
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: MDqgsP78Wi30keG0XypN0idvDp9ZpJxATyeit4r9Lag=
Subject key identifier: 6A:AB:17:4F:7F:8F:B1:E3:AF:E7:E0:B5:FF:75:CC:AA:31:12:AC:D8
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 0199FB7CACDD19B53FA83322A50AE03F91DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0BA6
Signing time: Sun 19 Oct 2025 08:01:15 +0000
Manifest this update: Sun 19 Oct 2025 08:01:15 +0000
Manifest next update: Mon 20 Oct 2025 08:01:15 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: 40UD0xjaKm0Zrh+qdy8xadPlWtdYzW6CFq2KWbvJ7Fw=)
2: UiH643w1GrSMb8MdWOXuMKoflu8.roa (hash: Ox1u3sls+4F8aVo0Ns4HTUNM65vIvg8OdP6tILBOlsE=)
3: rLCMQEvNZKScfiZ6xzabxSP9S3Q.roa (hash: pzK0hpbuvro5D5X8t6Q8snrn8GpjD/ysREOxL+vWCA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ac:dd:19:b5:3f:a8:33:22:a5:0a:e0:3f:91:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Oct 19 08:01:15 2025 GMT
Not After : Oct 20 08:01:15 2025 GMT
Subject: CN=6aab174f7f8fb1e3afe7e0b5ff75ccaa3112acd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:22:80:ba:36:22:03:79:6d:58:93:e3:93:
0e:e9:a5:23:53:0d:e7:4e:09:bd:88:a4:28:a6:15:
72:28:bc:db:c7:4d:ee:6e:83:c6:d7:3d:cc:ad:ac:
a9:45:8b:84:16:93:2a:a9:fa:32:92:c5:9a:4c:42:
d8:df:b4:e6:e7:81:24:f5:56:fb:9e:a0:8f:31:cc:
1f:6a:96:7b:b9:cd:0a:df:8d:65:db:26:f2:99:dd:
5b:10:d9:ff:a4:83:da:23:1f:e6:cb:0c:28:ad:12:
de:89:55:4f:16:8c:c6:9a:e0:1a:9e:e9:73:db:ce:
3b:36:85:51:ef:72:fd:c9:75:3e:19:38:0a:12:de:
7e:4e:69:49:e1:2c:60:e9:bb:94:55:a8:e2:2b:82:
bb:95:75:75:96:6b:db:16:f3:8e:0d:3e:8b:f8:d6:
60:b0:55:47:c3:e6:67:05:55:c6:dd:bc:fd:24:73:
49:a3:6d:02:57:a7:af:63:da:99:35:29:8e:cd:10:
65:1a:9f:ff:cb:5b:a6:73:f5:de:01:3a:4f:f7:28:
bb:97:ce:96:ea:02:96:a7:2f:20:df:1a:f3:8d:e3:
2a:98:0e:e9:69:34:2a:57:c5:49:19:07:09:e8:3e:
26:b9:8c:b1:7d:95:e4:9e:c3:1c:1c:9f:61:e9:b4:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AB:17:4F:7F:8F:B1:E3:AF:E7:E0:B5:FF:75:CC:AA:31:12:AC:D8
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d6:3b:85:2f:1c:a5:1b:1b:77:f2:71:32:f5:45:98:82:d3:
40:c7:60:e4:11:5a:74:b3:a6:e0:21:2e:c1:0b:7a:2a:ee:3e:
f8:86:2e:fe:64:fd:20:91:68:45:07:fb:d5:5f:78:e2:cd:31:
f8:63:51:1c:60:a3:30:a5:01:43:cf:f6:95:2d:e2:cd:b7:bf:
31:ed:92:82:cd:75:f9:45:84:f2:18:29:8e:27:7c:de:5f:ac:
9e:53:2b:59:76:91:da:94:40:9f:3f:03:f3:86:0c:08:7c:94:
04:a9:41:ea:b5:f0:c3:e1:42:35:38:04:73:3e:00:7e:31:ad:
84:aa:50:4c:92:be:d8:e8:8c:7d:72:21:fb:ba:3f:21:02:28:
15:9b:ba:d7:13:7d:34:b8:94:6b:70:34:5e:39:da:0d:bc:c4:
95:5b:6b:94:26:f1:42:da:26:1d:89:43:ff:1a:c6:3e:5e:49:
7d:03:7f:25:c3:de:11:81:4b:32:3e:ac:e7:94:d7:b3:f7:c7:
e5:43:03:be:ef:a4:78:af:de:0f:c1:f7:bf:1f:32:4f:f1:8f:
14:21:1b:3b:21:92:95:54:90:0d:8c:02:33:21:3d:1e:10:6f:
78:63:fd:5d:e8:1d:df:05:f6:44:b5:ad:7c:d1:dd:eb:f2:73:
f3:28:40:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fKzdGbU/qDMipQrgP5HbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YzVmMWQxNzc5ZWI3MDkwOTAzNjVkYjk4MjkxN2FkZmQw
ZjgwNDkwHhcNMjUxMDE5MDgwMTE1WhcNMjUxMDIwMDgwMTE1WjAzMTEwLwYDVQQD
Eyg2YWFiMTc0ZjdmOGZiMWUzYWZlN2UwYjVmZjc1Y2NhYTMxMTJhY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwEigLo2IgN5bViT45MO6aUjUw3n
Tgm9iKQophVyKLzbx03uboPG1z3MraypRYuEFpMqqfoyksWaTELY37Tm54Ek9Vb7
nqCPMcwfapZ7uc0K341l2ybymd1bENn/pIPaIx/mywworRLeiVVPFozGmuAanulz
2847NoVR73L9yXU+GTgKEt5+TmlJ4Sxg6buUVajiK4K7lXV1lmvbFvOODT6L+NZg
sFVHw+ZnBVXG3bz9JHNJo20CV6evY9qZNSmOzRBlGp//y1umc/XeATpP9yi7l86W
6gKWpy8g3xrzjeMqmA7paTQqV8VJGQcJ6D4muYyxfZXknsMcHJ9h6bQE2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqrF09/j7Hjr+fgtf91zKoxEqzYMB8GA1UdIwQY
MBaAFATF8dF3nrcJCQNl25gpF639D4BJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYt
MDU5MjQ1M2RmN2QyLzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYtMDU5MjQ1M2RmN2Qy
LzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9Y7hS8c
pRsbd/JxMvVFmILTQMdg5BFadLOm4CEuwQt6Ku4++IYu/mT9IJFoRQf71V944s0x
+GNRHGCjMKUBQ8/2lS3izbe/Me2Sgs11+UWE8hgpjid83l+snlMrWXaR2pRAnz8D
84YMCHyUBKlB6rXww+FCNTgEcz4AfjGthKpQTJK+2OiMfXIh+7o/IQIoFZu61xN9
NLiUa3A0XjnaDbzElVtrlCbxQtomHYlD/xrGPl5JfQN/JcPeEYFLMj6s55TXs/fH
5UMDvu+keK/eD8H3vx8yT/GPFCEbOyGSlVSQDYwCMyE9HhBveGP9Xegd3wX2RLWt
fNHd6/Jz8yhAEg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:19 2025 by rpki-client