Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
File: BkhNH1fbDMIyb6pT06eq0mjbwmY.mft (raw, json)
Hash identifier: pqKIBhpfan4mwpWsQal2S6g1xubbN+OPgJjXr9x6B88=
Subject key identifier: 3E:4D:40:50:C5:D8:82:58:CE:C3:2C:F0:ED:5B:E4:D0:23:09:65:AA
Authority key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
Certificate issuer: /CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Certificate serial: 0199FFFE8CE025F1926FE407D6CA6DF81F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 05:01:36 +0000
Manifest this update: Mon 20 Oct 2025 05:01:36 +0000
Manifest next update: Tue 21 Oct 2025 05:01:36 +0000
Files and hashes: 1: BkhNH1fbDMIyb6pT06eq0mjbwmY.crl (hash: /6lXEt+cbgKUPCfXbjoKxIICu8PNcvjUB3o3WJJSBis=)
2: wjXBOQcWQ-FZfNOvsXQ1F4lPlGw.roa (hash: E+xrzCXzCwEyErrE4D/BReffI2+8855YllSEHagiBtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:8c:e0:25:f1:92:6f:e4:07:d6:ca:6d:f8:1f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Validity
Not Before: Oct 20 05:01:36 2025 GMT
Not After : Oct 21 05:01:36 2025 GMT
Subject: CN=3e4d4050c5d88258cec32cf0ed5be4d0230965aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:38:95:bf:ae:9e:06:7c:24:5b:49:0e:c9:85:
0a:34:b1:0e:75:bb:d8:c2:35:2f:2b:b5:8e:a6:50:
69:cb:10:29:6b:99:ef:d2:07:d6:c9:9e:9f:b2:27:
b8:52:fd:5e:ec:3a:0d:39:48:45:a8:2b:e1:ac:32:
ba:38:1d:a2:1e:45:74:e6:15:5a:4d:f1:4a:b1:2e:
dd:11:13:a3:f0:95:9a:e4:3c:5f:ac:9b:86:18:b8:
81:80:3e:b4:fd:52:e9:a0:23:65:16:d8:26:f0:20:
fb:40:26:a8:3a:12:c7:ac:a1:f2:94:43:29:a8:0c:
b4:0e:5c:50:ed:81:c2:0e:ef:2c:30:5b:26:99:bb:
25:75:35:aa:04:18:c4:87:6e:91:e6:9c:27:c2:d2:
81:9a:d3:63:80:03:5a:91:0a:2b:c3:5b:31:f0:2f:
6f:7c:84:5d:79:f3:33:dc:5d:ea:96:75:c7:39:91:
59:41:3a:12:7f:29:a9:42:9d:c3:2d:74:b9:dc:65:
37:65:ae:1f:b6:97:1a:96:34:21:7f:b7:cb:be:69:
fa:b8:6c:65:46:94:a5:1f:77:81:4d:8f:fb:73:79:
af:84:f8:c2:09:e6:a7:15:e6:14:48:bc:3a:20:64:
d4:df:51:ea:d8:be:4a:ce:9e:b5:10:e4:4b:bb:7b:
02:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4D:40:50:C5:D8:82:58:CE:C3:2C:F0:ED:5B:E4:D0:23:09:65:AA
X509v3 Authority Key Identifier:
keyid:06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e4:7c:22:77:3c:06:3d:14:b7:7c:89:f7:25:27:ff:79:75:
d5:f2:22:00:33:13:d4:cc:7c:a9:47:02:e2:e9:55:83:59:3d:
b5:a1:83:1b:db:45:d7:26:db:b6:1c:56:a8:14:77:ec:98:74:
