Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
File: bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft (raw, json)
Hash identifier: GaD2cUdnzYedixFiOFdqZNaKW6p/AltBUHUXRzgv2EY=
Subject key identifier: 88:38:74:DB:E2:81:22:C3:9F:33:17:BC:BC:E0:A3:15:0B:C4:8B:D7
Authority key identifier: 6E:99:CC:CD:6F:0F:F2:6D:E8:ED:39:36:F4:A6:4B:EE:98:D9:DC:66
Certificate issuer: /CN=6e99cccd6f0ff26de8ed3936f4a64bee98d9dc66
Certificate serial: 0198D515C25C1644D66E6B82AFD7EEECBABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
Manifest number: 15FB
Signing time: Sat 23 Aug 2025 04:00:29 +0000
Manifest this update: Sat 23 Aug 2025 04:00:29 +0000
Manifest next update: Sun 24 Aug 2025 04:00:29 +0000
Files and hashes: 1: bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl (hash: 0lCIE/nHIycw/K0AQQND0WSumFNmmPEQ4PNzUvpgivA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c2:5c:16:44:d6:6e:6b:82:af:d7:ee:ec:ba:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e99cccd6f0ff26de8ed3936f4a64bee98d9dc66
Validity
Not Before: Aug 23 04:00:29 2025 GMT
Not After : Aug 24 04:00:29 2025 GMT
Subject: CN=883874dbe28122c39f3317bcbce0a3150bc48bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:1d:ff:0e:c5:90:be:e0:b4:95:87:5d:b5:
67:d1:15:ad:34:48:70:da:72:97:3e:5d:b4:cf:dc:
5a:5f:51:7b:84:07:70:04:6c:8f:80:7d:1c:8a:fa:
e1:86:45:48:e1:95:3a:b6:43:e5:4c:de:b5:c5:da:
8f:bb:d8:5a:3e:47:f5:14:60:1d:08:6a:a4:3c:c4:
17:7d:08:92:29:ce:68:61:14:52:2c:e3:62:91:c8:
24:76:7c:3c:54:54:ab:45:60:75:31:09:09:73:33:
ee:a7:90:89:b2:53:75:e6:a8:03:45:fa:78:69:11:
9a:50:ad:12:cb:07:ed:9c:80:e2:3f:f9:4c:3e:93:
fd:64:5e:e3:db:4d:06:2d:a1:bc:86:26:80:6b:e7:
af:3a:b0:2f:c8:41:25:35:a1:87:95:09:69:d3:00:
ec:aa:de:b4:6c:33:e5:b3:63:ae:e1:cb:4f:2b:19:
dc:63:19:4d:5d:5c:47:96:39:7d:43:28:e7:7c:1d:
92:7f:2e:6a:d2:5c:63:cd:53:7d:a8:35:75:ab:4e:
a4:ce:ae:8e:5e:c8:94:ad:1f:a8:77:b1:2d:65:d1:
d2:f7:44:80:05:8c:c1:6d:da:0f:36:83:1d:66:56:
6b:73:83:62:30:1e:c6:0f:a9:5e:52:bf:07:b8:12:
c0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:38:74:DB:E2:81:22:C3:9F:33:17:BC:BC:E0:A3:15:0B:C4:8B:D7
X509v3 Authority Key Identifier:
keyid:6E:99:CC:CD:6F:0F:F2:6D:E8:ED:39:36:F4:A6:4B:EE:98:D9:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a4:de:85:46:cc:f1:90:30:f5:e6:2c:3d:67:49:46:12:85:
b2:32:c8:df:2f:3f:9e:2c:02:6b:eb:f2:43:fa:74:c0:3f:4e:
