Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
File: bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft (raw, json)
Hash identifier: mMmCvt1nNCmJ/evlJVP/C2xcXLWsu6ODrkDHYenZgRo=
Subject key identifier: 64:90:01:11:7C:39:0D:3A:72:41:79:93:DC:AA:05:17:CE:18:CD:14
Authority key identifier: 6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
Certificate issuer: /CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Certificate serial: 019A7112D537A59F2DB4049E8BA6626A16EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
Manifest number: 15F7
Signing time: Tue 11 Nov 2025 04:00:50 +0000
Manifest this update: Tue 11 Nov 2025 04:00:50 +0000
Manifest next update: Wed 12 Nov 2025 04:00:50 +0000
Files and hashes: 1: bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl (hash: vPnH0NHhPE7DVbIYPY172NXGSslrEWixvW56j1k77tQ=)
2: xIncpff8t5DuBdap78CZRmBq41M.roa (hash: iuGa85kLc6g4Qd8kr/ZV4w/v+4lb0FJF9McHzQYZMGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d5:37:a5:9f:2d:b4:04:9e:8b:a6:62:6a:16:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Validity
Not Before: Nov 11 04:00:50 2025 GMT
Not After : Nov 12 04:00:50 2025 GMT
Subject: CN=649001117c390d3a72417993dcaa0517ce18cd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:3b:35:90:3e:cd:ca:e1:1d:f4:dc:0d:a0:
68:c0:d8:88:d1:f7:cd:54:40:e5:d7:5a:a5:8b:8d:
e4:89:89:aa:e2:5b:6a:4b:56:92:bb:b2:5d:31:c6:
37:cd:96:22:4b:e4:5e:67:9e:96:ca:77:e8:03:b7:
12:e2:56:9a:f9:66:c1:ef:fb:c6:58:98:75:95:f9:
4a:71:be:ee:09:cb:9c:97:58:13:d0:3f:53:97:c3:
1d:04:4b:9e:aa:6d:71:58:25:94:86:57:40:88:3f:
e3:c0:16:26:84:fe:10:ba:8f:bd:d1:cf:ac:00:d0:
86:bc:10:73:8c:37:aa:86:4e:d9:87:6c:f4:cd:22:
72:41:a8:34:68:85:ed:16:e7:6d:1d:27:2d:1a:52:
f5:69:17:84:42:a8:12:cb:ec:d3:9b:0e:9e:3e:ab:
88:a4:b9:b2:e5:fd:30:cc:c2:45:ef:63:d7:01:d5:
45:7c:83:d7:55:38:ae:b9:c4:19:aa:0c:6b:30:3a:
54:d9:d0:d6:2d:42:b7:46:5e:be:56:72:5e:8c:7a:
f9:62:6d:da:9c:e6:ea:8f:48:ff:9a:13:ab:af:6e:
f4:12:35:b1:2a:75:4f:21:5a:2f:d2:dd:90:d7:98:
79:96:6b:f7:dc:b6:80:74:a4:22:8e:b0:f6:e9:49:
b0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:90:01:11:7C:39:0D:3A:72:41:79:93:DC:AA:05:17:CE:18:CD:14
X509v3 Authority Key Identifier:
keyid:6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7e:a7:96:ac:97:7e:f7:f1:e1:30:2f:ef:74:4c:da:3f:fd:
cd:fb:34:3c:09:05:d4:15:5c:10:90:5a:ea:f4:3a:39:a4:e7:
78:9e:95:00:18:03:3a:26:9f:ad:a6:c2:68:5d:05:b9:b1:fd:
48:19:7b:df:14:74:b3:0c:7e:5d:88:e1:af:cd:b0:da:a5:d5:
45:50:52:7e:9f:84:20:de:6d:8e:f3:bb:a3:10:e9:a9:d4:6e:
23:9a:05:65:a8:9e:7d:45:46:bf:e5:32:91:3e:0e:e8:2e:a3:
b8:56:38:10:8a:33:07:53:8b:9a:39:3c:11:3c:2d:f3:e9:d9:
da:de:3c:2e:92:b7:70:ad:b6:89:79:71:51:f9:fe:3d:57:40:
70:67:57:fe:30:7e:a0:3c:42:f8:9b:f7:f1:93:aa:30:2e:b6:
60:ab:6e:fa:33:2e:01:89:74:ae:05:dd:87:73:88:ce:5f:d2:
ca:6a:93:46:0c:41:70:59:4f:69:9b:fe:5c:47:81:53:e1:75:
09:7e:67:17:63:26:38:a7:f8:bc:9b:1f:81:2f:b4:d4:b6:34:
10:0e:3f:bd:08:77:ce:34:86:93:a9:de:63:10:47:1e:30:b4:
83:93:8c:4e:73:4b:13:e9:0e:ba:f0:5b:16:dc:37:d3:cb:70:
5f:9b:8e:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEtU3pZ8ttASei6ZiahbsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYTNiNTAyOGNlMzY0ZjUxMDJjMWFlYzI3NzM2YjdjMzNi
YzA0OTMwHhcNMjUxMTExMDQwMDUwWhcNMjUxMTEyMDQwMDUwWjAzMTEwLwYDVQQD
Eyg2NDkwMDExMTdjMzkwZDNhNzI0MTc5OTNkY2FhMDUxN2NlMThjZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Gw7NZA+zcrhHfTcDaBowNiI0ffN
VEDl11qli43kiYmq4ltqS1aSu7JdMcY3zZYiS+ReZ56WynfoA7cS4laa+WbB7/vG
WJh1lflKcb7uCcucl1gT0D9Tl8MdBEueqm1xWCWUhldAiD/jwBYmhP4Quo+90c+s
ANCGvBBzjDeqhk7Zh2z0zSJyQag0aIXtFudtHSctGlL1aReEQqgSy+zTmw6ePquI
pLmy5f0wzMJF72PXAdVFfIPXVTiuucQZqgxrMDpU2dDWLUK3Rl6+VnJejHr5Ym3a
nObqj0j/mhOrr270EjWxKnVPIVov0t2Q15h5lmv33LaAdKQijrD26Umw1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSQARF8OQ06ckF5k9yqBRfOGM0UMB8GA1UdIwQY
MBaAFG6jtQKM42T1ECwa7Cdza3wzvASTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnFPMUFvempaUFVRTEJyc0ozTnJmRE84QkpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lYTQ3MWEtZGE2NC00NTk2LTgzNzAt
NjEyYTc2MjAwN2VjLzEvYnFPMUFvempaUFVRTEJyc0ozTnJmRE84QkpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9lYTQ3MWEtZGE2NC00NTk2LTgzNzAtNjEyYTc2MjAwN2Vj
LzEvYnFPMUFvempaUFVRTEJyc0ozTnJmRE84QkpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF36nlqyX
fvfx4TAv73RM2j/9zfs0PAkF1BVcEJBa6vQ6OaTneJ6VABgDOiafrabCaF0FubH9
SBl73xR0swx+XYjhr82w2qXVRVBSfp+EIN5tjvO7oxDpqdRuI5oFZaiefUVGv+Uy
kT4O6C6juFY4EIozB1OLmjk8ETwt8+nZ2t48LpK3cK22iXlxUfn+PVdAcGdX/jB+
oDxC+Jv38ZOqMC62YKtu+jMuAYl0rgXdh3OIzl/SymqTRgxBcFlPaZv+XEeBU+F1
CX5nF2MmOKf4vJsfgS+01LY0EA4/vQh3zjSGk6neYxBHHjC0g5OMTnNLE+kOuvBb
Ftw308twX5uOUg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:58 2025 by rpki-client