55:85:74:0f:b9:22:2d:13:00:db:c5:17:01:b3:da:d8:c6:15:
02:df:68:36:f3:55:85:7f:d0:39:0c:f4:11:0e:cd:80:a9:e7:
9e:ad:58:35:fe:2b:fa:a6:40:fb:fd:f1:13:9c:85:2c:c6:e9:
e9:47:2c:65:a7:72:ce:e4:c3:5c:d6:16:8b:eb:cc:d8:ed:dc:
08:ab:fd:20:16:bd:2d:86:58:63:62:f5:38:73:43:ba:f2:49:
0b:36:bd:a9:7f:f8:4b:7f:5e:3d:b5:35:6e:0f:80:ba:3a:b0:
8b:85:0e:99:e1:0f:75:0e:1c:ea:c3:48:a2:b4:18:4f:e7:c9:
53:3c:fe:4e:81:78:38:47:7b:34:79:2f:ee:a3:a0:46:99:ca:
b8:48:e0:af:2a:e6:3e:9d:dd:ac:ce:9a:91:c2:6e:20:a5:7e:
1d:8c:c0:48:7b:b0:ae:8c:34:04:38:c8:a3:b4:c5:04:ba:50:
16:2a:97:a5:9b:65:73:57:95:33:c0:98:50:9e:6f:d0:a4:c5:
37:17:a8:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//ozgJfGSb+QH1spt+B8hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NDg0ZDFmNTdkYjBjYzIzMjZmYWE1M2QzYTdhYWQyNjhk
YmMyNjYwHhcNMjUxMDIwMDUwMTM2WhcNMjUxMDIxMDUwMTM2WjAzMTEwLwYDVQQD
EygzZTRkNDA1MGM1ZDg4MjU4Y2VjMzJjZjBlZDViZTRkMDIzMDk2NWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DiVv66eBnwkW0kOyYUKNLEOdbvY
wjUvK7WOplBpyxApa5nv0gfWyZ6fsie4Uv1e7DoNOUhFqCvhrDK6OB2iHkV05hVa
TfFKsS7dEROj8JWa5DxfrJuGGLiBgD60/VLpoCNlFtgm8CD7QCaoOhLHrKHylEMp
qAy0DlxQ7YHCDu8sMFsmmbsldTWqBBjEh26R5pwnwtKBmtNjgANakQorw1sx8C9v
fIRdefMz3F3qlnXHOZFZQToSfympQp3DLXS53GU3Za4ftpcaljQhf7fLvmn6uGxl
RpSlH3eBTY/7c3mvhPjCCeanFeYUSLw6IGTU31Hq2L5Kzp61EORLu3sCswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5NQFDF2IJYzsMs8O1b5NAjCWWqMB8GA1UdIwQY
MBaAFAZITR9X2wzCMm+qU9OnqtJo28JmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmtoTkgxZmJETUl5YjZwVDA2ZXEwbWpid21ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83MDI4MjktMGQ4ZS00OWRiLTg0YWUt
MDQ5MjUxOTRjNWU2LzEvQmtoTkgxZmJETUl5YjZwVDA2ZXEwbWpid21ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83MDI4MjktMGQ4ZS00OWRiLTg0YWUtMDQ5MjUxOTRjNWU2
LzEvQmtoTkgxZmJETUl5YjZwVDA2ZXEwbWpid21ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuR8Inc8
Bj0Ut3yJ9yUn/3l11fIiADMT1Mx8qUcC4ulVg1k9taGDG9tF1ybbthxWqBR37Jh0
VYV0D7kiLRMA28UXAbPa2MYVAt9oNvNVhX/QOQz0EQ7NgKnnnq1YNf4r+qZA+/3x
E5yFLMbp6UcsZadyzuTDXNYWi+vM2O3cCKv9IBa9LYZYY2L1OHNDuvJJCza9qX/4
S39ePbU1bg+Aujqwi4UOmeEPdQ4c6sNIorQYT+fJUzz+ToF4OEd7NHkv7qOgRpnK
uEjgryrmPp3drM6akcJuIKV+HYzASHuwrow0BDjIo7TFBLpQFiqXpZtlc1eVM8CY
UJ5v0KTFNxeoSw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:25:18 2025 by rpki-client