Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
File: bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft (raw, json)
Hash identifier: MkyWwYQOg5/+k0OdvqCUuWPJ/dRNCmxEqk1BNMhhSZ4=
Subject key identifier: A4:B2:F7:D7:B5:26:CD:77:E4:BC:14:CB:27:10:DC:9F:B9:34:6B:7E
Authority key identifier: 6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
Certificate issuer: /CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Certificate serial: 019A725CDBB7AEC9148333D5BC09D3A942F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
Manifest number: 0AA3
Signing time: Tue 11 Nov 2025 10:01:19 +0000
Manifest this update: Tue 11 Nov 2025 10:01:19 +0000
Manifest next update: Wed 12 Nov 2025 10:01:19 +0000
Files and hashes: 1: W0hh9fYP1wBw9ymd6jWUhZc3TSg.roa (hash: 9fnzXaQKbPD2tmB/4Jx1f8muC/i0JY7hK/AaC91lAgY=)
2: bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl (hash: 2XZwUFjAE4UZEbhI9fUP4JpgUP9qHasNhqyqs4x9km4=)
3: f1Yqi8lvwcIpnbg2hTJqBii1euQ.roa (hash: thrb8BU441zB2iuhJJ9dbE9Q7lmEZNGWAp0dWfYSQoY=)
4: ojouXwxiA4Aunr-HY_Ha3X-nK8k.roa (hash: V3E89n28yhHgqS4vkCJ3f49fshGSQZ1NzPYfiDUP4Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:db:b7:ae:c9:14:83:33:d5:bc:09:d3:a9:42:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Validity
Not Before: Nov 11 10:01:19 2025 GMT
Not After : Nov 12 10:01:19 2025 GMT
Subject: CN=a4b2f7d7b526cd77e4bc14cb2710dc9fb9346b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:67:6c:f0:9d:01:40:45:2a:9c:a9:cc:1c:
fa:e5:f4:61:16:8b:fa:b9:9b:19:ed:65:64:ac:11:
08:42:b0:f3:bd:6d:6e:fc:61:5a:9f:40:79:57:82:
a2:d6:cb:94:15:d7:84:ba:cc:7d:a6:4b:7b:d9:c5:
80:05:f1:38:a9:e8:13:12:77:f5:3e:b6:ca:c4:f0:
f3:6b:12:6b:2f:7d:3d:70:2c:f2:7a:fb:8d:c2:e3:
5d:b9:77:3f:3c:c2:01:65:69:88:85:3f:82:d2:e1:
b1:08:61:05:5d:40:84:75:fd:d9:55:76:df:8c:a8:
30:94:49:3d:9c:0e:05:a0:44:d5:bd:8c:a8:a3:c0:
57:23:42:24:ef:62:5b:41:d1:65:d2:e3:d0:59:1c:
24:b1:0c:4e:32:47:40:8e:9d:4d:e8:f8:23:c7:98:
4b:36:a0:7f:da:7b:f2:27:44:bd:97:dc:50:b0:88:
e3:36:e5:db:89:33:20:82:0c:72:12:e1:f0:2e:0e:
0d:73:c1:33:bc:e9:e1:3b:4e:8c:95:bf:bb:5c:64:
c4:fe:0d:e4:b4:1c:43:ae:4f:39:ae:1a:31:72:10:
19:59:4b:95:24:e8:38:af:47:40:e4:5d:4a:5f:c7:
c2:06:54:44:4b:fd:0e:f7:42:03:9b:1f:0f:25:88:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B2:F7:D7:B5:26:CD:77:E4:BC:14:CB:27:10:DC:9F:B9:34:6B:7E
X509v3 Authority Key Identifier:
