Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
File: bHO9JP2DCIa_otKWFBbSGF3jN3I.mft (raw, json)
Hash identifier: indE2dOPlF2iMTPHWbjXDZo51gEGEVxkje73DafmLtk=
Subject key identifier: 59:CB:E0:9F:81:26:85:FC:1B:35:4A:BF:67:3A:1F:CB:9E:29:47:46
Authority key identifier: 6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
Certificate issuer: /CN=6c73bd24fd830886bfa2d2961416d2185de33772
Certificate serial: 019A71B87C7B934B809FD22495B8DD7A43E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
Manifest number: 0A6B
Signing time: Tue 11 Nov 2025 07:01:47 +0000
Manifest this update: Tue 11 Nov 2025 07:01:47 +0000
Manifest next update: Wed 12 Nov 2025 07:01:47 +0000
Files and hashes: 1: bHO9JP2DCIa_otKWFBbSGF3jN3I.crl (hash: 9/Qo9wpLaHcbZKOnWBsiwSGuokLGRMZsqyRWGo9yjp0=)
2: qHEAWZ6N3iBzcK7IIzIjqot58Rk.roa (hash: n8u6jtIG9RsDk/UjBbBpLB8puiC2i8ky96Vt7ctj0eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7c:7b:93:4b:80:9f:d2:24:95:b8:dd:7a:43:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73bd24fd830886bfa2d2961416d2185de33772
Validity
Not Before: Nov 11 07:01:47 2025 GMT
Not After : Nov 12 07:01:47 2025 GMT
Subject: CN=59cbe09f812685fc1b354abf673a1fcb9e294746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:af:f1:fe:b2:77:da:5f:06:06:a1:4a:9d:
4b:d1:15:d1:51:d2:34:4f:3e:9e:11:b4:5d:a8:59:
0f:d5:d0:e6:3a:41:2a:2d:d5:6b:53:57:67:ea:d8:
9d:bc:d5:61:e2:44:14:a4:97:aa:9d:31:cc:8d:ac:
6c:e3:7b:11:61:68:ad:88:fe:65:bb:7a:7c:c2:3f:
30:ff:ce:b1:b6:ef:86:b0:06:13:ee:a1:73:4d:02:
27:c0:bf:cb:68:f5:40:c4:b5:52:a7:97:18:8c:90:
46:2c:58:ae:e2:72:9d:7d:6f:b9:45:72:81:bf:f6:
a5:b1:ed:86:8f:a5:31:77:10:13:30:fb:b5:c1:30:
4d:c6:b4:70:c6:06:61:8d:67:c4:1c:cf:ed:f0:42:
c3:d9:25:61:49:f6:4f:3d:f6:3c:d1:c1:57:71:24:
f4:bc:a9:9a:67:d1:13:d1:05:d1:e8:64:8a:24:d7:
13:fc:8c:b4:3c:d0:27:8b:a2:c5:70:24:31:90:76:
64:72:03:a0:ba:ed:aa:2a:ef:56:56:16:d0:05:25:
49:80:98:57:03:a4:7e:f4:be:7e:74:15:e0:0b:79:
b6:e2:e4:57:44:9c:fe:9d:46:89:5c:49:26:af:ea:
36:47:67:ca:91:30:a0:1c:10:3b:48:bc:3f:ab:94:
a5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CB:E0:9F:81:26:85:FC:1B:35:4A:BF:67:3A:1F:CB:9E:29:47:46
X509v3 Authority Key Identifier:
keyid:6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ac:53:67:83:4b:85:21:eb:a0:b8:50:74:cf:10:6f:fa:24:
89:6f:c6:36:cb:bd:1c:3c:77:b9:57:7b:62:de:4b:01:3e:c8:
48:c2:9e:51:9c:38:fe:09:69:33:94:54:b6:c7:6a:3e:72:2b:
e4:5e:d6:01:72:a3:a7:e7:71:fe:20:8d:7d:1d:21:ee:10:07:
d7:b1:5d:05:6a:ec:0b:cb:37:85:1f:20:68:20:a7:2c:cc:b3:
22:7c:11:40:63:3d:89:c4:dd:41:58:c5:aa:6f:d0:17:37:ab:
8a:c6:16:b9:ce:87:9f:49:ff:05:5b:79:f9:0b:9a:cc:f4:24:
c0:7e:39:9f:6c:a8:1d:48:e2:ef:fe:45:7e:81:ee:a0:a7:42:
5a:0c:45:91:12:04:ce:2f:ca:ea:ff:07:8e:bc:6a:9d:a1:a0:
41:b6:ba:ef:50:96:ef:e4:0d:ec:bc:f4:3b:6c:d5:41:89:e6:
5f:6a:18:b0:02:93:eb:4e:4e:4d:c5:1f:2f:8f:86:4c:78:79:
dc:db:ac:c0:45:a4:ab:d6:2a:81:ce:7a:b0:e7:7c:cc:a5:ed:
83:62:52:fe:96:c9:c2:7d:68:4e:b1:08:a4:62:d8:ef:60:9e:
12:40:3a:e6:a4:f7:61:0f:9e:1d:f0:d5:8f:81:d2:50:cb:6d:
1a:71:2f:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuHx7k0uAn9IklbjdekPgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNzNiZDI0ZmQ4MzA4ODZiZmEyZDI5NjE0MTZkMjE4NWRl
MzM3NzIwHhcNMjUxMTExMDcwMTQ3WhcNMjUxMTEyMDcwMTQ3WjAzMTEwLwYDVQQD
Eyg1OWNiZTA5ZjgxMjY4NWZjMWIzNTRhYmY2NzNhMWZjYjllMjk0NzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprav8f6yd9pfBgahSp1L0RXRUdI0
Tz6eEbRdqFkP1dDmOkEqLdVrU1dn6tidvNVh4kQUpJeqnTHMjaxs43sRYWitiP5l
u3p8wj8w/86xtu+GsAYT7qFzTQInwL/LaPVAxLVSp5cYjJBGLFiu4nKdfW+5RXKB
v/alse2Gj6UxdxATMPu1wTBNxrRwxgZhjWfEHM/t8ELD2SVhSfZPPfY80cFXcST0
vKmaZ9ET0QXR6GSKJNcT/Iy0PNAni6LFcCQxkHZkcgOguu2qKu9WVhbQBSVJgJhX
A6R+9L5+dBXgC3m24uRXRJz+nUaJXEkmr+o2R2fKkTCgHBA7SLw/q5SltQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnL4J+BJoX8GzVKv2c6H8ueKUdGMB8GA1UdIwQY
MBaAFGxzvST9gwiGv6LSlhQW0hhd4zdyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkhPOUpQMkRDSWFfb3RLV0ZCYlNHRjNqTjNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85OGRhYjgtN2IyNC00OWYzLWEzNmYt
NzNhMTU3YTJiOTlmLzEvYkhPOUpQMkRDSWFfb3RLV0ZCYlNHRjNqTjNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85OGRhYjgtN2IyNC00OWYzLWEzNmYtNzNhMTU3YTJiOTlm
LzEvYkhPOUpQMkRDSWFfb3RLV0ZCYlNHRjNqTjNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKxTZ4NL
hSHroLhQdM8Qb/okiW/GNsu9HDx3uVd7Yt5LAT7ISMKeUZw4/glpM5RUtsdqPnIr
5F7WAXKjp+dx/iCNfR0h7hAH17FdBWrsC8s3hR8gaCCnLMyzInwRQGM9icTdQVjF
qm/QFzerisYWuc6Hn0n/BVt5+QuazPQkwH45n2yoHUji7/5FfoHuoKdCWgxFkRIE
zi/K6v8HjrxqnaGgQba671CW7+QN7Lz0O2zVQYnmX2oYsAKT605OTcUfL4+GTHh5
3NuswEWkq9Yqgc56sOd8zKXtg2JS/pbJwn1oTrEIpGLY72CeEkA65qT3YQ+eHfDV
j4HSUMttGnEvfw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:00 2025 by rpki-client