Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
File: Bzby35Rr9SWzw8qC9RutVdAuNu8.mft (raw, json)
Hash identifier: 2UUB2Ya/lLcJHkSTK6OftwEhJ5o/vQoBF9vfpSJAUK4=
Subject key identifier: 97:53:D0:65:54:8D:EA:AA:5D:71:1C:11:C5:1A:02:61:7B:23:7F:49
Authority key identifier: 07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF
Certificate issuer: /CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
Certificate serial: 0199FBEA8EE84E6A6A520CA9FDEF3BC5F789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
Manifest number: 01B4
Signing time: Sun 19 Oct 2025 10:01:17 +0000
Manifest this update: Sun 19 Oct 2025 10:01:17 +0000
Manifest next update: Mon 20 Oct 2025 10:01:17 +0000
Files and hashes: 1: Bzby35Rr9SWzw8qC9RutVdAuNu8.crl (hash: fj4/EDG1Hgx62AHi9LEv5b7wFk5v3IickuSMiAFmwqc=)
2: t_pLbPAavF67cllBm3pb39Lar-8.roa (hash: AxZybzq25d8wj7w1AsP3BEtmw0VKt4vny7mHzyR3/9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8e:e8:4e:6a:6a:52:0c:a9:fd:ef:3b:c5:f7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
Validity
Not Before: Oct 19 10:01:17 2025 GMT
Not After : Oct 20 10:01:17 2025 GMT
Subject: CN=9753d065548deaaa5d711c11c51a02617b237f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:3a:cf:69:ba:12:a4:30:fc:79:97:e6:35:
98:47:58:31:4c:f0:c8:e8:34:9a:2f:7b:50:d5:aa:
4c:29:3d:c1:89:c1:3b:1a:66:b3:0d:0f:7b:b6:1c:
a3:c7:46:f1:3d:87:2c:37:a3:6a:e6:cc:cb:1c:9a:
f7:c0:42:e5:fb:0f:84:64:01:1f:c5:eb:c3:1d:c2:
d4:05:1a:b3:4d:01:6c:5a:34:4b:e7:42:a7:cb:54:
25:50:99:79:48:a5:f9:0e:ba:21:4f:7a:2f:ff:2f:
b0:b9:03:1e:88:56:de:92:6c:e4:4c:4b:0b:02:3e:
3f:8a:f3:e7:73:3c:7a:12:d2:2e:d6:5b:4a:c0:0e:
08:b9:c0:e3:52:d7:ec:6c:d9:4e:93:8e:76:88:ee:
39:16:a5:09:bc:95:e1:db:67:18:86:92:83:a3:2f:
bf:c0:a4:2c:49:ef:96:b3:70:95:02:e3:71:92:66:
17:8d:3d:a1:1f:96:5b:ea:a7:70:39:87:fd:f4:d9:
94:9e:4f:9c:20:e5:4d:60:63:47:e2:52:47:63:34:
c9:f4:0b:8f:85:8a:b9:54:98:7b:9b:32:d2:f7:a9:
fe:b4:23:3f:4d:5d:2a:0b:42:48:a5:f3:8e:3d:e7:
d3:a5:e5:41:4e:15:d1:2e:5a:65:32:b7:26:f5:22:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:53:D0:65:54:8D:EA:AA:5D:71:1C:11:C5:1A:02:61:7B:23:7F:49
X509v3 Authority Key Identifier:
keyid:07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e8:de:51:c9:63:34:b2:9b:37:a1:2f:37:11:d2:58:a9:02:
