Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: zIAy2KJkEwQrSr/NS65gd/c7j/QGFJQQNRPuG3FfLwg=
Subject key identifier: 73:9F:F2:3E:85:2B:58:E4:06:19:C1:C3:64:DA:B8:2B:36:C2:F3:3C
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 019A1E3EA70107CA0B938CE9BCBF0FE27A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 0159
Signing time: Sun 26 Oct 2025 02:00:13 +0000
Manifest this update: Sun 26 Oct 2025 02:00:13 +0000
Manifest next update: Mon 27 Oct 2025 02:00:13 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: RDllkMTt/1s78hCPropGa6hj3jwDOqHaaYls2wK6De0=)
2: wLmoD_8Og7x28Igym1-Hg5A410U.roa (hash: +Yzl9wN++dP4CtoCNIFtppZ8l53ff/sGGZfNPkEeKbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3e:a7:01:07:ca:0b:93:8c:e9:bc:bf:0f:e2:7a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Oct 26 02:00:13 2025 GMT
Not After : Oct 27 02:00:13 2025 GMT
Subject: CN=739ff23e852b58e40619c1c364dab82b36c2f33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ce:44:dd:bd:fe:c4:4c:1a:c7:3e:da:d8:c7:
22:59:ad:cf:f4:6f:c0:2d:d3:b4:ee:6a:98:5d:61:
55:59:5d:0d:8b:94:17:8d:5a:75:91:ce:08:04:e6:
75:27:31:bb:20:85:0f:3d:c1:8e:86:fc:34:79:cd:
5d:59:f8:50:65:a0:d0:16:f1:16:82:74:55:4f:f7:
d5:d7:3a:ed:a3:62:61:b4:5d:d6:33:e6:21:ca:01:
da:8e:52:e3:f1:77:f9:60:dd:b1:3f:13:3a:22:86:
a3:01:b6:d2:bf:b6:c2:a1:0c:ed:e4:ab:a5:e4:f6:
28:d3:b6:49:d0:44:bb:c5:76:05:5e:79:e2:c9:aa:
57:dc:cd:7a:2d:52:db:89:47:21:ff:b7:57:eb:23:
a5:f9:85:d6:bc:19:02:cf:af:0d:7e:0d:e8:f9:05:
ee:c9:f8:90:c8:14:44:e3:6d:fe:5d:06:88:a2:90:
ee:92:88:b8:ca:36:93:e0:48:bd:e3:7c:d7:73:27:
80:44:02:db:53:9c:cd:65:8d:9b:83:64:16:db:dc:
52:4f:96:24:b5:2c:36:54:67:07:10:d5:e9:df:0e:
fd:6c:f2:6a:20:98:2f:6c:67:3c:0b:a4:fa:95:c5:
cc:e5:5d:e4:36:cb:f9:b6:80:e8:25:eb:12:4d:8f:
78:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9F:F2:3E:85:2B:58:E4:06:19:C1:C3:64:DA:B8:2B:36:C2:F3:3C
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:cf:35:19:0a:f6:e7:bf:b3:24:cf:2b:44:54:d4:7e:87:1b:
4e:30:55:04:08:1d:8a:a9:5a:60:57:43:ad:f8:55:cd:f8:51:
17:91:2a:f5:c1:91:48:f5:ea:a0:71:ff:4d:fc:4b:61:61:eb:
cf:4f:0f:8d:43:2d:fa:d4:6a:f4:73:3f:4c:43:09:6f:af:d7:
38:24:59:01:8e:85:bb:ec:08:b8:ca:1c:4b:9a:b1:8d:93:25:
cb:04:4d:16:aa:3c:f1:18:90:13:1d:eb:13:69:7b:0c:c2:30:
c4:6d:a3:df:5c:6e:2c:50:80:be:63:cf:f1:4f:5d:87:bd:85:
e8:d3:3b:88:37:dc:90:8a:48:2c:61:c9:60:ec:b3:c4:a1:48:
5b:f6:a0:42:9e:44:86:60:00:b5:bc:f1:78:ec:8a:a2:d5:d0:
e2:86:d6:cd:13:18:42:82:83:29:c8:10:fd:82:59:4a:94:37:
e0:d8:80:63:92:4e:29:f4:53:b4:ee:a6:e6:f2:87:c4:b5:47:
7b:65:b0:f6:3d:b9:ed:db:f0:4c:8e:10:c6:7a:8a:6a:39:64:
50:7b:8d:0b:52:71:52:c4:64:6e:be:b3:fa:9c:76:06:27:f1:
72:cd:6a:f4:f0:a8:0e:36:86:fa:80:dc:83:01:b6:49:6a:1c:
68:b5:7f:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoePqcBB8oLk4zpvL8P4no+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3Mzg0OGQ4MjgxYmU0MzllNzc3NTA4ODViNTQ3YTI4MTUy
ODAxYmIwHhcNMjUxMDI2MDIwMDEzWhcNMjUxMDI3MDIwMDEzWjAzMTEwLwYDVQQD
Eyg3MzlmZjIzZTg1MmI1OGU0MDYxOWMxYzM2NGRhYjgyYjM2YzJmMzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls5E3b3+xEwaxz7a2MciWa3P9G/A
LdO07mqYXWFVWV0Ni5QXjVp1kc4IBOZ1JzG7IIUPPcGOhvw0ec1dWfhQZaDQFvEW
gnRVT/fV1zrto2JhtF3WM+YhygHajlLj8Xf5YN2xPxM6IoajAbbSv7bCoQzt5Kul
5PYo07ZJ0ES7xXYFXnniyapX3M16LVLbiUch/7dX6yOl+YXWvBkCz68Nfg3o+QXu
yfiQyBRE423+XQaIopDukoi4yjaT4Ei943zXcyeARALbU5zNZY2bg2QW29xST5Yk
tSw2VGcHENXp3w79bPJqIJgvbGc8C6T6lcXM5V3kNsv5toDoJesSTY94qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOf8j6FK1jkBhnBw2TauCs2wvM8MB8GA1UdIwQY
MBaAFAc4SNgoG+Q553dQiFtUeigVKAG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMt
NGM1YjIwMGI2NzA5LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMtNGM1YjIwMGI2NzA5
LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtM81GQr2
57+zJM8rRFTUfocbTjBVBAgdiqlaYFdDrfhVzfhRF5Eq9cGRSPXqoHH/TfxLYWHr
z08PjUMt+tRq9HM/TEMJb6/XOCRZAY6Fu+wIuMocS5qxjZMlywRNFqo88RiQEx3r
E2l7DMIwxG2j31xuLFCAvmPP8U9dh72F6NM7iDfckIpILGHJYOyzxKFIW/agQp5E
hmAAtbzxeOyKotXQ4obWzRMYQoKDKcgQ/YJZSpQ34NiAY5JOKfRTtO6m5vKHxLVH
e2Ww9j257dvwTI4QxnqKajlkUHuNC1JxUsRkbr6z+px2Bifxcs1q9PCoDjaG+oDc
gwG2SWocaLV/kw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 04:15:00 2025 by rpki-client