Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
File: bP02Bzbx-myXcPy0i-WUvmCeWz4.mft (raw, json)
Hash identifier: SMcEETfz4CJ4kt812D12mS2ZUeEyYkHQa0BJhxpuuUw=
Subject key identifier: 44:B1:27:EE:54:19:0C:75:13:3E:54:AC:36:33:58:13:1E:5C:6C:89
Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
Certificate issuer: /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Certificate serial: 0199FFC873A4B958F8799C332BFF6B453DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:02:30 +0000
Manifest this update: Mon 20 Oct 2025 04:02:30 +0000
Manifest next update: Tue 21 Oct 2025 04:02:30 +0000
Files and hashes: 1: DC68jaJzKs4sWOyzS3O5wTgtZNE.roa (hash: 1O1Vjs/w38AlpgFvrtScFHTsBaANSIlvVfPi7Rtab9k=)
2: Pp9dfiM_MT5SdF1T82CtQd0OZJw.roa (hash: h3fdCt6Okubry0k+FISuRK++uR3zvuFiodlZnV6ykfI=)
3: bP02Bzbx-myXcPy0i-WUvmCeWz4.crl (hash: stAnidzH+ScxcX3AvtbwIzLj31DYepVs+ahDujESk8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:73:a4:b9:58:f8:79:9c:33:2b:ff:6b:45:3d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Validity
Not Before: Oct 20 04:02:30 2025 GMT
Not After : Oct 21 04:02:30 2025 GMT
Subject: CN=44b127ee54190c75133e54ac363358131e5c6c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:54:a4:f7:d5:b5:e1:a3:11:8e:ec:07:07:
df:10:ab:74:c2:40:f9:db:b9:42:6b:b4:ea:45:ce:
40:af:de:87:76:8e:57:b0:2a:d3:62:f2:a8:55:02:
76:ed:91:48:b0:e3:f4:cc:1a:67:e3:33:f5:5d:42:
e5:bb:4a:68:46:5a:c7:38:3d:24:87:cf:3a:1c:72:
2a:a7:21:84:39:b2:37:5b:49:8d:ee:59:80:ac:6a:
8d:fc:5c:21:ff:3e:e4:13:b9:92:8a:30:53:3c:03:
32:0f:71:9b:0a:9a:d1:3e:7d:71:07:dc:5f:2c:d7:
54:ea:4f:87:16:1a:8b:ce:59:62:a5:07:54:14:dc:
39:3d:f6:4a:c2:25:12:95:4c:af:46:48:82:37:6f:
46:4c:b1:cc:34:32:eb:fa:58:c7:86:3e:91:cc:3f:
80:ed:7e:f4:8a:55:f0:45:6f:eb:cc:d1:b7:06:5d:
c1:59:5e:c9:a9:27:d7:b9:7b:4c:83:6d:ea:2f:fa:
61:c0:bc:ee:90:13:4e:ec:2c:ee:bb:51:92:08:22:
0d:38:e8:e9:3d:ae:cc:77:35:69:12:b3:93:9f:ac:
3d:87:78:a1:a1:f4:97:3b:97:cd:a5:36:f8:74:37:
66:04:96:91:3a:9f:fd:bb:c9:1a:9b:f7:7d:bd:75:
28:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B1:27:EE:54:19:0C:75:13:3E:54:AC:36:33:58:13:1E:5C:6C:89
X509v3 Authority Key Identifier:
keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:19:45:37:61:a9:bf:ba:5f:de:0f:cf:91:ea:79:b4:77:e9:
07:2e:ca:98:f2:89:77:13:c1:0f:5a:2e:00:69:66:70:7f:01:
7b:b5:72:3b:e5:9f:36:e3:91:53:25:42:c1:62:27:df:5a:e7:
0b:75:d4:3c:24:74:71:4d:56:94:d4:4e:bf:b4:4f:19:06:e4:
43:f7:2e:c4:6d:22:17:87:20:1a:d7:21:d8:13:ad:3a:ea:2e:
04:c1:88:c7:b1:a6:ce:3e:dd:e3:06:27:e2:54:35:44:f5:9a:
cb:6b:b0:9d:d7:0e:11:96:7f:a4:c9:f6:7e:f2:b6:7f:a4:d0:
17:88:c6:b1:3e:95:98:72:15:83:da:fb:5f:63:9a:06:36:c6:
84:52:87:98:72:18:b2:88:d3:be:21:29:4e:8d:1d:36:fc:9c:
99:1f:f0:d2:df:36:89:ca:b5:56:7e:05:e8:00:a6:cf:85:6a:
67:56:d3:16:48:76:b0:be:6f:85:59:ce:ac:c1:1a:6e:1b:3a:
a4:dd:03:b7:be:27:e9:0c:d6:92:40:72:27:8e:36:12:99:91:
57:a4:4e:91:9e:e3:e6:ea:52:31:96:c1:6e:15:22:ee:88:af:
32:a1:13:83:06:9b:18:39:5d:2e:c0:36:4c:23:cf:40:1a:d1:
f4:86:5b:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yHOkuVj4eZwzK/9rRT3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZmQzNjA3MzZmMWZhNmM5NzcwZmNiNDhiZTU5NGJlNjA5
ZTViM2UwHhcNMjUxMDIwMDQwMjMwWhcNMjUxMDIxMDQwMjMwWjAzMTEwLwYDVQQD
Eyg0NGIxMjdlZTU0MTkwYzc1MTMzZTU0YWMzNjMzNTgxMzFlNWM2Yzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTBUpPfVteGjEY7sBwffEKt0wkD5
27lCa7TqRc5Ar96Hdo5XsCrTYvKoVQJ27ZFIsOP0zBpn4zP1XULlu0poRlrHOD0k
h886HHIqpyGEObI3W0mN7lmArGqN/Fwh/z7kE7mSijBTPAMyD3GbCprRPn1xB9xf
LNdU6k+HFhqLzllipQdUFNw5PfZKwiUSlUyvRkiCN29GTLHMNDLr+ljHhj6RzD+A
7X70ilXwRW/rzNG3Bl3BWV7JqSfXuXtMg23qL/phwLzukBNO7Czuu1GSCCINOOjp
Pa7MdzVpErOTn6w9h3ihofSXO5fNpTb4dDdmBJaROp/9u8kam/d9vXUoBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESxJ+5UGQx1Ez5UrDYzWBMeXGyJMB8GA1UdIwQY
MBaAFGz9Ngc28fpsl3D8tIvllL5gnls+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgt
ZWFmNjhiNTllNTk5LzEvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgtZWFmNjhiNTllNTk5
LzEvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBlFN2Gp
v7pf3g/Pkep5tHfpBy7KmPKJdxPBD1ouAGlmcH8Be7VyO+WfNuORUyVCwWIn31rn
C3XUPCR0cU1WlNROv7RPGQbkQ/cuxG0iF4cgGtch2BOtOuouBMGIx7Gmzj7d4wYn
4lQ1RPWay2uwndcOEZZ/pMn2fvK2f6TQF4jGsT6VmHIVg9r7X2OaBjbGhFKHmHIY
sojTviEpTo0dNvycmR/w0t82icq1Vn4F6ACmz4VqZ1bTFkh2sL5vhVnOrMEabhs6
pN0Dt74n6QzWkkByJ442EpmRV6ROkZ7j5upSMZbBbhUi7oivMqETgwabGDldLsA2
TCPPQBrR9IZbiw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:25:03 2025 by rpki-client