
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
File: bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft (raw, json)
Hash identifier: uCK6N1cc07R8sZsigKj/rN+q0MOKvGMRcYOq/ji1rBw=
Subject key identifier: 33:86:17:8F:F4:5C:6A:1E:FB:72:97:FD:B4:AC:63:8D:04:18:0C:16
Authority key identifier: 6E:44:28:F7:F1:7B:19:C1:50:68:CA:B9:39:D3:77:94:0E:8D:4C:70
Certificate issuer: /CN=6e4428f7f17b19c15068cab939d377940e8d4c70
Certificate serial: 0199228D2557F61341EBA8DB192A4C084ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
Manifest number: 0422
Signing time: Sun 07 Sep 2025 05:01:39 +0000
Manifest this update: Sun 07 Sep 2025 05:01:39 +0000
Manifest next update: Mon 08 Sep 2025 05:01:39 +0000
Files and hashes: 1: bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl (hash: BeCMCrxoPLtYn/TmrqQe4pYxqKckK+y74jIePZ+pQA8=)
2: r5LfqFNzBSvkVNYj6vVDPex2eII.roa (hash: zD3Y+yhvhdTCP2LNWWBpR2SBF00RvRC4BFmgCTYqEsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:25:57:f6:13:41:eb:a8:db:19:2a:4c:08:4a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4428f7f17b19c15068cab939d377940e8d4c70
Validity
Not Before: Sep 7 05:01:39 2025 GMT
Not After : Sep 8 05:01:39 2025 GMT
Subject: CN=3386178ff45c6a1efb7297fdb4ac638d04180c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:d4:84:51:96:c5:8a:68:bc:32:a4:13:f4:
3b:95:5f:15:33:4e:60:a0:14:fc:a8:d5:f1:85:f4:
6c:0d:48:87:db:0f:84:c1:8c:d0:3c:73:57:47:c3:
0e:ca:7e:c7:6e:dc:e1:25:55:0d:87:43:31:c5:3b:
a9:38:84:d1:39:4f:d3:8e:82:a0:87:14:e2:f0:82:
f6:7d:21:72:aa:45:17:9a:3d:99:1d:68:54:df:7f:
b0:52:be:62:93:ae:80:29:c8:c1:34:de:2c:5a:f6:
f8:8e:f0:56:c7:38:0e:29:02:45:57:7c:8f:12:72:
7b:1f:d8:7b:90:3d:90:10:93:14:e3:55:f5:25:78:
b4:34:b6:5c:08:d2:49:80:96:7f:e8:1e:ae:33:3c:
2e:9c:8b:45:94:89:c3:06:16:8d:50:1d:92:97:a9:
24:d3:d7:21:65:d7:42:04:4c:d5:40:ea:3f:d1:1f:
6c:fd:85:c5:a2:d4:b3:cc:18:d9:4c:ef:b0:75:46:
55:9b:11:55:74:8a:8a:38:ac:d9:b4:ce:24:c1:33:
46:04:53:02:05:bc:93:93:cd:17:85:a2:ac:62:67:
12:58:b5:b0:c2:9c:3a:70:c7:99:48:c0:94:b0:08:
1c:08:4a:6f:9f:b4:ab:de:d5:3b:1c:84:64:0c:56:
a3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:86:17:8F:F4:5C:6A:1E:FB:72:97:FD:B4:AC:63:8D:04:18:0C:16
X509v3 Authority Key Identifier:
keyid:6E:44:28:F7:F1:7B:19:C1:50:68:CA:B9:39:D3:77:94:0E:8D:4C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6e:fe:c5:e1:11:fa:aa:18:81:aa:c4:b1:07:5d:cc:f5:bb:
