Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier: LdZ72VzbfKgwylaaU5RqKyHHhy2mAHs/lCfQ0ii4w/k=
Subject key identifier: 0E:84:5C:D7:8E:41:7D:17:34:F2:40:0A:C6:62:26:E1:61:CB:05:FA
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 0199FB7C7A4EB041A493CF11490B4D85A230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:02 +0000
Manifest this update: Sun 19 Oct 2025 08:01:02 +0000
Manifest next update: Mon 20 Oct 2025 08:01:02 +0000
Files and hashes: 1: AsYD6hoeMD1Ii3ouRsCjixk0isY.roa (hash: zcxHBop/y0fEgcQmkIj/4jrHcOuohd20eiO0g8A5mhM=)
2: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: 0+iV1QD7iReovsawZoeESXs8l5sErgoLJcnag18ZAs4=)
3: unS2BH6IRvMlWO0CeZZ9qSzMqA0.roa (hash: 7PVmOlO8Ugj501NmZwLgajumsSoAEyC9CKRs3IKLmtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7a:4e:b0:41:a4:93:cf:11:49:0b:4d:85:a2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Oct 19 08:01:02 2025 GMT
Not After : Oct 20 08:01:02 2025 GMT
Subject: CN=0e845cd78e417d1734f2400ac66226e161cb05fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:6b:6e:42:17:6f:67:1f:30:72:2f:c2:ae:
b3:6e:f3:ed:e8:37:5d:6e:4c:6d:61:ad:21:3b:53:
07:98:09:4a:b4:41:02:5a:63:f4:83:48:f2:e7:37:
3a:d8:9f:59:aa:9e:84:64:0c:57:2a:12:9a:d3:58:
2d:cd:ef:7b:ae:9d:c1:74:43:e6:96:36:c3:5b:a3:
85:4c:c2:0e:31:be:c7:66:46:ab:5f:25:5e:ba:0d:
fc:cf:a9:a6:9e:1c:f9:7e:9a:59:95:17:9b:b2:20:
42:7a:99:98:34:2a:0d:7b:ae:94:01:41:6f:08:99:
55:93:5f:35:78:52:8f:68:a3:5a:3a:ad:c2:3e:d9:
1c:a2:73:b5:1c:d6:51:3c:d7:fc:78:d5:bb:73:fe:
62:fa:a9:fc:8e:6e:82:c0:6d:4f:55:2a:0e:57:95:
1d:11:f6:95:ff:86:82:0c:ab:13:93:60:f2:d6:ff:
22:81:ef:29:a7:ab:2d:1e:6f:36:a9:d2:2e:fa:12:
74:d0:37:8f:85:ee:46:5c:03:8b:c7:68:bd:3b:80:
51:cc:e5:e8:dd:df:f6:a8:8b:d1:10:13:cb:b1:f3:
db:62:09:3f:28:df:02:68:11:d7:ff:d5:d3:1f:0a:
04:df:cb:40:5d:e0:20:41:65:56:da:05:88:b8:d8:
57:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:84:5C:D7:8E:41:7D:17:34:F2:40:0A:C6:62:26:E1:61:CB:05:FA
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e8:ff:e8:3e:aa:8f:fa:9c:e6:1a:7e:de:58:43:bd:24:ee:
fc:34:33:e4:9e:88:3b:84:32:86:9e:5e:4c:47:42:a2:e2:63:
5a:42:32:d4:1b:ed:73:16:3f:f3:4d:c2:aa:a7:2f:a3:32:0d:
a4:01:91:32:5e:35:0b:03:9b:93:e0:af:dd:3e:42:29:83:91:
53:4f:c1:bc:fa:12:7e:ef:f3:d0:d7:bf:bd:36:88:d6:01:f4:
dc:c7:b8:38:58:7c:14:18:87:89:c8:77:1d:5f:0b:78:24:c7:
b2:93:9a:63:e8:f7:82:32:a4:50:17:54:48:b6:d8:f1:9c:c2:
28:5c:0b:7c:89:a2:cf:0d:0f:a7:e1:b6:e5:ac:8d:c5:2b:da:
4f:52:45:c7:bd:01:6d:6a:32:84:c4:82:69:cd:3a:0b:aa:a3:
0a:48:ce:1f:24:b3:3c:7a:ba:1d:68:c1:1f:80:bb:34:b7:02:
e9:3d:6b:19:21:ac:d5:5e:43:6f:da:1b:5c:fa:0f:79:8f:b9:
3d:a3:f5:38:78:10:f7:ca:0d:9d:cc:90:72:5b:f6:ae:8a:1d:
55:33:6c:f6:fd:1f:9e:5a:b6:31:97:7c:c3:55:5a:89:85:9f:
71:0b:56:8b:65:65:96:cf:1f:3e:0f:96:c3:d9:93:62:26:30:
6f:c4:49:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fHpOsEGkk88RSQtNhaIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZGE3NTcxYzVlYjEzYjFhZTRmNDQxN2NlZmVjMmJkNzc5
MDJlMmQwHhcNMjUxMDE5MDgwMTAyWhcNMjUxMDIwMDgwMTAyWjAzMTEwLwYDVQQD
EygwZTg0NWNkNzhlNDE3ZDE3MzRmMjQwMGFjNjYyMjZlMTYxY2IwNWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoJrbkIXb2cfMHIvwq6zbvPt6Ddd
bkxtYa0hO1MHmAlKtEECWmP0g0jy5zc62J9Zqp6EZAxXKhKa01gtze97rp3BdEPm
ljbDW6OFTMIOMb7HZkarXyVeug38z6mmnhz5fppZlRebsiBCepmYNCoNe66UAUFv
CJlVk181eFKPaKNaOq3CPtkconO1HNZRPNf8eNW7c/5i+qn8jm6CwG1PVSoOV5Ud
EfaV/4aCDKsTk2Dy1v8ige8pp6stHm82qdIu+hJ00DePhe5GXAOLx2i9O4BRzOXo
3d/2qIvREBPLsfPbYgk/KN8CaBHX/9XTHwoE38tAXeAgQWVW2gWIuNhXhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6EXNeOQX0XNPJACsZiJuFhywX6MB8GA1UdIwQY
MBaAFAXadXHF6xOxrk9EF87+wr13kC4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEt
MzY1NTMwMmJmMDA1LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEtMzY1NTMwMmJmMDA1
LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdej/6D6q
j/qc5hp+3lhDvSTu/DQz5J6IO4Qyhp5eTEdCouJjWkIy1BvtcxY/803CqqcvozIN
pAGRMl41CwObk+Cv3T5CKYORU0/BvPoSfu/z0Ne/vTaI1gH03Me4OFh8FBiHich3
HV8LeCTHspOaY+j3gjKkUBdUSLbY8ZzCKFwLfImizw0Pp+G25ayNxSvaT1JFx70B
bWoyhMSCac06C6qjCkjOHySzPHq6HWjBH4C7NLcC6T1rGSGs1V5Db9obXPoPeY+5
PaP1OHgQ98oNncyQclv2roodVTNs9v0fnlq2MZd8w1VaiYWfcQtWi2Vlls8fPg+W
w9mTYiYwb8RJ9A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:58 2025 by rpki-client