Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier: KsycK2uxqepR9w1jrnhaPhyxeJAR4pbucSIyVJCt0u8=
Subject key identifier: 84:41:72:17:BB:A1:93:42:9A:90:63:46:EC:3B:24:03:26:97:4D:CC
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 0199FB0EB6E1AB6D8D30ACB73A1FFBFBAC18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number: 0B33
Signing time: Sun 19 Oct 2025 06:01:09 +0000
Manifest this update: Sun 19 Oct 2025 06:01:09 +0000
Manifest next update: Mon 20 Oct 2025 06:01:09 +0000
Files and hashes: 1: bzs57lv3Qbjc1TLCtfvKYgEau6U.roa (hash: HAYnok72dCcoCWV0+wPH7iuTT6c76+rSS6MIun+rwec=)
2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: Z+pzLsYXplH/xvAmy1+eTbrabhsipjYx96UwdtocR00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:b6:e1:ab:6d:8d:30:ac:b7:3a:1f:fb:fb:ac:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: Oct 19 06:01:09 2025 GMT
Not After : Oct 20 06:01:09 2025 GMT
Subject: CN=84417217bba193429a906346ec3b240326974dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:4f:85:a7:43:3b:20:eb:af:9a:69:0a:29:
71:23:56:cd:03:dc:60:9a:40:1b:28:cc:2b:a2:a4:
d3:27:80:7b:f5:53:82:0a:37:9b:e7:48:da:44:b8:
2e:f0:88:f5:82:8b:20:7c:dd:96:9f:7f:73:30:de:
5b:f2:07:3d:01:a8:cc:ff:98:3a:bd:4c:bf:fd:3b:
26:06:3f:0d:75:c5:a3:e9:24:63:b1:fc:87:9b:a2:
15:71:3d:3f:14:f9:bc:f3:68:7f:40:fd:de:dc:e7:
eb:ff:3a:84:95:5d:94:42:a0:27:b2:ec:0d:cb:0d:
fa:3f:3e:2b:af:09:99:07:87:7b:f2:4a:61:85:78:
06:75:a0:21:fb:59:0e:ea:d0:51:06:50:d0:02:ad:
e1:85:b7:63:b7:83:4e:4c:ce:f0:18:b0:63:6c:17:
3a:8f:c9:fd:05:08:1d:d6:18:fb:4f:15:bd:49:82:
6c:91:65:8f:91:66:0f:20:72:5f:0a:dc:54:e4:28:
91:71:4e:dc:4f:95:34:8d:8d:63:28:ea:16:77:c8:
26:a8:da:b1:dc:d8:64:ef:d9:5b:57:23:1a:70:68:
25:e2:f6:65:4e:aa:7b:c9:5d:a1:09:ee:07:3b:33:
e7:70:80:37:1f:c0:b3:6a:51:a1:f3:4f:a8:c3:4d:
c2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:41:72:17:BB:A1:93:42:9A:90:63:46:EC:3B:24:03:26:97:4D:CC
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:45:8b:d0:f8:fc:78:71:29:0a:ab:5b:b7:25:be:fd:5a:34:
ea:83:16:71:54:88:3d:dc:45:f8:41:da:ca:53:56:b1:05:f7:
08:33:1b:5a:8b:47:af:e7:e2:0a:67:1f:55:75:57:0c:b8:42:
d5:f6:c7:22:f1:e7:c0:86:e3:3c:6c:66:bb:24:c6:d5:32:85:
eb:11:d9:e4:5a:b5:28:5c:5b:df:7c:ed:38:d2:bf:34:ea:bc:
d2:59:96:5b:cf:0d:9d:ae:5b:f3:1e:8e:b4:62:72:9d:72:d4:
c5:67:8a:15:29:16:06:c9:29:b4:24:e4:fa:3d:1c:b1:6d:17:
c7:3c:25:17:19:8c:71:35:43:de:5f:a1:9c:aa:f7:c2:d3:5d:
f9:ad:5c:01:2f:1c:af:25:c5:e1:34:e7:90:98:0e:3f:19:b1:
f9:bd:23:5a:d9:28:ad:f9:02:35:99:73:a3:bc:ab:45:b4:4e:
16:31:b2:d5:79:4f:16:62:9f:ac:4c:bc:dd:61:03:21:f4:95:
b5:04:af:ed:76:a4:81:03:b0:b0:81:7b:b5:d8:4c:ec:b5:fc:
42:c7:7e:c8:7b:10:d2:a5:6e:f9:2f:79:10:9a:ca:f5:71:21:
1f:18:a0:e4:fb:02:f6:2b:6f:54:69:e6:86:15:33:f4:9c:09:
a4:58:0c:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Drbhq22NMKy3Oh/7+6wYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYmIwMzAxNmM4M2NlYThhYTRmYTljMzZhMzY0M2E1NjVj
YzkzZTYwHhcNMjUxMDE5MDYwMTA5WhcNMjUxMDIwMDYwMTA5WjAzMTEwLwYDVQQD
Eyg4NDQxNzIxN2JiYTE5MzQyOWE5MDYzNDZlYzNiMjQwMzI2OTc0ZGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof5PhadDOyDrr5ppCilxI1bNA9xg
mkAbKMwroqTTJ4B79VOCCjeb50jaRLgu8Ij1gosgfN2Wn39zMN5b8gc9AajM/5g6
vUy//TsmBj8NdcWj6SRjsfyHm6IVcT0/FPm882h/QP3e3Ofr/zqElV2UQqAnsuwN
yw36Pz4rrwmZB4d78kphhXgGdaAh+1kO6tBRBlDQAq3hhbdjt4NOTM7wGLBjbBc6
j8n9BQgd1hj7TxW9SYJskWWPkWYPIHJfCtxU5CiRcU7cT5U0jY1jKOoWd8gmqNqx
3Nhk79lbVyMacGgl4vZlTqp7yV2hCe4HOzPncIA3H8CzalGh80+ow03CCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRBche7oZNCmpBjRuw7JAMml03MMB8GA1UdIwQY
MBaAFL+7AwFsg86oqk+pw2o2Q6VlzJPmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZjNlNTctMGUwMC00ZjJmLTk3NmIt
NDE0ZjA5YjkyYzE1LzEvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zZjNlNTctMGUwMC00ZjJmLTk3NmItNDE0ZjA5YjkyYzE1
LzEvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkWL0Pj8
eHEpCqtbtyW+/Vo06oMWcVSIPdxF+EHaylNWsQX3CDMbWotHr+fiCmcfVXVXDLhC
1fbHIvHnwIbjPGxmuyTG1TKF6xHZ5Fq1KFxb33ztONK/NOq80lmWW88Nna5b8x6O
tGJynXLUxWeKFSkWBskptCTk+j0csW0XxzwlFxmMcTVD3l+hnKr3wtNd+a1cAS8c
ryXF4TTnkJgOPxmx+b0jWtkorfkCNZlzo7yrRbROFjGy1XlPFmKfrEy83WEDIfSV
tQSv7XakgQOwsIF7tdhM7LX8Qsd+yHsQ0qVu+S95EJrK9XEhHxig5PsC9itvVGnm
hhUz9JwJpFgM8A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:05 2025 by rpki-client