Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
File: BgyexdQFhu0yVfD8T8sxV3FN2hU.mft (raw, json)
Hash identifier: 3Y1vSc671G8EY7b4TWVh8BL6VysnBjkhnYNo1V8B/Fw=
Subject key identifier: 19:C1:E6:E5:AA:BB:24:B2:DA:E2:21:3E:F4:23:DC:32:F8:95:BA:29
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 019A258A9B9A899BDB15F12DBA58718D5F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
Manifest number: 126F
Signing time: Mon 27 Oct 2025 12:00:31 +0000
Manifest this update: Mon 27 Oct 2025 12:00:31 +0000
Manifest next update: Tue 28 Oct 2025 12:00:31 +0000
Files and hashes: 1: BgyexdQFhu0yVfD8T8sxV3FN2hU.crl (hash: FmokS3L8iyHFz3VPNlT9BSYmn0J+bkXN3THzup542T0=)
2: SvCn28QlY3H7uObVMGkQTVr8wro.roa (hash: lT4aO9UNqW5C6eAiY2SG9UDFdzGqTUCShh77rO3OfDs=)
3: zXLcc16Hl_V98UU7l_AMl_ZR3t0.roa (hash: zI4peklfsSU0BwGnCgTYFkA1twl5bd7IR0aRBdIFj54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:9b:9a:89:9b:db:15:f1:2d:ba:58:71:8d:5f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Oct 27 12:00:31 2025 GMT
Not After : Oct 28 12:00:31 2025 GMT
Subject: CN=19c1e6e5aabb24b2dae2213ef423dc32f895ba29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ab:9c:f3:70:87:18:4d:52:40:14:2a:30:0c:
25:0a:18:83:6f:90:d1:ee:9f:f5:75:12:16:0a:7d:
ef:84:14:62:92:88:28:d2:b9:cb:d7:83:ce:62:d3:
4b:28:1b:ea:75:0f:6f:e4:8c:e5:85:ca:ec:88:cb:
06:6e:39:11:2a:46:65:aa:ca:9f:b2:17:33:a0:33:
cb:c9:30:4b:f7:d6:84:04:17:46:e0:f0:5f:32:41:
94:a8:84:ce:37:8a:66:ca:3e:fb:a3:07:21:3c:18:
21:70:fb:d2:06:b1:f4:c9:70:7c:66:b7:41:ef:13:
f1:87:11:fc:12:e2:2a:dd:b4:92:fb:6f:1f:5f:f1:
3d:4f:4a:96:47:7f:12:2c:d2:c7:b7:6f:0e:61:99:
df:d1:fd:25:61:02:83:64:47:be:4b:6f:5e:7a:92:
8a:e4:31:22:5f:f1:e3:57:69:ac:03:ec:ca:9c:55:
40:89:15:1a:4d:38:13:b4:9a:60:c4:16:24:68:d9:
dd:27:48:2c:d2:a0:dd:08:aa:ec:91:c6:2a:e8:d7:
30:f7:41:67:57:59:08:2d:8b:46:53:1c:3d:9a:c9:
fb:9c:ba:23:22:a9:33:31:54:90:47:19:bc:c5:cd:
b3:dc:6a:30:38:eb:11:28:20:c7:ec:8d:09:0c:89:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C1:E6:E5:AA:BB:24:B2:DA:E2:21:3E:F4:23:DC:32:F8:95:BA:29
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7c:16:c4:eb:26:ea:78:14:ed:fb:39:49:b8:4f:72:05:78:
fd:4f:3b:80:3b:98:dd:ad:8c:bd:15:eb:59:f2:6a:fe:75:97:
54:4b:cc:a2:03:bf:2d:19:83:17:ce:14:d3:8f:38:b3:76:7f:
