Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
File: bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft (raw, json)
Hash identifier: WL+Q0QAZt4AszkZJ73H0Dig6llg2AtotK/IlJq6UnMk=
Subject key identifier: A4:EE:19:E5:7A:41:B4:C8:85:C2:23:36:86:96:9B:F7:99:A4:8A:10
Authority key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
Certificate issuer: /CN=6eae4bb0513980c87f9bac592952c095777ac12e
Certificate serial: 01992B5A6AE218FCAB1ACA0CC4F7A12E2DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
Manifest number: 02D1
Signing time: Mon 08 Sep 2025 22:02:49 +0000
Manifest this update: Mon 08 Sep 2025 22:02:49 +0000
Manifest next update: Tue 09 Sep 2025 22:02:49 +0000
Files and hashes: 1: C_vZrzZdhy-uejOZ6_GWZTSm_n0.roa (hash: 79ZNhw6Fw3tlIyCfv3zLmQ4ilyJAmRJY2DfEyitGouQ=)
2: bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl (hash: txYCS86TKqCNCyqWlrnswu4G4XEapCVTcaGHL5tayy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 22:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:5a:6a:e2:18:fc:ab:1a:ca:0c:c4:f7:a1:2e:2d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eae4bb0513980c87f9bac592952c095777ac12e
Validity
Not Before: Sep 8 22:02:49 2025 GMT
Not After : Sep 9 22:02:49 2025 GMT
Subject: CN=a4ee19e57a41b4c885c2233686969bf799a48a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f7:44:fb:b5:5b:a2:90:64:97:19:b1:3c:d3:
ce:c8:56:7f:f6:f6:60:83:55:a5:17:6f:4b:db:4f:
07:d7:a8:ce:4b:f0:00:81:2f:68:58:ea:a1:44:c6:
39:1b:97:bb:e6:b9:b7:59:e9:b7:35:81:c9:57:52:
13:fc:ad:39:02:5f:15:9e:d6:8f:3f:17:18:12:e4:
00:52:d1:a7:8d:39:6a:64:37:1d:9b:c6:ed:67:f0:
a4:1e:77:17:b8:90:eb:fe:2f:e1:2a:7c:49:30:2c:
fc:4c:7b:cd:84:a9:fd:2a:57:30:6e:be:41:e5:10:
9d:9b:b0:a4:85:53:ac:46:ea:b1:3b:6f:fc:a6:72:
2b:11:f4:f0:21:16:07:ad:81:13:84:74:26:2a:3d:
72:0d:c8:af:b8:df:a1:89:8d:d4:18:14:aa:55:30:
61:dd:38:c6:3e:6d:d8:da:ab:b8:06:47:f9:7e:ba:
04:f9:62:74:b8:19:8f:19:43:01:7c:4f:ee:89:d2:
a4:7c:dd:4a:c3:46:7c:c9:da:94:db:26:5e:9a:c3:
a5:5e:f6:69:c1:97:5a:36:d8:05:74:8b:4d:f2:37:
bf:3b:e8:f8:e3:3e:35:d3:33:09:40:68:31:7a:f3:
00:50:fa:8f:7e:dd:0d:f6:15:28:28:4a:07:e8:71:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EE:19:E5:7A:41:B4:C8:85:C2:23:36:86:96:9B:F7:99:A4:8A:10
X509v3 Authority Key Identifier:
keyid:6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:10:83:69:c1:9d:65:20:f0:d2:1e:5a:41:08:f2:42:22:66:
aa:d5:82:61:67:13:63:79:25:3d:8f:e3:8b:12:f0:3d:93:75:
fd:47:6f:19:d7:3b:52:3a:24:52:d9:d6:63:4d:81:e6:8c:94:
68:45:8f:ec:8b:ce:5c:c2:55:37:22:d2:61:a6:4f:9e:33:e1:
d6:55:4c:2d:02:ae:cc:4d:4a:87:db:37:c3:64:6e:2a:29:8d:
65:46:56:32:b4:75:a4:c3:ef:5e:0d:01:17:1f:0e:c5:ff:18:
80:b5:61:28:73:f2:d3:5a:a8:73:e2:8d:2f:3f:f2:c3:5f:a2:
24:18:86:19:c1:8f:1f:b6:5a:73:e5:39:1b:f3:c3:2f:86:06:
44:9e:17:8d:34:48:be:0f:5c:1d:01:07:52:8d:d3:df:57:1a:
8c:76:50:36:33:8e:30:b6:1c:20:91:23:ad:fb:a8:ff:c7:0d:
f1:fb:29:60:95:81:68:7c:d1:b4:a0:eb:a2:0e:56:65:fa:40:
f6:ba:04:3d:a7:a7:7f:52:d4:0b:1d:58:65:eb:87:40:3d:3b:
d2:0d:ee:23:8e:66:8e:e7:32:5d:ae:6f:36:88:33:11:65:c3:
6e:ff:80:6c:8b:ee:07:0f:57:3f:a9:e6:10:56:fd:d6:24:aa:
f0:5b:74:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkrWmriGPyrGsoMxPehLi3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYWU0YmIwNTEzOTgwYzg3ZjliYWM1OTI5NTJjMDk1Nzc3
YWMxMmUwHhcNMjUwOTA4MjIwMjQ5WhcNMjUwOTA5MjIwMjQ5WjAzMTEwLwYDVQQD
EyhhNGVlMTllNTdhNDFiNGM4ODVjMjIzMzY4Njk2OWJmNzk5YTQ4YTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPdE+7VbopBklxmxPNPOyFZ/9vZg
g1WlF29L208H16jOS/AAgS9oWOqhRMY5G5e75rm3Wem3NYHJV1IT/K05Al8VntaP
PxcYEuQAUtGnjTlqZDcdm8btZ/CkHncXuJDr/i/hKnxJMCz8THvNhKn9Klcwbr5B
5RCdm7CkhVOsRuqxO2/8pnIrEfTwIRYHrYEThHQmKj1yDcivuN+hiY3UGBSqVTBh
3TjGPm3Y2qu4Bkf5froE+WJ0uBmPGUMBfE/uidKkfN1Kw0Z8ydqU2yZemsOlXvZp
wZdaNtgFdItN8je/O+j44z410zMJQGgxevMAUPqPft0N9hUoKEoH6HGeOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTuGeV6QbTIhcIjNoaWm/eZpIoQMB8GA1UdIwQY
MBaAFG6uS7BROYDIf5usWSlSwJV3esEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zYTcyYmEtMWRjYS00MGQ5LWE4YWQt
NGNlNjIzMWYyYWQ5LzEvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8zYTcyYmEtMWRjYS00MGQ5LWE4YWQtNGNlNjIzMWYyYWQ5
LzEvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhCDacGd
ZSDw0h5aQQjyQiJmqtWCYWcTY3klPY/jixLwPZN1/UdvGdc7UjokUtnWY02B5oyU
aEWP7IvOXMJVNyLSYaZPnjPh1lVMLQKuzE1Kh9s3w2RuKimNZUZWMrR1pMPvXg0B
Fx8Oxf8YgLVhKHPy01qoc+KNLz/yw1+iJBiGGcGPH7Zac+U5G/PDL4YGRJ4XjTRI
vg9cHQEHUo3T31cajHZQNjOOMLYcIJEjrfuo/8cN8fspYJWBaHzRtKDrog5WZfpA
9roEPaenf1LUCx1YZeuHQD070g3uI45mjucyXa5vNogzEWXDbv+AbIvuBw9XP6nm
EFb91iSq8Ft0sA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 04:14:53 2025 by rpki-client