Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
File: bvSHSZTeehTktYT20rlrLZkbHpE.mft (raw, json)
Hash identifier: g6S9YR//ZXWF1V0btShj1nTe9t0pPSwPLgGqllyuxOA=
Subject key identifier: 4A:71:3E:D2:47:F9:EE:9C:A7:8B:6F:5C:CC:15:AE:67:7C:08:B6:C2
Authority key identifier: 6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91
Certificate issuer: /CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
Certificate serial: 0199FBEBE2550F389356C94EFDBA6B77F430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
Manifest number: 0863
Signing time: Sun 19 Oct 2025 10:02:44 +0000
Manifest this update: Sun 19 Oct 2025 10:02:44 +0000
Manifest next update: Mon 20 Oct 2025 10:02:44 +0000
Files and hashes: 1: bvSHSZTeehTktYT20rlrLZkbHpE.crl (hash: shTbFrTaIUOuXhweti1d9yFdPFJF5t6LjN+r9IzZ30c=)
2: nAw-tu2iFsVUAoD3d-PCO-n0nlU.roa (hash: NhBATsK7uGGdrOKi4JXrK4LsPo0OG9umtxigUZlp7BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e2:55:0f:38:93:56:c9:4e:fd:ba:6b:77:f4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
Validity
Not Before: Oct 19 10:02:44 2025 GMT
Not After : Oct 20 10:02:44 2025 GMT
Subject: CN=4a713ed247f9ee9ca78b6f5ccc15ae677c08b6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4b:97:95:c6:49:51:19:e2:fa:29:52:ca:2d:
a7:57:80:50:6f:f3:a4:1f:fc:18:b3:3d:18:66:cf:
3f:fb:7d:21:35:fd:8a:fc:1d:3a:0c:37:a8:0e:af:
a4:93:ad:97:b9:8f:ab:e7:59:ea:7b:bf:f6:c5:4c:
1a:06:5d:55:60:41:b0:00:8b:da:f9:25:54:00:27:
f6:77:40:83:ab:c9:74:a5:63:9e:d4:cd:e5:52:fd:
9d:28:9f:ef:2a:f8:7e:67:7c:1d:99:6a:cb:25:3e:
0f:f8:1d:eb:e9:dc:5d:66:40:05:ae:b7:bb:02:21:
ae:72:ca:27:90:9e:ed:e7:8c:ac:8a:80:36:45:a1:
fc:3f:d1:3e:b4:f7:4b:b1:c7:94:a9:b0:72:79:67:
e2:39:01:4e:52:c6:dc:c6:e4:ca:d4:dd:9e:d0:33:
72:70:df:41:c7:62:db:a7:d1:81:23:24:b7:73:05:
a9:3a:1e:c8:a5:c4:11:38:47:e9:d0:d4:ab:4b:84:
79:58:8d:49:e1:b8:0b:7c:3d:f2:8a:00:8b:32:ea:
50:4a:9a:10:81:05:e8:97:35:4f:56:cd:c5:79:45:
5f:a3:64:6f:5d:4b:41:ae:3d:5f:81:e1:3f:37:74:
92:61:27:a3:94:cc:62:c2:d0:15:d0:4a:bb:8b:f9:
d8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:71:3E:D2:47:F9:EE:9C:A7:8B:6F:5C:CC:15:AE:67:7C:08:B6:C2
X509v3 Authority Key Identifier:
keyid:6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e2:92:ef:e5:54:be:36:c2:79:f0:91:64:25:ed:6a:b6:84:
c6:23:b4:1a:5a:34:99:ad:e3:cb:4e:14:45:ad:21:f7:a5:af:
