Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
File: BpCRPbvu2t3pXc5HBFJihOeufMo.mft (raw, json)
Hash identifier: 1igdf4HP/WnmHP6PU3VgsdVeOYj8JqV5NB68olCT1pE=
Subject key identifier: 27:47:37:5A:3E:F3:48:6E:DC:A5:90:4B:DE:AE:CA:B6:FA:AB:F3:5E
Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
Certificate issuer: /CN=0690913dbbeedadde95dce4704526284e7ae7cca
Certificate serial: 0199FC219CAB68FEE49FD6FAA2117D10498D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: BpCRPbvu2t3pXc5HBFJihOeufMo.crl (hash: xgIZJhNmkAXn7qhmgZnNgCcvakK3vBsZh+OB9GlXL+c=)
2: Iy7lkqpbyaSDL2grrU_SdETf7DQ.roa (hash: DorRUxYefmWL1rp1az3xVIzdxI7JSTisHh4gg2RZ6eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9c:ab:68:fe:e4:9f:d6:fa:a2:11:7d:10:49:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=2747375a3ef3486edca5904bdeaecab6faabf35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:6f:0e:d6:f5:4a:83:40:d7:4b:42:38:98:
69:c2:49:68:30:14:18:0d:a9:91:d8:10:17:a7:ce:
3a:29:7a:0d:1f:b3:b3:f9:da:3d:f1:b1:3b:5d:23:
ce:ee:38:e4:de:13:85:e6:13:ed:94:b2:67:39:7c:
fa:d7:e7:20:53:15:e0:fa:a8:af:16:f6:2d:2a:d5:
49:68:fc:b3:e0:33:56:17:3a:a9:db:06:bd:3f:83:
32:65:72:20:7b:ae:e8:be:83:5b:47:fe:6c:56:71:
f2:c6:62:73:a8:b7:33:d3:44:40:5d:c0:42:9b:9e:
81:e6:b8:84:59:2a:42:3b:fd:ab:48:80:d1:22:70:
2d:42:49:85:f1:d8:a6:f9:80:3d:c1:0a:b4:64:21:
f9:1a:e8:5c:c4:f2:11:7e:34:1d:ec:9c:90:4d:97:
a7:5e:2b:f9:40:a5:36:6c:ac:61:04:28:14:0a:d2:
7e:3f:38:98:24:59:c2:8e:88:b3:96:7b:1b:8c:ef:
06:f9:3e:d2:53:20:1d:54:e0:b0:2e:69:a1:dd:ef:
b7:a9:5c:0a:6a:d6:40:7b:e4:44:a5:73:8b:69:c1:
f2:6b:82:82:4e:d5:f1:91:c5:ff:f6:a9:24:1b:c0:
8c:9c:94:be:d8:38:fd:73:39:0c:bd:5f:02:3c:cf:
b3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:47:37:5A:3E:F3:48:6E:DC:A5:90:4B:DE:AE:CA:B6:FA:AB:F3:5E
X509v3 Authority Key Identifier:
keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:25:32:11:4b:3e:b8:0e:df:59:26:c9:e8:31:6e:62:bf:a4:
87:90:01:2e:b6:24:0f:7a:64:e1:11:2c:8c:bf:75:f0:6f:26:
81:67:d0:3d:69:af:01:0d:7d:21:70:8f:8d:f3:09:97:d0:ec:
2f:67:57:f0:d9:e0:49:fe:91:0e:62:57:c6:3e:34:16:44:d4:
25:d3:11:53:37:a8:40:4a:d2:e6:d5:65:fe:f6:18:b9:78:10:
9c:e1:ce:fd:3b:5d:5c:6c:9d:bf:66:89:e7:ac:da:5d:9d:ad:
80:80:b0:8d:58:7c:cb:c6:80:cd:a4:9d:94:4e:26:e0:31:43:
e9:5c:86:20:de:8d:1c:f1:ba:19:16:20:f1:12:10:d9:e5:58:
29:74:a1:90:da:e0:b5:b2:bc:15:37:66:c0:7a:94:2e:99:19:
e6:21:e8:73:81:e3:83:51:14:5f:10:51:7e:bc:0a:16:fe:04:
42:82:13:93:dc:c1:64:3f:e4:2d:9c:c4:bb:e9:03:ed:be:ee:
f1:4e:ff:d9:f2:36:88:ab:a3:c6:c8:22:ea:46:46:78:65:95:
a6:9b:32:fb:d9:77:fb:bb:ba:3d:ca:4d:f9:bb:dd:db:c2:d6:
5e:1a:71:7a:d9:40:d4:f2:0c:63:6e:2a:78:20:41:af:41:98:
e2:64:1a:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IZyraP7kn9b6ohF9EEmNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OTA5MTNkYmJlZWRhZGRlOTVkY2U0NzA0NTI2Mjg0ZTdh
ZTdjY2EwHhcNMjUxMDE5MTEwMTI1WhcNMjUxMDIwMTEwMTI1WjAzMTEwLwYDVQQD
EygyNzQ3Mzc1YTNlZjM0ODZlZGNhNTkwNGJkZWFlY2FiNmZhYWJmMzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRhvDtb1SoNA10tCOJhpwkloMBQY
DamR2BAXp846KXoNH7Oz+do98bE7XSPO7jjk3hOF5hPtlLJnOXz61+cgUxXg+qiv
FvYtKtVJaPyz4DNWFzqp2wa9P4MyZXIge67ovoNbR/5sVnHyxmJzqLcz00RAXcBC
m56B5riEWSpCO/2rSIDRInAtQkmF8dim+YA9wQq0ZCH5GuhcxPIRfjQd7JyQTZen
Xiv5QKU2bKxhBCgUCtJ+PziYJFnCjoizlnsbjO8G+T7SUyAdVOCwLmmh3e+3qVwK
atZAe+REpXOLacHya4KCTtXxkcX/9qkkG8CMnJS+2Dj9czkMvV8CPM+zqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdHN1o+80hu3KWQS96uyrb6q/NeMB8GA1UdIwQY
MBaAFAaQkT277trd6V3ORwRSYoTnrnzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnBDUlBidnUydDNwWGM1SEJGSmloT2V1Zk1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mYWI5MTgtOGY0ZC00ZWRlLWJhZDEt
MzFiOTUwMjcwNTM2LzEvQnBDUlBidnUydDNwWGM1SEJGSmloT2V1Zk1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mYWI5MTgtOGY0ZC00ZWRlLWJhZDEtMzFiOTUwMjcwNTM2
LzEvQnBDUlBidnUydDNwWGM1SEJGSmloT2V1Zk1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByUyEUs+
uA7fWSbJ6DFuYr+kh5ABLrYkD3pk4REsjL918G8mgWfQPWmvAQ19IXCPjfMJl9Ds
L2dX8NngSf6RDmJXxj40FkTUJdMRUzeoQErS5tVl/vYYuXgQnOHO/TtdXGydv2aJ
56zaXZ2tgICwjVh8y8aAzaSdlE4m4DFD6VyGIN6NHPG6GRYg8RIQ2eVYKXShkNrg
tbK8FTdmwHqULpkZ5iHoc4Hjg1EUXxBRfrwKFv4EQoITk9zBZD/kLZzEu+kD7b7u
8U7/2fI2iKujxsgi6kZGeGWVppsy+9l3+7u6PcpN+bvd28LWXhpxetlA1PIMY24q
eCBBr0GY4mQaXw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:06 2025 by rpki-client