Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
File: BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft (raw, json)
Hash identifier: /9s4HQun/MeInbkCespllYvo6cNaWiMXCqUhQeU92SM=
Subject key identifier: 23:5B:50:C2:EC:4B:C7:5B:2A:D9:20:5F:16:AB:8F:8B:12:23:B7:89
Authority key identifier: 05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
Certificate issuer: /CN=052b864969e9680764899015e163ece77bb4cb76
Certificate serial: 019A730166D6F0E7621229404EB0775F2455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
Manifest number: 0B0B
Signing time: Tue 11 Nov 2025 13:01:02 +0000
Manifest this update: Tue 11 Nov 2025 13:01:02 +0000
Manifest next update: Wed 12 Nov 2025 13:01:02 +0000
Files and hashes: 1: 5fuOdmrlGVquJxF0B-B8z5sBlNI.roa (hash: DT/HXrl83qCIDVdBkYEE4TLDh03lHlOlq+VLneGm87c=)
2: BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl (hash: 1DPgP06wD8gcJrncFLtRY0NdZzuz30Q3ybewLGgMqrk=)
3: Z4nN-Ws_wnObQX43h7KB04MEX0Y.roa (hash: 7C7D7tdUB5rOJYlfI1UfJ/CA32g7kMZ0Kt4eDwWV77Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:66:d6:f0:e7:62:12:29:40:4e:b0:77:5f:24:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b864969e9680764899015e163ece77bb4cb76
Validity
Not Before: Nov 11 13:01:02 2025 GMT
Not After : Nov 12 13:01:02 2025 GMT
Subject: CN=235b50c2ec4bc75b2ad9205f16ab8f8b1223b789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a1:55:f5:7a:2b:46:51:ce:1e:a1:82:05:53:
11:67:09:2e:ca:81:74:44:1c:36:47:08:81:28:2e:
44:c0:cf:48:bd:09:15:d3:2e:89:12:d3:68:05:ba:
1e:44:3c:87:32:d7:9a:7f:15:58:ce:05:5f:01:f6:
af:03:b0:fb:cd:29:83:de:e4:b9:1d:00:39:8c:e7:
2c:2e:19:f0:85:5e:4a:55:73:ef:d3:91:4c:77:71:
c7:5c:56:30:73:b3:c8:d3:01:f9:be:4c:9b:01:26:
c7:d3:4d:74:87:1a:b6:7b:a6:2f:d9:b1:3f:8f:b1:
67:99:99:96:25:bd:5c:d5:e8:b1:f0:83:4b:d1:de:
23:61:88:72:5e:34:0c:1d:63:7b:ae:8a:05:71:f5:
20:b7:de:d7:10:7c:a2:35:88:10:e1:76:df:ed:f0:
f5:ef:7f:6a:62:59:d1:dd:e7:6c:03:4c:df:a6:aa:
9a:ae:5f:7c:84:22:89:61:07:93:80:d2:c0:81:ac:
c1:9c:d0:1e:a2:0d:d6:1a:a7:50:80:08:24:7f:73:
94:03:7f:b5:e2:a0:b7:73:8e:f2:d9:f8:35:11:e6:
53:bd:03:4e:7d:1d:35:dd:3d:76:91:aa:4c:a5:93:
da:15:2b:23:ea:9c:67:c6:3b:77:e3:de:cd:39:72:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5B:50:C2:EC:4B:C7:5B:2A:D9:20:5F:16:AB:8F:8B:12:23:B7:89
X509v3 Authority Key Identifier:
keyid:05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8b:fa:d6:bb:33:42:6c:e2:33:55:c7:22:95:a1:5a:e0:41:
bb:4f:79:c8:22:39:3e:54:4d:24:6c:d0:72:48:f5:46:ac:62:
02:6f:20:64:6c:1b:1d:46:a6:07:94:34:dd:ba:1e:46:2a:47:
07:80:32:d1:ae:0f:e4:13:e0:66:02:0b:ae:6d:1a:a7:66:9a:
f6:32:f7:6c:b5:32:f6:32:b7:9b:18:4a:2c:23:41:4d:b3:c6:
6e:22:07:97:c0:64:5b:68:19:82:5f:8b:91:b8:47:cc:33:ae:
bd:6f:c8:3f:dc:a1:e1:3f:05:e9:9c:49:50:78:c8:da:86:06:
b9:c6:22:36:d0:97:e5:2b:8b:a1:0c:70:67:ed:75:84:f1:91:
84:67:4b:56:76:a5:64:e1:35:78:84:18:d4:7c:40:39:05:5d:
ba:7d:cc:e7:47:b7:54:aa:f1:c6:b9:a4:35:74:69:1c:0d:fc:
9a:4c:3f:f8:1f:eb:0f:c9:d1:06:e9:24:7f:4e:7c:d0:0a:c7:
63:d2:79:7a:f2:2b:44:f4:08:86:fe:0d:4b:d3:8c:81:dc:9d:
10:f3:a7:1e:f9:9d:9a:db:ea:4f:ea:23:ec:ac:a5:a0:15:2b:
28:18:12:ac:87:d4:7a:c1:ee:28:23:21:76:3d:7f:38:82:6e:
46:f1:af:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAWbW8OdiEilATrB3XyRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MmI4NjQ5NjllOTY4MDc2NDg5OTAxNWUxNjNlY2U3N2Ji
NGNiNzYwHhcNMjUxMTExMTMwMTAyWhcNMjUxMTEyMTMwMTAyWjAzMTEwLwYDVQQD
EygyMzViNTBjMmVjNGJjNzViMmFkOTIwNWYxNmFiOGY4YjEyMjNiNzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qFV9XorRlHOHqGCBVMRZwkuyoF0
RBw2RwiBKC5EwM9IvQkV0y6JEtNoBboeRDyHMteafxVYzgVfAfavA7D7zSmD3uS5
HQA5jOcsLhnwhV5KVXPv05FMd3HHXFYwc7PI0wH5vkybASbH0010hxq2e6Yv2bE/
j7FnmZmWJb1c1eix8INL0d4jYYhyXjQMHWN7rooFcfUgt97XEHyiNYgQ4Xbf7fD1
739qYlnR3edsA0zfpqqarl98hCKJYQeTgNLAgazBnNAeog3WGqdQgAgkf3OUA3+1
4qC3c47y2fg1EeZTvQNOfR013T12kapMpZPaFSsj6pxnxjt3497NOXJmeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNbUMLsS8dbKtkgXxarj4sSI7eJMB8GA1UdIwQY
MBaAFAUrhklp6WgHZImQFeFj7Od7tMt2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlN1R1NXbnBhQWRraVpBVjRXUHM1M3UweTNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80NzU5ZjktN2ZkZi00OTE2LWE5OTUt
Njk3MGVjZDlhNjEwLzEvQlN1R1NXbnBhQWRraVpBVjRXUHM1M3UweTNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80NzU5ZjktN2ZkZi00OTE2LWE5OTUtNjk3MGVjZDlhNjEw
LzEvQlN1R1NXbnBhQWRraVpBVjRXUHM1M3UweTNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIv61rsz
QmziM1XHIpWhWuBBu095yCI5PlRNJGzQckj1RqxiAm8gZGwbHUamB5Q03boeRipH
B4Ay0a4P5BPgZgILrm0ap2aa9jL3bLUy9jK3mxhKLCNBTbPGbiIHl8BkW2gZgl+L
kbhHzDOuvW/IP9yh4T8F6ZxJUHjI2oYGucYiNtCX5SuLoQxwZ+11hPGRhGdLVnal
ZOE1eIQY1HxAOQVdun3M50e3VKrxxrmkNXRpHA38mkw/+B/rD8nRBukkf0580ArH
Y9J5evIrRPQIhv4NS9OMgdydEPOnHvmdmtvqT+oj7KyloBUrKBgSrIfUesHuKCMh
dj1/OIJuRvGvNg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:48 2025 by rpki-client