8e:55:c5:f6:d2:a9:90:12:49:08:17:0b:12:c8:21:26:be:e8:
eb:09:9c:4a:26:52:67:2c:6d:39:3d:76:16:79:f5:32:3d:7f:
c5:45:e3:8f:c1:d0:59:70:92:a7:ff:30:15:76:40:21:7a:05:
e8:76:b6:f5:d4:62:8c:a3:f5:52:8b:b1:e8:fb:e5:85:ad:25:
f5:4c:c2:0c:09:84:2d:b0:5b:6d:25:4d:a4:17:9a:6a:f6:8a:
19:38:b5:73:a8:a1:4a:07:4e:1d:71:c7:eb:45:23:33:69:05:
d5:64:5d:9d:12:c3:8e:ef:b8:64:1c:f4:5b:e3:22:f7:6c:74:
2f:0f:bd:26:a3:5a:43:4a:3a:43:62:f4:a5:d4:c3:e3:37:de:
3f:96:f1:64:2d:29:78:36:ca:03:ea:08:79:5d:c4:24:cc:e3:
55:04:78:a3:f5:fa:62:02:07:f3:14:13:96:20:e4:7b:ae:e1:
ef:1f:33:26:68:0a:95:bd:ee:65:ab:4f:6b:06:e1:80:f5:48:
06:f5:f4:0d:ff:e1:0e:de:e2:13:b5:4d:1e:0b:a0:87:68:8b:
c6:5f:93:84:71:94:0a:af:fe:83:25:6f:d8:eb:f1:d6:44:87:
e5:d9:df:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijSVX9hNB66jbGSpMCErOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNDQyOGY3ZjE3YjE5YzE1MDY4Y2FiOTM5ZDM3Nzk0MGU4
ZDRjNzAwHhcNMjUwOTA3MDUwMTM5WhcNMjUwOTA4MDUwMTM5WjAzMTEwLwYDVQQD
EygzMzg2MTc4ZmY0NWM2YTFlZmI3Mjk3ZmRiNGFjNjM4ZDA0MTgwYzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPXUhFGWxYpovDKkE/Q7lV8VM05g
oBT8qNXxhfRsDUiH2w+EwYzQPHNXR8MOyn7HbtzhJVUNh0MxxTupOITROU/TjoKg
hxTi8IL2fSFyqkUXmj2ZHWhU33+wUr5ik66AKcjBNN4sWvb4jvBWxzgOKQJFV3yP
EnJ7H9h7kD2QEJMU41X1JXi0NLZcCNJJgJZ/6B6uMzwunItFlInDBhaNUB2Sl6kk
09chZddCBEzVQOo/0R9s/YXFotSzzBjZTO+wdUZVmxFVdIqKOKzZtM4kwTNGBFMC
BbyTk80XhaKsYmcSWLWwwpw6cMeZSMCUsAgcCEpvn7Sr3tU7HIRkDFaj4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOGF4/0XGoe+3KX/bSsY40EGAwWMB8GA1UdIwQY
MBaAFG5EKPfxexnBUGjKuTnTd5QOjUxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmtRbzlfRjdHY0ZRYU1xNU9kTjNsQTZOVEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82Y2Y1ZjQtM2Q2MC00MWQ3LWFlMWEt
Y2JjMzMxYmZjZGIyLzEvYmtRbzlfRjdHY0ZRYU1xNU9kTjNsQTZOVEhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS82Y2Y1ZjQtM2Q2MC00MWQ3LWFlMWEtY2JjMzMxYmZjZGIy
LzEvYmtRbzlfRjdHY0ZRYU1xNU9kTjNsQTZOVEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHW7+xeER
+qoYgarEsQddzPW7jlXF9tKpkBJJCBcLEsghJr7o6wmcSiZSZyxtOT12Fnn1Mj1/
xUXjj8HQWXCSp/8wFXZAIXoF6Ha29dRijKP1Uoux6Pvlha0l9UzCDAmELbBbbSVN
pBeaavaKGTi1c6ihSgdOHXHH60UjM2kF1WRdnRLDju+4ZBz0W+Mi92x0Lw+9JqNa
Q0o6Q2L0pdTD4zfeP5bxZC0peDbKA+oIeV3EJMzjVQR4o/X6YgIH8xQTliDke67h
7x8zJmgKlb3uZatPawbhgPVIBvX0Df/hDt7iE7VNHgugh2iLxl+ThHGUCq/+gyVv
2Ovx1kSH5dnf6A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:33 2025 by rpki-client