Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
File: BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft (raw, json)
Hash identifier: ihOiIRY9Rgb8ZQJTefIbydnkIhxxengjSye8SkZj4Zk=
Subject key identifier: 72:6B:8F:B4:A7:FA:66:1B:F9:84:0D:C3:B3:D3:2F:9C:11:21:57:F6
Authority key identifier: 04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
Certificate issuer: /CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Certificate serial: 019A7149F394D300F7B1B80E0AB4F8D4C704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
Manifest number: F3
Signing time: Tue 11 Nov 2025 05:01:03 +0000
Manifest this update: Tue 11 Nov 2025 05:01:03 +0000
Manifest next update: Wed 12 Nov 2025 05:01:03 +0000
Files and hashes: 1: BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl (hash: ETsdXbAihAMsaKxtM5M9qkxJaDnsvJ5jGcxQoOuULg8=)
2: SKma3lJH_nMIY0Jk_dGXIETBqnk.roa (hash: UvrsRqXxi0T7Fu2Z9LEfglN30LChbDf1sZ63pwOaTP8=)
3: YDrJUaM078njYLujsFOLBuJi-Ak.roa (hash: ynnnM4zonEkcKprGHH1eGlvVH9BFKbrOufYcESLz12A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f3:94:d3:00:f7:b1:b8:0e:0a:b4:f8:d4:c7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Validity
Not Before: Nov 11 05:01:03 2025 GMT
Not After : Nov 12 05:01:03 2025 GMT
Subject: CN=726b8fb4a7fa661bf9840dc3b3d32f9c112157f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6e:64:8d:d7:0e:58:bd:35:5c:09:ad:32:b3:
a3:b9:fe:a3:2b:59:33:10:60:2c:78:31:dc:38:bd:
6b:8e:5b:69:81:2b:d0:a8:78:50:79:b2:f3:33:48:
46:7e:e7:93:5c:90:d7:8e:49:f0:0a:8b:09:0d:7e:
5d:56:eb:10:7e:e4:56:a4:c4:f3:8e:c1:d6:31:84:
af:93:2b:4a:ba:3c:41:a4:cc:73:0b:1c:50:42:3f:
ab:51:25:c9:b2:1b:71:64:c1:db:45:49:e7:ed:c3:
20:63:2e:e0:90:51:ca:b6:24:31:a1:67:d4:a5:34:
9a:6c:35:c7:0e:c7:d6:c7:f6:cb:af:b7:7d:7c:ef:
67:4d:58:ea:d5:21:a1:75:94:44:e1:f0:2b:91:c6:
16:9d:37:0a:01:63:1a:36:04:67:88:50:8c:24:e7:
81:11:38:91:60:e3:60:08:87:d1:40:7f:67:8e:3d:
15:4e:f8:fd:1d:37:2d:55:c9:cc:3e:0c:32:c3:6e:
a3:f1:4a:51:72:d8:60:8d:d8:1d:d2:94:6d:c4:95:
dd:b1:18:68:e4:53:76:84:d4:d3:86:9d:55:df:77:
9e:c2:c6:a8:21:c4:76:36:5c:d9:e2:c3:90:97:7b:
fd:5a:b0:03:9c:79:e2:d1:28:c5:5b:a2:cb:d1:c8:
28:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6B:8F:B4:A7:FA:66:1B:F9:84:0D:C3:B3:D3:2F:9C:11:21:57:F6
X509v3 Authority Key Identifier:
keyid:04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:6e:c2:b6:95:fc:6f:fc:ac:8d:57:6f:41:cc:99:4f:e5:cf:
27:91:db:aa:78:c8:4a:3e:fc:7c:ec:56:4d:5b:e0:a5:41:2a:
83:b7:d9:17:71:00:aa:10:d4:a2:27:53:3f:69:ee:d5:7d:f8:
19:75:aa:ac:d8:27:ee:8b:0e:12:7c:fe:a3:ba:43:69:40:34:
55:eb:fc:a5:de:56:92:21:85:7a:3f:76:8b:c4:d4:28:8c:75:
b7:6c:99:9a:83:36:30:eb:36:bf:c2:eb:de:8f:ef:c3:eb:a0:
8d:02:61:79:7e:7f:1b:aa:55:da:3c:00:67:78:75:57:2e:8c:
a4:32:dd:4b:f5:b1:45:c4:9b:5b:ac:a2:a5:60:6e:58:1e:4c:
2f:e1:a6:5b:92:c4:ed:bb:08:de:70:aa:90:cb:4c:9b:30:79:
ed:53:95:38:c5:5b:e0:92:a1:6b:ec:7b:fb:0a:ef:92:e7:ce:
c4:90:7c:c9:fd:c9:91:0d:0a:c2:ec:3d:fb:a8:e9:d4:ec:e9:
ca:d3:b9:51:be:c3:cf:da:be:f9:f7:c2:e6:19:6a:8f:c7:c1:
96:a3:6b:d3:ad:0b:89:4a:0d:c8:1b:a3:88:6c:30:69:5b:97:
a4:b8:01:e0:c0:19:f7:c3:f3:f2:e1:59:cf:96:94:51:d0:a1:
98:9f:e4:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSfOU0wD3sbgOCrT41McEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NzE4ODE3NzhhMWUxMmY2ZDk3YzUyODhlZmQ0Y2I5NTYz
ZDFkNDkwHhcNMjUxMTExMDUwMTAzWhcNMjUxMTEyMDUwMTAzWjAzMTEwLwYDVQQD
Eyg3MjZiOGZiNGE3ZmE2NjFiZjk4NDBkYzNiM2QzMmY5YzExMjE1N2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4m5kjdcOWL01XAmtMrOjuf6jK1kz
EGAseDHcOL1rjltpgSvQqHhQebLzM0hGfueTXJDXjknwCosJDX5dVusQfuRWpMTz
jsHWMYSvkytKujxBpMxzCxxQQj+rUSXJshtxZMHbRUnn7cMgYy7gkFHKtiQxoWfU
pTSabDXHDsfWx/bLr7d9fO9nTVjq1SGhdZRE4fArkcYWnTcKAWMaNgRniFCMJOeB
ETiRYONgCIfRQH9njj0VTvj9HTctVcnMPgwyw26j8UpRcthgjdgd0pRtxJXdsRho
5FN2hNTThp1V33eewsaoIcR2NlzZ4sOQl3v9WrADnHni0SjFW6LL0cgo0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJrj7Sn+mYb+YQNw7PTL5wRIVf2MB8GA1UdIwQY
MBaAFARxiBd4oeEvbZfFKI79TLlWPR1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkhHSUYzaWg0Uzl0bDhVb2p2MU11Vlk5SFVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YThjZmEtNTQyYi00MGIyLThhMDgt
NDJlYTQ3YjEyNTM3LzEvQkhHSUYzaWg0Uzl0bDhVb2p2MU11Vlk5SFVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80YThjZmEtNTQyYi00MGIyLThhMDgtNDJlYTQ3YjEyNTM3
LzEvQkhHSUYzaWg0Uzl0bDhVb2p2MU11Vlk5SFVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs27CtpX8
b/ysjVdvQcyZT+XPJ5HbqnjISj78fOxWTVvgpUEqg7fZF3EAqhDUoidTP2nu1X34
GXWqrNgn7osOEnz+o7pDaUA0Vev8pd5WkiGFej92i8TUKIx1t2yZmoM2MOs2v8Lr
3o/vw+ugjQJheX5/G6pV2jwAZ3h1Vy6MpDLdS/WxRcSbW6yipWBuWB5ML+GmW5LE
7bsI3nCqkMtMmzB57VOVOMVb4JKha+x7+wrvkufOxJB8yf3JkQ0Kwuw9+6jp1Ozp
ytO5Ub7Dz9q++ffC5hlqj8fBlqNr060LiUoNyBujiGwwaVuXpLgB4MAZ98Pz8uFZ
z5aUUdChmJ/kIg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:04 2025 by rpki-client