keyid:6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:40:2d:15:8a:a0:63:ae:b2:74:61:19:23:b9:30:5c:e1:dc:
0a:8e:93:da:31:3c:65:dd:7f:8d:36:6e:0e:da:d2:78:54:91:
45:d8:82:77:b4:ff:31:a4:09:c3:81:bb:22:b7:41:79:d8:0e:
cb:d7:34:78:a8:a6:eb:88:37:5d:ee:08:9c:c3:26:3f:39:da:
7a:8a:8b:9a:f3:44:13:3c:97:ff:6f:85:de:a3:9f:81:f9:05:
a6:4c:3f:0a:ff:36:c4:d0:63:f0:91:34:0b:85:8e:86:6c:cb:
56:06:18:d5:04:ee:b5:af:18:e5:70:7c:95:25:46:7e:7a:88:
a3:18:48:7e:70:44:6b:c6:4c:51:f5:90:68:37:ac:7c:19:6a:
64:99:2c:5a:a2:38:a1:fd:96:fd:e7:39:6d:12:ac:9c:75:8b:
3b:4f:71:64:3b:0a:68:8c:f1:b4:1c:90:fa:c7:41:8b:59:c0:
cc:ee:0f:c5:a9:a9:f8:c8:e8:ce:13:c3:b1:9e:8f:01:6b:b3:
db:ad:15:96:76:a0:93:31:ff:eb:48:ae:1f:ce:2c:c3:8b:d7:
64:d1:e6:9b:e5:46:08:1f:61:cd:dd:55:0f:59:b3:6a:a3:19:
32:5e:dd:d9:dc:29:f2:86:3c:d3:62:f3:5a:e5:bb:f1:11:ae:
ac:e0:8d:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXNu3rskUgzPVvAnTqULxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMWJlYzNmOTM1ODY2OGE4N2QxYTE2YzQ3MjJmNDFlM2My
MzgxZTIwHhcNMjUxMTExMTAwMTE5WhcNMjUxMTEyMTAwMTE5WjAzMTEwLwYDVQQD
EyhhNGIyZjdkN2I1MjZjZDc3ZTRiYzE0Y2IyNzEwZGM5ZmI5MzQ2YjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7lnbPCdAUBFKpypzBz65fRhFov6
uZsZ7WVkrBEIQrDzvW1u/GFan0B5V4Ki1suUFdeEusx9pkt72cWABfE4qegTEnf1
PrbKxPDzaxJrL309cCzyevuNwuNduXc/PMIBZWmIhT+C0uGxCGEFXUCEdf3ZVXbf
jKgwlEk9nA4FoETVvYyoo8BXI0Ik72JbQdFl0uPQWRwksQxOMkdAjp1N6Pgjx5hL
NqB/2nvyJ0S9l9xQsIjjNuXbiTMgggxyEuHwLg4Nc8EzvOnhO06Mlb+7XGTE/g3k
tBxDrk85rhoxchAZWUuVJOg4r0dA5F1KX8fCBlRES/0O90IDmx8PJYiVBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSy99e1Js135LwUyycQ3J+5NGt+MB8GA1UdIwQY
MBaAFGwb7D+TWGaKh9GhbEci9B48I4HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84YzA0NzMtZTdkMC00ZTQzLWE3Zjkt
Nzk3ZjRjYzRiNTAwLzEvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84YzA0NzMtZTdkMC00ZTQzLWE3ZjktNzk3ZjRjYzRiNTAw
LzEvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUAtFYqg
Y66ydGEZI7kwXOHcCo6T2jE8Zd1/jTZuDtrSeFSRRdiCd7T/MaQJw4G7IrdBedgO
y9c0eKim64g3Xe4InMMmPznaeoqLmvNEEzyX/2+F3qOfgfkFpkw/Cv82xNBj8JE0
C4WOhmzLVgYY1QTuta8Y5XB8lSVGfnqIoxhIfnBEa8ZMUfWQaDesfBlqZJksWqI4
of2W/ec5bRKsnHWLO09xZDsKaIzxtByQ+sdBi1nAzO4Pxamp+MjozhPDsZ6PAWuz
260VlnagkzH/60iuH84sw4vXZNHmm+VGCB9hzd1VD1mzaqMZMl7d2dwp8oY802Lz
WuW78RGurOCNmw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:47 2025 by rpki-client