Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier: RbNU3DXhJ4rsQ7Zch6XvigCXSZLsT+zbOOSbs+Bkmf8=
Subject key identifier: 63:8C:18:68:3C:DC:47:3A:F7:9E:D3:CC:D5:96:98:B5:F5:1F:17:CF
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial: 019A7225DF86B7C7211D7786A57E7DCE64CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:15 +0000
Manifest this update: Tue 11 Nov 2025 09:01:15 +0000
Manifest next update: Wed 12 Nov 2025 09:01:15 +0000
Files and hashes: 1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: i4YPscT/T7MiSIeLWB/7y4zCWTxB65Xm3/20wNvXoCg=)
2: BliaGrjDAqHKNEj9Mx9veOEBPEw.roa (hash: Zp3YmeNzMTw4uQ2BI2h1hZyUbxrVTAnKdQaDtTTNRXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:df:86:b7:c7:21:1d:77:86:a5:7e:7d:ce:64:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
Validity
Not Before: Nov 11 09:01:15 2025 GMT
Not After : Nov 12 09:01:15 2025 GMT
Subject: CN=638c18683cdc473af79ed3ccd59698b5f51f17cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:1e:8c:0a:e0:87:89:7b:d8:4c:2b:6a:4f:
e4:02:c2:f6:5e:77:85:27:94:15:1f:22:e1:5c:d4:
62:e0:b4:51:8d:bd:43:78:70:77:b8:a8:f1:44:3c:
d3:b7:f8:6c:ac:db:1a:7c:e2:83:8e:64:5b:84:ca:
05:38:31:c8:05:cb:b9:06:d9:f8:dc:ac:60:e4:86:
10:43:70:37:25:bf:10:e5:7b:a4:48:42:6f:18:ae:
81:37:3f:9a:71:ab:53:98:2a:7a:38:3f:b3:91:c9:
6d:90:1a:1c:ed:2a:6c:82:c3:fc:aa:88:f8:02:19:
4a:55:65:97:f0:da:c9:d2:de:a2:b7:59:c2:d2:84:
c4:87:d7:96:b6:d0:67:d0:bd:b1:f4:dc:b2:b0:1b:
17:af:52:1f:a7:18:da:d8:97:5e:37:0a:88:7b:b4:
52:57:db:8d:f5:32:2c:33:e6:5b:4e:6c:e7:af:0d:
36:d6:96:8c:91:49:ba:e8:08:d4:69:06:52:7d:83:
43:09:30:ee:f2:0f:3f:6e:4d:53:e8:a2:35:64:66:
ec:0c:7e:0f:86:e7:09:03:ad:20:e9:68:0c:02:49:
57:d7:90:ba:ba:c8:ea:69:89:0b:b2:c5:d5:33:2d:
a8:b5:fc:ce:df:ac:35:40:32:43:f2:dd:e3:40:9e:
98:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8C:18:68:3C:DC:47:3A:F7:9E:D3:CC:D5:96:98:B5:F5:1F:17:CF
X509v3 Authority Key Identifier:
keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ac:9d:bd:ea:49:f3:a1:64:9c:e1:f2:0f:10:a7:19:e2:e5:
af:b4:22:c3:5e:e4:0f:3c:56:a1:34:43:8b:11:78:68:45:97:
f4:0d:b9:45:60:40:c6:64:35:0e:2d:7b:15:a3:a6:4b:78:c7:
e5:3d:6d:ad:d7:9d:22:cc:71:49:e7:e9:aa:d6:6c:92:16:42:
14:0d:e0:6a:27:2a:89:dc:80:22:c1:8e:6d:48:64:70:32:f1:
23:70:fb:43:f2:8c:63:18:9e:c7:8f:0f:2c:6a:00:2c:68:6d:
87:4a:72:cd:64:b4:e2:b4:db:fb:f4:2d:d5:d9:b5:db:d5:6e:
97:b9:b0:68:b1:9f:32:4b:7e:55:35:29:16:68:98:17:13:32:
cf:8a:9c:90:45:8f:06:f2:0a:2f:07:ff:00:45:8c:86:59:41:
f6:60:18:80:86:58:f2:d0:9a:c1:a6:cd:2b:96:3e:b5:d0:3b:
fe:2c:29:d9:76:47:5d:4c:54:68:b7:94:c2:fa:0a:3b:1f:93:
87:8b:cc:06:40:e6:a0:0a:83:22:2f:63:f8:96:4b:3a:9b:b1:
92:3d:ca:29:4c:c6:24:59:35:80:1e:b2:e1:51:70:b8:7f:e0:
20:26:23:57:d8:f3:ba:79:7b:05:84:28:93:fa:e9:8d:ba:f9:
14:7c:45:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJd+Gt8chHXeGpX59zmTLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NzQ3YjU2NTg0NGUzZTJmYzcxMmZhYjViZTg1OTI0YWFj
NTg2NDMwHhcNMjUxMTExMDkwMTE1WhcNMjUxMTEyMDkwMTE1WjAzMTEwLwYDVQQD
Eyg2MzhjMTg2ODNjZGM0NzNhZjc5ZWQzY2NkNTk2OThiNWY1MWYxN2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZcejArgh4l72Ewrak/kAsL2XneF
J5QVHyLhXNRi4LRRjb1DeHB3uKjxRDzTt/hsrNsafOKDjmRbhMoFODHIBcu5Btn4
3Kxg5IYQQ3A3Jb8Q5XukSEJvGK6BNz+acatTmCp6OD+zkcltkBoc7SpsgsP8qoj4
AhlKVWWX8NrJ0t6it1nC0oTEh9eWttBn0L2x9NyysBsXr1Ifpxja2JdeNwqIe7RS
V9uN9TIsM+ZbTmznrw021paMkUm66AjUaQZSfYNDCTDu8g8/bk1T6KI1ZGbsDH4P
hucJA60g6WgMAklX15C6usjqaYkLssXVMy2otfzO36w1QDJD8t3jQJ6YuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOMGGg83Ec6957TzNWWmLX1HxfPMB8GA1UdIwQY
MBaAFAR0e1ZYROPi/HEvq1voWSSqxYZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82NDgwMGItNTRjYy00MGYyLWE3ZWQt
OTdiMjE1N2NiYWQxLzEvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82NDgwMGItNTRjYy00MGYyLWE3ZWQtOTdiMjE1N2NiYWQx
LzEvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcaydvepJ
86FknOHyDxCnGeLlr7Qiw17kDzxWoTRDixF4aEWX9A25RWBAxmQ1Di17FaOmS3jH
5T1trdedIsxxSefpqtZskhZCFA3gaicqidyAIsGObUhkcDLxI3D7Q/KMYxiex48P
LGoALGhth0pyzWS04rTb+/Qt1dm129Vul7mwaLGfMkt+VTUpFmiYFxMyz4qckEWP
BvIKLwf/AEWMhllB9mAYgIZY8tCawabNK5Y+tdA7/iwp2XZHXUxUaLeUwvoKOx+T
h4vMBkDmoAqDIi9j+JZLOpuxkj3KKUzGJFk1gB6y4VFwuH/gICYjV9jzunl7BYQo
k/rpjbr5FHxFaQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:51 2025 by rpki-client