ba:bc:af:1f:fc:da:9c:09:7b:22:db:b5:22:2a:59:d0:d6:39:
a9:8f:0d:3a:88:7e:01:00:5c:38:99:ab:90:0c:76:6a:23:4e:
1c:88:e4:9a:15:65:ba:4b:dc:04:0a:49:0e:e8:2e:cf:67:69:
a0:4b:50:ce:73:45:2f:cc:ea:09:05:85:43:38:33:e7:cf:26:
44:50:bb:93:ea:9a:d9:0e:83:cc:71:31:25:ea:d4:c1:21:f6:
61:97:32:c1:ae:49:8d:02:8c:62:44:08:a7:e9:55:cf:e2:10:
4d:ea:7b:fe:00:76:13:39:82:a0:01:0c:85:2a:b8:1a:fe:00:
76:4a:8b:dd:b6:99:05:8f:21:cb:7e:fa:76:ee:cf:86:0c:21:
46:6a:fd:79:e2:2b:93:67:95:53:79:9d:2b:88:18:50:1a:fe:
96:71:b2:09:ad:fe:1a:f2:6d:0e:72:66:b3:06:c1:1f:a0:ef:
94:7c:c6:6f:4e:e3:13:88:06:b7:fa:d5:11:c7:26:a9:83:a7:
c7:1c:0e:5a:4f:ca:d2:11:77:fe:da:28:67:ac:b3:2c:f8:8f:
46:2e:33:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFcJcFkTWbmuCr9fu7Lq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlOTljY2NkNmYwZmYyNmRlOGVkMzkzNmY0YTY0YmVlOThk
OWRjNjYwHhcNMjUwODIzMDQwMDI5WhcNMjUwODI0MDQwMDI5WjAzMTEwLwYDVQQD
Eyg4ODM4NzRkYmUyODEyMmMzOWYzMzE3YmNiY2UwYTMxNTBiYzQ4YmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF8d/w7FkL7gtJWHXbVn0RWtNEhw
2nKXPl20z9xaX1F7hAdwBGyPgH0civrhhkVI4ZU6tkPlTN61xdqPu9haPkf1FGAd
CGqkPMQXfQiSKc5oYRRSLONikcgkdnw8VFSrRWB1MQkJczPup5CJslN15qgDRfp4
aRGaUK0SywftnIDiP/lMPpP9ZF7j200GLaG8hiaAa+evOrAvyEElNaGHlQlp0wDs
qt60bDPls2Ou4ctPKxncYxlNXVxHljl9QyjnfB2Sfy5q0lxjzVN9qDV1q06kzq6O
XsiUrR+od7EtZdHS90SABYzBbdoPNoMdZlZrc4NiMB7GD6leUr8HuBLARwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIg4dNvigSLDnzMXvLzgoxULxIvXMB8GA1UdIwQY
MBaAFG6ZzM1vD/Jt6O05NvSmS+6Y2dxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnBuTXpXOFA4bTNvN1RrMjlLWkw3cGpaM0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wYmU4MWEtYTQ5YS00NjgyLTgwZWUt
ZTdmMGI3ODliYzczLzEvYnBuTXpXOFA4bTNvN1RrMjlLWkw3cGpaM0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8wYmU4MWEtYTQ5YS00NjgyLTgwZWUtZTdmMGI3ODliYzcz
LzEvYnBuTXpXOFA4bTNvN1RrMjlLWkw3cGpaM0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKTehUbM
8ZAw9eYsPWdJRhKFsjLI3y8/niwCa+vyQ/p0wD9OuryvH/zanAl7Itu1IipZ0NY5
qY8NOoh+AQBcOJmrkAx2aiNOHIjkmhVlukvcBApJDuguz2dpoEtQznNFL8zqCQWF
Qzgz588mRFC7k+qa2Q6DzHExJerUwSH2YZcywa5JjQKMYkQIp+lVz+IQTep7/gB2
EzmCoAEMhSq4Gv4AdkqL3baZBY8hy376du7PhgwhRmr9eeIrk2eVU3mdK4gYUBr+
lnGyCa3+GvJtDnJmswbBH6DvlHzGb07jE4gGt/rVEccmqYOnxxwOWk/K0hF3/too
Z6yzLPiPRi4z3g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:37 2025 by rpki-client