Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File: bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier: SYr0RAJ5xbnfuhX/GMrse+a8jyR5uuywzZDHD5zCvH4=
Subject key identifier: 3D:8E:02:80:FB:77:9B:64:21:61:DE:BF:A3:0A:1D:B9:CD:59:F6:5F
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial: 0199FE470347600BBCD43451A077F820A1F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 21:01:30 +0000
Manifest this update: Sun 19 Oct 2025 21:01:30 +0000
Manifest next update: Mon 20 Oct 2025 21:01:30 +0000
Files and hashes: 1: NEV_-oCqja9NUg4iDlmgfjuQWbE.roa (hash: ReSei0m0CMnR22mGMZi2S582O1et/LA16EgWBVKTiLE=)
2: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: rwSAkT/2grO6OPCgcrRC1H/FaIk+c21Q5V5kRC4h9gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:03:47:60:0b:bc:d4:34:51:a0:77:f8:20:a1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
Validity
Not Before: Oct 19 21:01:30 2025 GMT
Not After : Oct 20 21:01:30 2025 GMT
Subject: CN=3d8e0280fb779b642161debfa30a1db9cd59f65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:bd:c7:ce:e8:6c:e4:ba:97:85:fb:42:d3:
79:6f:b5:46:11:fa:e3:08:5a:ff:3b:e6:b8:30:29:
bb:26:a4:1c:1f:2d:71:d3:af:75:38:e6:0b:8c:59:
f7:31:b7:a4:0b:dc:ac:db:33:f7:c3:cf:38:e5:38:
f1:c0:e9:e1:3a:e9:24:ec:67:79:b1:7f:a5:a8:df:
2f:ee:50:b6:9c:99:09:d6:6a:3f:a4:20:7e:b4:e1:
7b:aa:15:b0:37:d7:1c:6c:c8:f2:e9:3b:a1:4c:2e:
0b:03:1f:74:d9:86:c6:63:78:e1:9a:9f:77:39:b3:
f1:ee:00:6e:83:5d:38:50:90:d7:1c:92:4c:85:a2:
af:85:71:8d:5c:19:65:e2:a7:69:1c:3b:a5:0c:b6:
ea:0f:77:e9:74:17:a5:2a:c0:d1:cd:d9:d1:18:fb:
0c:84:3d:ba:b0:6c:3b:21:ed:1f:27:cb:ba:2a:ac:
a4:15:91:eb:a6:49:e9:31:89:a0:c6:f1:0e:d2:ef:
fa:7e:e0:f7:06:32:5c:62:cc:38:f2:bf:1f:5d:53:
29:48:a1:2d:09:b2:58:2f:d9:67:97:01:98:bc:ee:
43:ae:4c:e6:f8:0b:7c:d2:e7:a6:a1:ef:7a:40:5d:
f1:b6:c6:49:6d:35:e0:db:dd:e5:17:75:3d:ba:a2:
8e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8E:02:80:FB:77:9B:64:21:61:DE:BF:A3:0A:1D:B9:CD:59:F6:5F
X509v3 Authority Key Identifier:
keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0b:a1:d7:97:d8:d6:e3:0b:61:55:0b:f3:cd:85:da:b3:93:
cf:8e:ed:56:0f:22:c4:93:90:11:b9:b9:1b:01:0d:8b:8f:93:
d8:3d:64:a0:d1:89:b0:d4:6f:1f:db:fb:6e:0d:14:86:1f:3d:
c7:3c:c9:3b:bf:c8:98:1a:7f:05:c7:1d:56:c3:5a:74:be:53:
41:3c:78:aa:50:da:00:d0:e8:91:71:69:31:af:c4:c9:5a:c1:
ba:8c:30:c2:50:11:00:c8:97:33:5b:2b:96:e6:79:c7:94:d8:
8c:3e:e1:5b:ed:7f:16:87:2c:6e:d1:c9:db:b2:e8:86:b8:1b:
06:1b:6f:80:92:98:dc:6b:16:28:b7:2b:79:7c:cd:5c:b2:d9:
eb:02:a7:2e:5a:a0:b7:c9:53:48:69:84:d4:9d:ff:ea:ec:ab:
08:72:83:b2:7c:ed:09:5f:58:f8:6a:02:3f:af:cb:5e:4d:9a:
73:78:1f:90:67:cd:2c:f4:2a:d4:0e:71:18:8c:d8:c8:f7:78:
9c:d0:94:08:ec:f7:84:8b:9b:72:6e:a7:d4:e8:fe:c3:8b:ea:
3a:37:69:64:69:24:86:fb:e7:58:ed:48:bb:ea:c1:51:e4:ff:
d4:76:0b:5c:e6:9e:72:cd:b4:d6:2c:e6:0a:d6:24:2d:d4:f6:
13:06:1f:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RwNHYAu81DRRoHf4IKHyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYzU3NjkxYzE1YzllYjNhMzc5OTE3ODA2ZDI5NGZkMzkx
NzVlMDcwHhcNMjUxMDE5MjEwMTMwWhcNMjUxMDIwMjEwMTMwWjAzMTEwLwYDVQQD
EygzZDhlMDI4MGZiNzc5YjY0MjE2MWRlYmZhMzBhMWRiOWNkNTlmNjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx169x87obOS6l4X7QtN5b7VGEfrj
CFr/O+a4MCm7JqQcHy1x0691OOYLjFn3MbekC9ys2zP3w8845TjxwOnhOukk7Gd5
sX+lqN8v7lC2nJkJ1mo/pCB+tOF7qhWwN9ccbMjy6TuhTC4LAx902YbGY3jhmp93
ObPx7gBug104UJDXHJJMhaKvhXGNXBll4qdpHDulDLbqD3fpdBelKsDRzdnRGPsM
hD26sGw7Ie0fJ8u6KqykFZHrpknpMYmgxvEO0u/6fuD3BjJcYsw48r8fXVMpSKEt
CbJYL9lnlwGYvO5Drkzm+At80uemoe96QF3xtsZJbTXg293lF3U9uqKO3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2OAoD7d5tkIWHev6MKHbnNWfZfMB8GA1UdIwQY
MBaAFGzFdpHBXJ6zo3mReAbSlP05F14HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMt
ZmRkYjk2ZTZkYWQxLzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMtZmRkYjk2ZTZkYWQx
LzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALguh15fY
1uMLYVUL882F2rOTz47tVg8ixJOQEbm5GwENi4+T2D1koNGJsNRvH9v7bg0Uhh89
xzzJO7/ImBp/BccdVsNadL5TQTx4qlDaANDokXFpMa/EyVrBuowwwlARAMiXM1sr
luZ5x5TYjD7hW+1/FocsbtHJ27LohrgbBhtvgJKY3GsWKLcreXzNXLLZ6wKnLlqg
t8lTSGmE1J3/6uyrCHKDsnztCV9Y+GoCP6/LXk2ac3gfkGfNLPQq1A5xGIzYyPd4
nNCUCOz3hIubcm6n1Oj+w4vqOjdpZGkkhvvnWO1Iu+rBUeT/1HYLXOaecs201izm
CtYkLdT2EwYfsw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:26:36 2025 by rpki-client