Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json)
Hash identifier: URLI5mVXOOJq+wx9hbxa4tAbvPegHXSvvDxADo6L0Kk=
Subject key identifier: 73:0E:92:FC:CD:81:24:A6:5F:0E:85:5E:3F:21:0B:D7:35:6C:0F:7E
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 019A7225FC5EC5276961AAB9D6EF04BDF9B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
Manifest number: 0CE9
Signing time: Tue 11 Nov 2025 09:01:23 +0000
Manifest this update: Tue 11 Nov 2025 09:01:23 +0000
Manifest next update: Wed 12 Nov 2025 09:01:23 +0000
Files and hashes: 1: U_3B74ujhAJrCWsRNX6BqqwgnVw.roa (hash: t7MohkwWoi0EopfC0Tnorl6v62Y4aRFAg2yz8Q6y9x8=)
2: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: hGVa+jPcBQ8lPUoM2/V8XyEHf7NhWLC5eb3tXuJBDY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:fc:5e:c5:27:69:61:aa:b9:d6:ef:04:bd:f9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: Nov 11 09:01:23 2025 GMT
Not After : Nov 12 09:01:23 2025 GMT
Subject: CN=730e92fccd8124a65f0e855e3f210bd7356c0f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:60:7c:33:76:70:f8:87:96:dc:1f:8f:f5:
a2:28:9d:30:2d:4f:2b:48:32:7e:2e:dc:5b:1f:4d:
ec:b0:5c:b7:9d:79:87:23:12:6b:d6:39:23:0a:77:
1d:35:0e:42:da:3e:c7:7d:14:a3:bc:fa:cf:10:31:
de:26:06:a3:68:38:38:6a:5b:04:a7:16:ae:ef:bd:
1c:89:3a:28:36:8f:28:28:38:2c:6b:19:e0:7d:65:
89:bb:e7:e3:13:0f:8b:f5:e3:a5:79:5e:c9:62:bb:
fb:5f:ec:a8:b0:84:f0:31:c1:f5:30:b4:e2:bf:5b:
80:b1:4b:1c:96:e6:c4:08:95:b8:09:81:53:36:fd:
42:66:e4:ce:17:dc:04:57:77:05:eb:b9:39:ad:ba:
00:5f:88:ab:ca:8b:74:44:45:5b:44:e9:c2:6d:14:
18:2d:8c:04:4b:32:fc:13:0e:cb:8d:44:aa:db:53:
37:54:18:a9:91:61:a1:fb:b3:42:80:43:38:55:77:
4b:fb:71:5f:a8:fd:aa:12:98:b9:2a:9d:63:10:53:
e6:8d:dd:fe:53:2d:d0:27:42:c8:82:b3:65:48:5e:
f7:78:54:4d:cc:ec:9a:bb:26:0f:eb:3c:fa:df:7c:
c0:92:1a:e3:40:08:ff:1d:ad:44:93:b2:c3:f6:8e:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0E:92:FC:CD:81:24:A6:5F:0E:85:5E:3F:21:0B:D7:35:6C:0F:7E
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:87:10:df:cb:17:b9:39:34:7c:c0:5f:c8:24:22:27:6b:ff:
36:c1:dd:2a:88:50:a1:25:0f:ea:bb:2f:06:ff:40:c5:43:eb:
ef:b8:65:ac:e5:63:ed:97:8d:47:e5:9c:ca:d3:2a:37:08:9d:
5a:f0:c5:a3:d9:90:7f:65:3c:e3:c1:66:54:98:cd:82:91:03:
8e:82:c6:ff:9d:40:ea:8d:95:b6:5f:53:7b:82:49:62:ee:f8:
3b:5a:c5:a9:00:b0:ab:a1:6e:5b:f5:15:26:54:89:49:0f:bc:
9f:6c:d4:c7:26:2d:a2:9f:dd:76:1d:e3:c6:e4:f8:cb:63:fd:
75:6e:fa:9c:75:39:d0:db:a2:cd:a7:dc:cf:7e:26:32:16:fb:
fc:2f:19:ff:3c:62:fa:93:5f:30:23:57:3a:ae:0a:9f:c9:58:
a5:4d:f3:9c:2a:84:ee:1c:a1:8f:39:de:16:60:e1:91:a2:3f:
f3:b8:f1:41:e9:6a:f9:74:4d:26:db:ab:97:8d:0f:7f:3e:e5:
71:fe:d7:45:07:81:10:a2:5c:83:c6:9c:aa:f9:e8:7b:cc:b4:
8e:62:8a:94:b4:8d:b7:aa:8d:2d:fb:26:00:3e:3e:4d:35:8b:
8b:be:1c:3c:c2:10:f5:5b:81:2a:9a:c8:cc:09:7e:29:b6:20:
3c:00:c7:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJfxexSdpYaq51u8EvfmxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYTk0NGVhYTljN2Y2ZDQ1NzQwNmYxNDJjNmUyOGNmNWFj
YzZhYzgwHhcNMjUxMTExMDkwMTIzWhcNMjUxMTEyMDkwMTIzWjAzMTEwLwYDVQQD
Eyg3MzBlOTJmY2NkODEyNGE2NWYwZTg1NWUzZjIxMGJkNzM1NmMwZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm5gfDN2cPiHltwfj/WiKJ0wLU8r
SDJ+LtxbH03ssFy3nXmHIxJr1jkjCncdNQ5C2j7HfRSjvPrPEDHeJgajaDg4alsE
pxau770ciTooNo8oKDgsaxngfWWJu+fjEw+L9eOleV7JYrv7X+yosITwMcH1MLTi
v1uAsUsclubECJW4CYFTNv1CZuTOF9wEV3cF67k5rboAX4iryot0REVbROnCbRQY
LYwESzL8Ew7LjUSq21M3VBipkWGh+7NCgEM4VXdL+3FfqP2qEpi5Kp1jEFPmjd3+
Uy3QJ0LIgrNlSF73eFRNzOyauyYP6zz633zAkhrjQAj/Ha1Ek7LD9o7+AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMOkvzNgSSmXw6FXj8hC9c1bA9+MB8GA1UdIwQY
MBaAFGypROqpx/bUV0BvFCxuKM9azGrIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8wZWRjMGItN2ViYi00NzBhLWIwNTYt
M2RlNDRmYzhiM2I1LzEvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8wZWRjMGItN2ViYi00NzBhLWIwNTYtM2RlNDRmYzhiM2I1
LzEvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIcQ38sX
uTk0fMBfyCQiJ2v/NsHdKohQoSUP6rsvBv9AxUPr77hlrOVj7ZeNR+WcytMqNwid
WvDFo9mQf2U848FmVJjNgpEDjoLG/51A6o2Vtl9Te4JJYu74O1rFqQCwq6FuW/UV
JlSJSQ+8n2zUxyYtop/ddh3jxuT4y2P9dW76nHU50Nuizafcz34mMhb7/C8Z/zxi
+pNfMCNXOq4Kn8lYpU3znCqE7hyhjzneFmDhkaI/87jxQelq+XRNJturl40Pfz7l
cf7XRQeBEKJcg8acqvnoe8y0jmKKlLSNt6qNLfsmAD4+TTWLi74cPMIQ9VuBKprI
zAl+KbYgPADH7g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:45 2025 by rpki-client