Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.mft
File: BhJClTAYPA_O3K258VBVg5LwG4k.mft (raw, json)
Hash identifier: gOA8YJexHlRM4zL9/97B4tA6XrwkCALPfpXv5VKghM8=
Subject key identifier: 39:50:AB:14:2B:05:06:70:9A:80:30:18:77:6B:EE:28:9A:59:DB:54
Authority key identifier: 06:12:42:95:30:18:3C:0F:CE:DC:AD:B9:F1:50:55:83:92:F0:1B:89
Certificate issuer: /CN=0612429530183c0fcedcadb9f150558392f01b89
Certificate serial: 019A72938F796B3CE14398132B862E470482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhJClTAYPA_O3K258VBVg5LwG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.mft
Manifest number: C4
Signing time: Tue 11 Nov 2025 11:01:04 +0000
Manifest this update: Tue 11 Nov 2025 11:01:04 +0000
Manifest next update: Wed 12 Nov 2025 11:01:04 +0000
Files and hashes: 1: BhJClTAYPA_O3K258VBVg5LwG4k.crl (hash: TeUtI1yv/oEowKQ+USMn1nm2WOwJHKVBAWWS0rO5y3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhJClTAYPA_O3K258VBVg5LwG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:8f:79:6b:3c:e1:43:98:13:2b:86:2e:47:04:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0612429530183c0fcedcadb9f150558392f01b89
Validity
Not Before: Nov 11 11:01:04 2025 GMT
Not After : Nov 12 11:01:04 2025 GMT
Subject: CN=3950ab142b0506709a803018776bee289a59db54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:c4:2d:1f:f3:08:64:c0:11:2d:0f:26:a3:
5f:3c:70:84:a4:81:e1:dc:f2:bb:9d:31:6f:64:83:
47:25:55:9c:8f:8f:4f:89:2c:4f:a5:fe:d4:f6:18:
d3:d3:94:e9:91:0d:5d:49:be:c3:ab:4e:0a:48:6a:
63:67:f2:8c:de:e7:79:9e:f2:36:62:9c:e9:97:36:
f2:35:75:f0:fc:99:b1:14:9c:50:cc:ed:5f:e2:94:
cf:75:96:c4:52:9a:76:df:d0:09:59:2f:5f:ab:df:
cd:be:57:c0:74:6e:61:71:29:39:9f:0f:6b:1f:bf:
7f:04:0e:ce:60:52:61:c9:a7:6e:54:f0:e8:d7:8d:
06:86:84:d0:fc:d4:e8:ff:48:7e:bc:17:f8:a4:02:
4d:89:ba:87:89:99:ba:4e:62:87:fd:cd:6e:fa:4c:
dd:ca:bb:0d:aa:c7:f8:0b:d4:cd:c2:6e:35:d0:0c:
b7:4a:a9:ca:6a:00:57:1a:a8:fe:c5:3e:73:f9:fb:
a1:c4:ea:b2:c0:71:fb:ab:9a:28:91:68:80:7a:cd:
e8:ac:98:b5:cf:2d:4a:0f:6d:74:f0:d1:6b:54:ba:
af:e1:1c:48:53:0a:cc:77:11:3d:3a:2e:3f:a5:1f:
d5:91:0e:21:cb:68:4b:2c:19:63:4e:44:8d:ca:f3:
cb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:50:AB:14:2B:05:06:70:9A:80:30:18:77:6B:EE:28:9A:59:DB:54
X509v3 Authority Key Identifier:
keyid:06:12:42:95:30:18:3C:0F:CE:DC:AD:B9:F1:50:55:83:92:F0:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhJClTAYPA_O3K258VBVg5LwG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:45:d8:5a:66:b3:84:4b:cd:75:ac:a6:7e:7e:61:77:5b:99:
90:1a:67:65:93:3e:2d:22:73:c7:5b:62:c1:fb:8c:54:67:90:
95:78:c3:f4:34:c1:3b:17:c0:70:e7:3f:67:8a:0a:12:01:e8:
40:9d:4b:c5:da:e2:53:36:06:8d:2b:39:ae:4e:36:4a:07:55:
ea:aa:94:36:1a:f1:d2:10:ad:04:af:06:83:a1:36:93:82:99:
36:8e:eb:47:10:23:18:61:ff:67:f8:da:7d:d3:58:7a:13:b6:
c0:20:d4:fe:54:62:f1:16:e1:90:62:39:35:9d:69:77:35:d8:
4a:9e:5a:94:85:1b:e3:95:07:77:47:f8:cb:c3:82:28:e1:7e:
4f:f6:e2:6a:c6:da:5c:b1:40:31:b0:d3:d4:c0:5d:d0:0c:9b:
6a:50:f3:bd:7f:e4:5f:44:b4:10:a8:55:86:12:71:ad:79:9c:
f8:26:a8:4d:7e:e4:7c:0d:1a:78:3d:10:24:39:a4:76:88:61:
2c:91:90:cb:6b:f0:8d:53:db:b7:32:48:e9:12:19:d5:1e:c9:
ca:fd:72:9b:ce:4f:5c:78:22:ec:8a:57:c7:71:0a:d6:7a:11:
fa:8e:3c:e2:55:be:ee:47:23:1b:4f:dc:74:39:5f:4a:6b:e5:
92:2c:22:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk495azzhQ5gTK4YuRwSCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MTI0Mjk1MzAxODNjMGZjZWRjYWRiOWYxNTA1NTgzOTJm
MDFiODkwHhcNMjUxMTExMTEwMTA0WhcNMjUxMTEyMTEwMTA0WjAzMTEwLwYDVQQD
EygzOTUwYWIxNDJiMDUwNjcwOWE4MDMwMTg3NzZiZWUyODlhNTlkYjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstXELR/zCGTAES0PJqNfPHCEpIHh
3PK7nTFvZINHJVWcj49PiSxPpf7U9hjT05TpkQ1dSb7Dq04KSGpjZ/KM3ud5nvI2
YpzplzbyNXXw/JmxFJxQzO1f4pTPdZbEUpp239AJWS9fq9/NvlfAdG5hcSk5nw9r
H79/BA7OYFJhyaduVPDo140GhoTQ/NTo/0h+vBf4pAJNibqHiZm6TmKH/c1u+kzd
yrsNqsf4C9TNwm410Ay3SqnKagBXGqj+xT5z+fuhxOqywHH7q5ookWiAes3orJi1
zy1KD2108NFrVLqv4RxIUwrMdxE9Oi4/pR/VkQ4hy2hLLBljTkSNyvPLqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlQqxQrBQZwmoAwGHdr7iiaWdtUMB8GA1UdIwQY
MBaAFAYSQpUwGDwPztytufFQVYOS8BuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmhKQ2xUQVlQQV9PM0syNThWQlZnNUx3RzRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xYzM3ZmEtMDVlOC00NDExLWExNDAt
ZTNiM2ZjYzVlYzIzLzEvQmhKQ2xUQVlQQV9PM0syNThWQlZnNUx3RzRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8xYzM3ZmEtMDVlOC00NDExLWExNDAtZTNiM2ZjYzVlYzIz
LzEvQmhKQ2xUQVlQQV9PM0syNThWQlZnNUx3RzRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkXYWmaz
hEvNdaymfn5hd1uZkBpnZZM+LSJzx1tiwfuMVGeQlXjD9DTBOxfAcOc/Z4oKEgHo
QJ1LxdriUzYGjSs5rk42SgdV6qqUNhrx0hCtBK8Gg6E2k4KZNo7rRxAjGGH/Z/ja
fdNYehO2wCDU/lRi8RbhkGI5NZ1pdzXYSp5alIUb45UHd0f4y8OCKOF+T/biasba
XLFAMbDT1MBd0AybalDzvX/kX0S0EKhVhhJxrXmc+CaoTX7kfA0aeD0QJDmkdohh
LJGQy2vwjVPbtzJI6RIZ1R7Jyv1ym85PXHgi7IpXx3EK1noR+o484lW+7kcjG0/c
dDlfSmvlkiwiLA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:51 2025 by rpki-client