj-lOcFRZsR4QS4.roa (hash: pp7r6Abd9Ss2uZLn9bwC0PyAqi0RWKysnSc/agfhI6A=)
5: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: 25L+qzhIx0HWcudxnFI/A/Scl2vek5UAvSSzVlhxr4c=)
6: efbfkOdYHKxxnHQ3MrY1EfrtYow.roa (hash: YV9ND6Bmrzln21tu47CU3mbzCUoN6XuUoWHbkz/nF7M=)
7: ywz51nx2Az2FIOdnvxmxOqpSYZc.roa (hash: ywhzW4X8gfJWs3Te7uv4qk5K0NbexGMZNrN76iHRuoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:f3:14:c9:81:88:32:83:16:e7:7e:d0:ec:30:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Oct 19 19:01:17 2025 GMT
Not After : Oct 20 19:01:17 2025 GMT
Subject: CN=82c0b90f7ef7a1abe5ada7283027c80c248f7d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:ec:e6:99:1a:9f:0d:0a:7a:45:62:29:7a:
dd:a7:c0:5c:86:4a:0b:62:36:e0:bd:5a:0c:9d:c0:
35:7d:e5:3b:d8:f7:a6:c2:db:6b:a9:c6:09:f4:49:
15:9b:b4:71:44:62:63:16:bf:a7:e0:86:82:b1:75:
74:28:85:18:77:ea:a0:97:a1:32:f3:11:9e:8f:a9:
d5:b4:fd:f3:fc:ea:46:0a:8f:de:25:fc:fd:23:21:
1b:50:e1:be:19:ab:8a:3e:ad:4b:79:a7:ec:fe:81:
89:c1:ff:12:71:e7:33:e8:e1:70:94:49:a4:89:7c:
71:7c:c6:29:1a:04:ea:61:8c:cf:61:9f:d2:04:4f:
67:5a:d7:2b:91:f5:ce:15:a2:24:6b:ed:37:bf:78:
88:c2:7a:b0:05:9b:30:61:46:2f:ea:7a:b3:a8:94:
22:56:f2:5b:0a:b2:68:b9:dc:ae:25:9d:80:ed:9f:
51:4c:2d:26:32:c0:2f:42:b7:dd:8c:21:d3:07:db:
fa:27:10:21:3a:33:38:f6:f5:03:39:7e:20:91:f5:
8a:75:98:67:fc:ca:88:ec:53:14:85:b3:37:8d:dc:
e1:8b:b2:94:b1:3f:02:fd:df:54:30:e9:ae:28:7a:
5c:be:1f:4c:c3:cd:d9:dd:16:7e:0d:30:32:5e:7c:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C0:B9:0F:7E:F7:A1:AB:E5:AD:A7:28:30:27:C8:0C:24:8F:7D:1B
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c7:8a:01:95:88:41:a2:a2:dc:14:44:5f:50:27:c7:06:e5:
8d:f4:c7:14:07:97:4c:35:76:a6:7c:98:32:4e:71:e0:7f:8b:
ad:05:9d:b1:bd:c6:2c:16:32:e8:93:42:5e:10:20:4a:e5:5e:
4e:7d:86:0c:1c:82:f8:b5:dd:7d:3d:a0:31:2b:ed:a3:6f:91:
bf:e6:e7:ad:5b:51:be:16:f9:82:a8:fa:24:7a:2b:06:cc:b7:
a9:a7:ab:f9:b4:d7:68:83:db:91:cf:2a:b1:50:07:78:d4:58:
76:c6:be:f7:54:75:ac:5f:64:cd:55:9e:e7:e8:c7:52:1e:ba:
df:65:85:1f:40:34:55:83:e5:70:db:da:b4:9c:01:f7:99:1a:
02:62:78:38:0f:69:ad:60:34:35:27:a2:a9:92:42:b8:b8:a0:
52:54:d3:ae:07:3a:7b:f0:2c:1f:fb:61:4f:c0:2c:2b:d9:a8:
8f:19:f1:2b:e0:0e:75:ca:96:d4:0a:52:14:49:c2:e9:2f:c3:
de:75:f2:0e:db:66:d4:f0:3f:24:31:97:9a:6d:9f:2b:e4:5d:
a2:4e:1a:d4:c4:8f:bc:7e:79:1f:6a:de:fe:c8:10:fb:7f:68:
3b:75:c9:12:8a:e1:e1:4a:1d:2f:dd:78:78:8f:c1:3c:af:3b:
40:01:28:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92PMUyYGIMoMW537Q7DBWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMzI1MGE1YzFiZGFiNzRiMWJkMjNjMDFjNTRhOGQ3MGI2
ZGVmMjAwHhcNMjUxMDE5MTkwMTE3WhcNMjUxMDIwMTkwMTE3WjAzMTEwLwYDVQQD
Eyg4MmMwYjkwZjdlZjdhMWFiZTVhZGE3MjgzMDI3YzgwYzI0OGY3ZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSDs5pkanw0KekViKXrdp8BchkoL
YjbgvVoMncA1feU72PemwttrqcYJ9EkVm7RxRGJjFr+n4IaCsXV0KIUYd+qgl6Ey
8xGej6nVtP3z/OpGCo/eJfz9IyEbUOG+GauKPq1Leafs/oGJwf8Scecz6OFwlEmk
iXxxfMYpGgTqYYzPYZ/SBE9nWtcrkfXOFaIka+03v3iIwnqwBZswYUYv6nqzqJQi
VvJbCrJoudyuJZ2A7Z9RTC0mMsAvQrfdjCHTB9v6JxAhOjM49vUDOX4gkfWKdZhn
/MqI7FMUhbM3jdzhi7KUsT8C/d9UMOmuKHpcvh9Mw83Z3RZ+DTAyXnzsIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILAuQ9+96Gr5a2nKDAnyAwkj30bMB8GA1UdIwQY
MBaAFGwyUKXBvat0sb0jwBxUqNcLbe8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEt
MjU0NDY4M2FhMTI1LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEtMjU0NDY4M2FhMTI1
LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsceKAZWI
QaKi3BREX1AnxwbljfTHFAeXTDV2pnyYMk5x4H+LrQWdsb3GLBYy6JNCXhAgSuVe
Tn2GDByC+LXdfT2gMSvto2+Rv+bnrVtRvhb5gqj6JHorBsy3qaer+bTXaIPbkc8q
sVAHeNRYdsa+91R1rF9kzVWe5+jHUh6632WFH0A0VYPlcNvatJwB95kaAmJ4OA9p
rWA0NSeiqZJCuLigUlTTrgc6e/AsH/thT8AsK9mojxnxK+AOdcqW1ApSFEnC6S/D
3nXyDttm1PA/JDGXmm2fK+Rdok4a1MSPvH55H2re/sgQ+39oO3XJEorh4UodL914
eI/BPK87QAEoPQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:49:12 2025 by rpki-client