be:64:75:0c:cb:13:0a:17:b4:0e:6d:19:cf:f6:3c:a2:f1:b0:
e0:f9:57:61:98:51:8f:ad:57:a5:2f:51:6a:00:a3:04:2c:19:
cc:28:a2:36:97:5d:ae:3d:9f:13:9a:a0:71:2b:9b:1a:b9:29:
e2:70:59:d7:7c:a5:bd:4f:48:c2:0e:01:11:d1:58:e9:ce:06:
2e:62:70:bd:8d:56:1a:e6:f1:78:5a:ea:54:e8:02:20:c5:27:
65:b8:43:83:fa:2c:be:36:8e:5e:84:b4:ca:97:29:09:74:a2:
2b:b5:cb:e6:43:13:19:63:03:e6:06:28:ab:da:3d:65:9f:e3:
fb:cb:67:a4:0d:bb:79:fb:51:c5:e8:89:43:14:58:a4:4f:0b:
ba:c3:2e:ac:4d:f6:3b:5a:75:a6:f9:41:c2:36:16:82:a6:72:
64:a5:48:bf:f3:f0:7d:c0:47:ca:e7:b9:fb:e1:27:c9:e7:5d:
b7:0d:c5:75:8c:2c:33:6c:b1:71:93:d0:e2:46:e2:ce:06:45:
f5:6f:21:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolipuaiZvbFfEtulhxjV8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MGM5ZWM1ZDQwNTg2ZWQzMjU1ZjBmYzRmY2IzMTU3NzE0
ZGRhMTUwHhcNMjUxMDI3MTIwMDMxWhcNMjUxMDI4MTIwMDMxWjAzMTEwLwYDVQQD
EygxOWMxZTZlNWFhYmIyNGIyZGFlMjIxM2VmNDIzZGMzMmY4OTViYTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6uc83CHGE1SQBQqMAwlChiDb5DR
7p/1dRIWCn3vhBRikogo0rnL14POYtNLKBvqdQ9v5IzlhcrsiMsGbjkRKkZlqsqf
shczoDPLyTBL99aEBBdG4PBfMkGUqITON4pmyj77owchPBghcPvSBrH0yXB8ZrdB
7xPxhxH8EuIq3bSS+28fX/E9T0qWR38SLNLHt28OYZnf0f0lYQKDZEe+S29eepKK
5DEiX/HjV2msA+zKnFVAiRUaTTgTtJpgxBYkaNndJ0gs0qDdCKrskcYq6Ncw90Fn
V1kILYtGUxw9msn7nLojIqkzMVSQRxm8xc2z3GowOOsRKCDH7I0JDIm8qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnB5uWquySy2uIhPvQj3DL4lbopMB8GA1UdIwQY
MBaAFAYMnsXUBYbtMlXw/E/LMVdxTdoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmd5ZXhkUUZodTB5VmZEOFQ4c3hWM0ZOMmhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hZTNhM2UtMmMwYy00MDVlLWJjZDct
OWUwYTUxM2RlZWYyLzEvQmd5ZXhkUUZodTB5VmZEOFQ4c3hWM0ZOMmhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hZTNhM2UtMmMwYy00MDVlLWJjZDctOWUwYTUxM2RlZWYy
LzEvQmd5ZXhkUUZodTB5VmZEOFQ4c3hWM0ZOMmhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3wWxOsm
6ngU7fs5SbhPcgV4/U87gDuY3a2MvRXrWfJq/nWXVEvMogO/LRmDF84U0484s3Z/
vmR1DMsTChe0Dm0Zz/Y8ovGw4PlXYZhRj61XpS9RagCjBCwZzCiiNpddrj2fE5qg
cSubGrkp4nBZ13ylvU9Iwg4BEdFY6c4GLmJwvY1WGubxeFrqVOgCIMUnZbhDg/os
vjaOXoS0ypcpCXSiK7XL5kMTGWMD5gYoq9o9ZZ/j+8tnpA27eftRxeiJQxRYpE8L
usMurE32O1p1pvlBwjYWgqZyZKVIv/PwfcBHyue5++Enyeddtw3FdYwsM2yxcZPQ
4kbizgZF9W8hEw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 21:42:28 2025 by rpki-client