Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: VYaVIIxPF0Mky9+NLQA0odOwTNAd3FBbg59fJq9mkak=
Subject key identifier: 16:85:5A:EE:D2:3B:23:48:A2:1F:76:B7:9E:CB:C8:91:72:CB:70:3D
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 0198D5F16CEB8DC2628F38E9660EEFF9D56B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0B0E
Signing time: Sat 23 Aug 2025 08:00:25 +0000
Manifest this update: Sat 23 Aug 2025 08:00:25 +0000
Manifest next update: Sun 24 Aug 2025 08:00:25 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: O1oEtwgwKcd93FWmPHHfDVRgM4WK39Rrkhs9RINmp5A=)
2: UiH643w1GrSMb8MdWOXuMKoflu8.roa (hash: Ox1u3sls+4F8aVo0Ns4HTUNM65vIvg8OdP6tILBOlsE=)
3: rLCMQEvNZKScfiZ6xzabxSP9S3Q.roa (hash: pzK0hpbuvro5D5X8t6Q8snrn8GpjD/ysREOxL+vWCA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:6c:eb:8d:c2:62:8f:38:e9:66:0e:ef:f9:d5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Aug 23 08:00:25 2025 GMT
Not After : Aug 24 08:00:25 2025 GMT
Subject: CN=16855aeed23b2348a21f76b79ecbc89172cb703d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bc:05:96:a8:c5:23:a2:b2:17:98:fa:4f:74:
55:c2:d8:96:22:77:29:fa:c3:6b:d2:39:b4:ef:6d:
4b:35:f0:1c:87:3b:a5:41:9e:31:e0:63:d6:52:b9:
52:ab:fe:de:79:e6:60:4c:e0:5d:7a:21:bc:95:c1:
44:ac:45:71:08:fc:df:95:02:e7:16:ec:26:3e:26:
33:bf:e9:aa:a7:4e:79:5a:12:a3:95:e2:51:a9:db:
d2:0c:8d:76:c9:55:7f:d3:71:77:96:af:54:3a:a1:
c8:f7:00:af:76:97:0a:dc:14:7a:1c:9a:80:33:a0:
e8:8d:29:5d:ab:c2:55:3d:69:3c:2f:a8:3b:64:85:
7c:ac:07:9a:b0:f5:37:ee:c4:bd:37:13:a8:b3:e8:
02:8c:a9:d9:ea:38:ce:c0:53:12:ee:c0:05:9c:79:
6a:b8:89:78:85:80:ea:f9:6c:b9:d8:b7:f8:79:62:
65:b4:ce:b2:41:0d:fa:e8:39:ef:5a:08:b9:ec:a6:
f3:78:1d:37:29:ec:70:79:31:62:88:e8:59:10:eb:
c2:d9:4b:b8:f5:df:4c:8d:13:e9:85:48:14:c6:a4:
7e:b9:ca:7b:f0:f3:1a:31:a3:0e:b2:21:78:a4:ce:
18:64:fd:f3:57:3d:42:60:7a:61:65:0a:45:06:61:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:85:5A:EE:D2:3B:23:48:A2:1F:76:B7:9E:CB:C8:91:72:CB:70:3D
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:74:f7:6e:c9:32:65:38:f1:ff:e8:40:c5:93:b4:d7:e6:30:
d9:72:34:28:cb:40:4d:e8:fb:66:fd:b2:90:7f:8b:ec:ef:90:
f0:5a:3c:be:8c:a0:32:f0:85:56:1f:da:cf:05:60:1a:fd:43:
be:0d:e3:0b:05:5e:58:ea:fb:36:37:85:ec:44:ff:7c:c9:88:
06:9c:4c:52:02:cc:ed:e4:fc:91:c6:cf:08:53:90:82:b5:8c:
4f:ad:77:75:d9:d2:e4:d1:e4:40:70:51:1f:dc:a3:67:46:91:
58:a3:59:f8:a5:0a:15:46:e4:d3:0f:74:82:bd:c4:c0:66:98:
ab:e8:9e:95:54:39:34:99:de:2e:41:9c:01:76:dd:8b:58:3d:
b1:be:7d:b7:3c:91:1e:b0:6f:49:26:a8:48:d1:13:97:2d:89:
36:77:46:6b:62:17:f2:28:20:8a:a5:ac:92:6b:5e:8c:56:be:
5b:14:4f:c1:7d:04:8e:ed:93:5b:b0:1f:6e:f2:09:27:bf:50:
41:8a:c2:ee:96:2e:ac:78:18:be:4a:57:92:30:7f:d5:56:f7:
92:e9:bb:a5:4e:d1:95:8b:be:ce:22:3b:1f:13:ef:61:ac:ca:
a6:90:48:39:33:6a:9d:15:13:8f:07:3c:99:c5:11:c2:e9:a8:
a5:7c:4d:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8WzrjcJijzjpZg7v+dVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YzVmMWQxNzc5ZWI3MDkwOTAzNjVkYjk4MjkxN2FkZmQw
ZjgwNDkwHhcNMjUwODIzMDgwMDI1WhcNMjUwODI0MDgwMDI1WjAzMTEwLwYDVQQD
EygxNjg1NWFlZWQyM2IyMzQ4YTIxZjc2Yjc5ZWNiYzg5MTcyY2I3MDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLwFlqjFI6KyF5j6T3RVwtiWIncp
+sNr0jm0721LNfAchzulQZ4x4GPWUrlSq/7eeeZgTOBdeiG8lcFErEVxCPzflQLn
FuwmPiYzv+mqp055WhKjleJRqdvSDI12yVV/03F3lq9UOqHI9wCvdpcK3BR6HJqA
M6DojSldq8JVPWk8L6g7ZIV8rAeasPU37sS9NxOos+gCjKnZ6jjOwFMS7sAFnHlq
uIl4hYDq+Wy52Lf4eWJltM6yQQ366DnvWgi57KbzeB03KexweTFiiOhZEOvC2Uu4
9d9MjRPphUgUxqR+ucp78PMaMaMOsiF4pM4YZP3zVz1CYHphZQpFBmHjNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaFWu7SOyNIoh92t57LyJFyy3A9MB8GA1UdIwQY
MBaAFATF8dF3nrcJCQNl25gpF639D4BJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYt
MDU5MjQ1M2RmN2QyLzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYtMDU5MjQ1M2RmN2Qy
LzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHT3bsky
ZTjx/+hAxZO01+Yw2XI0KMtATej7Zv2ykH+L7O+Q8Fo8voygMvCFVh/azwVgGv1D
vg3jCwVeWOr7NjeF7ET/fMmIBpxMUgLM7eT8kcbPCFOQgrWMT613ddnS5NHkQHBR
H9yjZ0aRWKNZ+KUKFUbk0w90gr3EwGaYq+ielVQ5NJneLkGcAXbdi1g9sb59tzyR
HrBvSSaoSNETly2JNndGa2IX8iggiqWskmtejFa+WxRPwX0Eju2TW7AfbvIJJ79Q
QYrC7pYurHgYvkpXkjB/1Vb3kum7pU7RlYu+ziI7HxPvYazKppBIOTNqnRUTjwc8
mcURwumopXxNmA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:48 2025 by rpki-client