c1:67:34:65:f6:ba:41:f5:ee:ca:10:27:0d:7f:f2:4f:ea:f7:
26:0f:60:75:5e:26:05:b7:cf:ad:d0:03:b5:fb:78:77:b2:ec:
21:71:8f:32:8c:5f:36:a7:66:4a:5a:0b:2c:c4:d7:90:30:88:
e7:3a:4c:69:3c:7c:08:bb:e4:95:41:18:85:85:3e:85:65:c9:
38:a2:1c:b0:13:78:f9:32:d5:a5:1f:c3:18:fc:d7:d5:66:c1:
23:e5:76:d4:ed:fc:01:e6:bf:37:b1:82:97:a4:c9:f1:f5:ea:
ee:a5:96:f1:88:eb:c2:7c:f1:69:46:ee:cc:56:16:b1:d8:7e:
e2:f9:56:3e:5b:c5:c4:14:69:e7:99:c0:c4:0c:50:de:e1:76:
1e:af:5f:43:c5:d4:8d:cd:e8:0b:bb:0a:c4:b0:b3:4e:1a:5a:
d6:c4:99:19:75:0a:cc:70:51:21:39:6a:2f:8d:7e:49:ae:47:
77:9a:b0:d1:0c:36:98:78:e0:52:a6:48:f6:ed:f8:08:21:9b:
46:bc:12:0f:1b:72:ac:4c:91:4b:39:b9:45:4c:dd:b7:9f:91:
c1:a0:3f:c2:99:f5:38:11:c7:d6:6e:41:fa:a8:07:95:7a:54:
6a:ab:45:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76o7oTmpqUgyp/e87xfeJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MzZmMmRmOTQ2YmY1MjViM2MzY2E4MmY1MWJhZDU1ZDAy
ZTM2ZWYwHhcNMjUxMDE5MTAwMTE3WhcNMjUxMDIwMTAwMTE3WjAzMTEwLwYDVQQD
Eyg5NzUzZDA2NTU0OGRlYWFhNWQ3MTFjMTFjNTFhMDI2MTdiMjM3ZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC06z2m6EqQw/HmX5jWYR1gxTPDI
6DSaL3tQ1apMKT3BicE7GmazDQ97thyjx0bxPYcsN6Nq5szLHJr3wELl+w+EZAEf
xevDHcLUBRqzTQFsWjRL50Kny1QlUJl5SKX5DrohT3ov/y+wuQMeiFbekmzkTEsL
Aj4/ivPnczx6EtIu1ltKwA4IucDjUtfsbNlOk452iO45FqUJvJXh22cYhpKDoy+/
wKQsSe+Ws3CVAuNxkmYXjT2hH5Zb6qdwOYf99NmUnk+cIOVNYGNH4lJHYzTJ9AuP
hYq5VJh7mzLS96n+tCM/TV0qC0JIpfOOPefTpeVBThXRLlplMrcm9SKCUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdT0GVUjeqqXXEcEcUaAmF7I39JMB8GA1UdIwQY
MBaAFAc28t+Ua/Uls8PKgvUbrVXQLjbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84YjNjY2QtMTNmYy00NDU2LWI0NjQt
ZDg0MWIzODJkNmQ4LzEvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84YjNjY2QtMTNmYy00NDU2LWI0NjQtZDg0MWIzODJkNmQ4
LzEvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATejeUclj
NLKbN6EvNxHSWKkCwWc0Zfa6QfXuyhAnDX/yT+r3Jg9gdV4mBbfPrdADtft4d7Ls
IXGPMoxfNqdmSloLLMTXkDCI5zpMaTx8CLvklUEYhYU+hWXJOKIcsBN4+TLVpR/D
GPzX1WbBI+V21O38Aea/N7GCl6TJ8fXq7qWW8YjrwnzxaUbuzFYWsdh+4vlWPlvF
xBRp55nAxAxQ3uF2Hq9fQ8XUjc3oC7sKxLCzThpa1sSZGXUKzHBRITlqL41+Sa5H
d5qw0Qw2mHjgUqZI9u34CCGbRrwSDxtyrEyRSzm5RUzdt5+RwaA/wpn1OBHH1m5B
+qgHlXpUaqtFRQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:57 2025 by rpki-client