8b:88:9a:8c:86:21:ab:66:3b:5f:f9:37:4f:b8:9b:35:58:86:
7a:63:8c:ed:52:6f:b2:19:e7:f0:57:03:84:9e:dd:e5:8b:b8:
b2:e7:f3:13:a6:cf:87:5f:bf:db:da:96:e6:e4:bd:2c:50:87:
75:0e:70:18:46:ad:c3:88:c0:83:03:fa:15:86:d2:7c:94:6e:
43:7d:ee:a0:d6:e6:22:45:41:5d:49:9f:5b:c9:41:75:14:13:
8f:4f:8d:cd:74:a1:c1:ba:cf:3c:58:2c:37:e0:76:36:40:d1:
68:23:41:05:c6:1c:29:c2:b9:34:ed:6e:eb:87:d9:73:6b:20:
59:20:d2:e6:fc:d9:04:e0:a4:7f:c4:29:b8:6c:d5:7d:b5:fd:
e8:47:05:24:0b:82:12:d4:df:12:98:db:8e:c8:85:e3:82:d8:
50:c6:e1:67:8a:22:fc:99:54:2d:67:e6:58:57:63:a7:a0:18:
bb:e5:c6:01:42:78:82:14:2b:39:ee:62:14:c0:d2:c3:5f:f2:
98:70:e0:bc:94:e1:fa:02:85:1b:a5:b1:f2:05:04:59:88:e8:
e5:1d:30:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76+JVDziTVslO/bprd/QwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZjQ4NzQ5OTRkZTdhMTRlNGI1ODRmNmQyYjk2YjJkOTkx
YjFlOTEwHhcNMjUxMDE5MTAwMjQ0WhcNMjUxMDIwMTAwMjQ0WjAzMTEwLwYDVQQD
Eyg0YTcxM2VkMjQ3ZjllZTljYTc4YjZmNWNjYzE1YWU2NzdjMDhiNmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUuXlcZJURni+ilSyi2nV4BQb/Ok
H/wYsz0YZs8/+30hNf2K/B06DDeoDq+kk62XuY+r51nqe7/2xUwaBl1VYEGwAIva
+SVUACf2d0CDq8l0pWOe1M3lUv2dKJ/vKvh+Z3wdmWrLJT4P+B3r6dxdZkAFrre7
AiGucsonkJ7t54ysioA2RaH8P9E+tPdLsceUqbByeWfiOQFOUsbcxuTK1N2e0DNy
cN9Bx2Lbp9GBIyS3cwWpOh7IpcQROEfp0NSrS4R5WI1J4bgLfD3yigCLMupQSpoQ
gQXolzVPVs3FeUVfo2RvXUtBrj1fgeE/N3SSYSejlMxiwtAV0Eq7i/nYJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpxPtJH+e6cp4tvXMwVrmd8CLbCMB8GA1UdIwQY
MBaAFG70h0mU3noU5LWE9tK5ay2ZGx6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnZTSFNaVGVlaFRrdFlUMjBybHJMWmtiSHBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMTE1MDgtZDVhMi00ZGM1LWJjOTMt
NTBlNzQ2NDI0NjMwLzEvYnZTSFNaVGVlaFRrdFlUMjBybHJMWmtiSHBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zMTE1MDgtZDVhMi00ZGM1LWJjOTMtNTBlNzQ2NDI0NjMw
LzEvYnZTSFNaVGVlaFRrdFlUMjBybHJMWmtiSHBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOKS7+VU
vjbCefCRZCXtaraExiO0Glo0ma3jy04URa0h96Wvi4iajIYhq2Y7X/k3T7ibNViG
emOM7VJvshnn8FcDhJ7d5Yu4sufzE6bPh1+/29qW5uS9LFCHdQ5wGEatw4jAgwP6
FYbSfJRuQ33uoNbmIkVBXUmfW8lBdRQTj0+NzXShwbrPPFgsN+B2NkDRaCNBBcYc
KcK5NO1u64fZc2sgWSDS5vzZBOCkf8QpuGzVfbX96EcFJAuCEtTfEpjbjsiF44LY
UMbhZ4oi/JlULWfmWFdjp6AYu+XGAUJ4ghQrOe5iFMDSw1/ymHDgvJTh+gKFG6Wx
8gUEWYjo5R0waw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:00 2025 by rpki-client