Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
File: BvPXAJgq-awbr-TyqnGEStAHWR0.mft (raw, json)
Hash identifier: cnL2fxGMTRcNPxiL1q+HFuRtjYfq9rZQHfR3Si6ardg=
Subject key identifier: EB:B1:84:37:5F:46:70:38:83:7E:CB:E9:7C:86:2F:E2:FB:BA:B2:93
Authority key identifier: 06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
Certificate issuer: /CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Certificate serial: 019A71B884C28CFBBFA2B1658B4BA1F7C8F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
Manifest number: 0A51
Signing time: Tue 11 Nov 2025 07:01:49 +0000
Manifest this update: Tue 11 Nov 2025 07:01:49 +0000
Manifest next update: Wed 12 Nov 2025 07:01:49 +0000
Files and hashes: 1: BvPXAJgq-awbr-TyqnGEStAHWR0.crl (hash: W4ajILXbi66hLv8v9R4TkDvOol2FNfN4rWJTxLVM+vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:84:c2:8c:fb:bf:a2:b1:65:8b:4b:a1:f7:c8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Validity
Not Before: Nov 11 07:01:49 2025 GMT
Not After : Nov 12 07:01:49 2025 GMT
Subject: CN=ebb184375f467038837ecbe97c862fe2fbbab293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d7:99:45:6d:14:f4:99:12:4f:de:39:bb:a2:
bb:22:19:9e:35:31:cb:23:26:33:b8:d8:b0:2f:09:
d5:a7:e7:d2:8b:cd:0b:cd:21:27:d1:6b:1f:19:62:
62:16:b1:f9:d0:db:f7:cf:b3:63:98:48:8c:66:9d:
3d:40:f6:a9:48:fe:c4:89:c7:5a:36:a1:35:ff:41:
4e:96:02:46:4c:39:e2:d7:5b:37:87:4f:ce:dd:cd:
82:ce:62:0b:7a:ac:9b:6e:1c:8f:08:c8:3f:07:f3:
3d:29:38:d1:b5:88:23:8b:5c:5e:e2:ca:f1:bf:8a:
18:0a:cc:b9:2a:39:fc:a0:35:ca:4d:ca:fc:26:19:
4c:ff:75:58:b4:b4:47:ba:be:ec:1a:c8:77:7f:fc:
d2:69:4e:33:93:f2:d3:bf:a3:8a:bf:13:32:e1:b5:
6d:3a:98:1c:aa:18:84:aa:e4:8f:3d:bd:b6:7c:eb:
a3:5f:95:5e:9a:f2:24:3d:22:50:0d:05:1b:6f:ba:
b6:62:a4:d4:05:23:f6:00:11:f0:80:a8:e1:d4:d6:
70:58:4d:0d:03:9a:fb:b7:a9:55:d3:f0:31:ad:2e:
db:55:f5:d8:2f:6a:50:2a:5d:98:8d:b7:b6:a9:30:
0e:ac:75:98:5d:16:f6:01:41:cd:e8:d9:f9:9c:5a:
36:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B1:84:37:5F:46:70:38:83:7E:CB:E9:7C:86:2F:E2:FB:BA:B2:93
X509v3 Authority Key Identifier:
keyid:06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3b:6b:c0:1a:da:a8:51:b7:e3:7d:1d:04:48:36:51:ac:23:
ca:a2:5f:0b:ce:98:87:b6:63:b9:a4:c4:76:3d:02:01:26:4c:
ed:dd:cb:78:c2:18:e2:af:67:41:c1:92:dc:9f:ba:0e:2f:63:
4f:99:8f:dd:78:f2:69:29:ad:20:d0:3b:07:c1:51:36:c3:31:
1d:43:e7:9b:b4:2c:12:f2:23:6e:62:51:36:c2:df:6c:5c:a7:
af:be:ff:1f:4f:ad:07:a6:9c:fa:fa:dc:d8:10:56:6b:0c:11:
11:a6:3b:7a:cc:54:8c:5f:7a:29:e4:8f:f5:9c:d6:fe:f9:35:
02:a1:2c:fa:e0:8c:50:97:cc:f8:e0:83:0b:7c:78:54:4f:e4:
f5:28:5e:88:c0:64:de:7c:6a:85:62:10:93:d8:c1:6e:08:48:
5e:40:87:e1:e4:4f:2d:ac:00:96:ed:b4:91:3f:89:27:24:e5:
4c:d4:70:9f:e2:ab:b0:8a:56:dc:ef:e5:67:ba:a5:f9:1a:01:
a7:0d:71:21:cc:8d:2e:7d:62:8f:3d:ee:77:8e:b1:8d:89:00:
87:6f:bf:38:4e:ba:06:e1:36:cc:21:01:28:b6:00:ae:6a:e9:
96:3b:2c:0e:f6:53:cb:52:2e:f0:56:eb:c4:01:02:ef:03:63:
24:52:fe:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuITCjPu/orFli0uh98jwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZjNkNzAwOTgyYWY5YWMxYmFmZTRmMmFhNzE4NDRhZDAw
NzU5MWQwHhcNMjUxMTExMDcwMTQ5WhcNMjUxMTEyMDcwMTQ5WjAzMTEwLwYDVQQD
EyhlYmIxODQzNzVmNDY3MDM4ODM3ZWNiZTk3Yzg2MmZlMmZiYmFiMjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdeZRW0U9JkST945u6K7IhmeNTHL
IyYzuNiwLwnVp+fSi80LzSEn0WsfGWJiFrH50Nv3z7NjmEiMZp09QPapSP7Eicda
NqE1/0FOlgJGTDni11s3h0/O3c2CzmILeqybbhyPCMg/B/M9KTjRtYgji1xe4srx
v4oYCsy5Kjn8oDXKTcr8JhlM/3VYtLRHur7sGsh3f/zSaU4zk/LTv6OKvxMy4bVt
OpgcqhiEquSPPb22fOujX5VemvIkPSJQDQUbb7q2YqTUBSP2ABHwgKjh1NZwWE0N
A5r7t6lV0/AxrS7bVfXYL2pQKl2Yjbe2qTAOrHWYXRb2AUHN6Nn5nFo2zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuxhDdfRnA4g37L6XyGL+L7urKTMB8GA1UdIwQY
MBaAFAbz1wCYKvmsG6/k8qpxhErQB1kdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnZQWEFKZ3EtYXdici1UeXFuR0VTdEFIV1IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85N2ViMDMtMGQ2ZS00ZDdjLTgyZjEt
ZDNiM2U3N2JkOTkzLzEvQnZQWEFKZ3EtYXdici1UeXFuR0VTdEFIV1IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy85N2ViMDMtMGQ2ZS00ZDdjLTgyZjEtZDNiM2U3N2JkOTkz
LzEvQnZQWEFKZ3EtYXdici1UeXFuR0VTdEFIV1IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjtrwBra
qFG3430dBEg2UawjyqJfC86Yh7ZjuaTEdj0CASZM7d3LeMIY4q9nQcGS3J+6Di9j
T5mP3XjyaSmtINA7B8FRNsMxHUPnm7QsEvIjbmJRNsLfbFynr77/H0+tB6ac+vrc
2BBWawwREaY7esxUjF96KeSP9ZzW/vk1AqEs+uCMUJfM+OCDC3x4VE/k9SheiMBk
3nxqhWIQk9jBbghIXkCH4eRPLawAlu20kT+JJyTlTNRwn+KrsIpW3O/lZ7ql+RoB
pw1xIcyNLn1ijz3ud46xjYkAh2+/OE66BuE2zCEBKLYArmrpljssDvZTy1Iu8Fbr
xAEC7wNjJFL+fQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:38 2025 by rpki-client