Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
File: BADXfvnqDtKVK-L2D6067MLhaKw.mft (raw, json)
Hash identifier: KJzyVetVwM0JmNyqYK+QP7FpdknvztU2EqUmQ4pVovw=
Subject key identifier: 30:C5:4E:3D:03:57:E1:86:B6:EF:D8:88:23:53:FD:84:B8:1D:67:4F
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial: 019A7293C004A73B028FBBCA3585D02042FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
Manifest number: 0A40
Signing time: Tue 11 Nov 2025 11:01:16 +0000
Manifest this update: Tue 11 Nov 2025 11:01:16 +0000
Manifest next update: Wed 12 Nov 2025 11:01:16 +0000
Files and hashes: 1: BADXfvnqDtKVK-L2D6067MLhaKw.crl (hash: CA9OkeO/Tw+4CbKEWfQiaba+Zg0NDjF0591+9+rLgkY=)
2: jgMTcyosgm7FIVLeAPtI1RSjhVU.roa (hash: g2bFBV/1uz4ha4E7siEdgYNeYk8szBDsVWWKSTGKJE4=)
3: pO3Lr4jiN61Kn49lUDVd_S0OVvM.roa (hash: mIykw56twR66Kx0cZsZgXBwa4bIpNsTJWsybM0eym2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:c0:04:a7:3b:02:8f:bb:ca:35:85:d0:20:42:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Validity
Not Before: Nov 11 11:01:16 2025 GMT
Not After : Nov 12 11:01:16 2025 GMT
Subject: CN=30c54e3d0357e186b6efd8882353fd84b81d674f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:1c:ad:01:a3:9b:50:14:c7:73:60:2c:b1:
40:4d:0c:33:41:80:49:47:59:db:75:0e:89:a5:e0:
d5:5e:e4:fe:6a:60:a7:f8:b5:73:ff:c3:d8:13:99:
55:59:4c:12:5b:71:33:5a:3a:0f:1c:ec:3d:2c:1c:
ff:8d:a4:07:6c:7e:ec:a3:18:78:92:42:77:1e:d1:
3c:64:ab:02:62:b6:78:62:9d:d1:32:b8:2b:d8:d1:
91:77:b4:4d:c5:02:74:af:3e:ca:35:ee:df:20:59:
80:ae:2f:4d:a0:2a:b5:d2:00:e9:ea:34:07:5f:b6:
4b:82:02:f6:30:a8:7c:58:2e:cf:43:19:47:d2:bd:
8e:dd:c0:d3:1e:62:13:31:11:a2:53:86:b6:04:16:
f4:04:6b:7e:00:66:c4:ae:f2:12:55:25:a7:51:f0:
6d:2d:23:19:f2:45:89:14:cf:25:0e:f2:72:44:a8:
8f:d5:5c:f1:50:6a:cb:f8:6d:cb:7f:80:be:6b:8f:
6e:4b:80:30:b7:c7:9f:4f:fe:1a:4f:eb:3e:19:50:
33:dd:6d:1c:a6:12:f3:17:44:b9:2b:a6:5a:18:f1:
fa:82:24:ac:a7:04:14:b1:15:c4:f6:ff:f5:a4:f3:
6f:c7:6f:9e:da:95:62:ad:5c:43:9b:e7:82:60:12:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C5:4E:3D:03:57:E1:86:B6:EF:D8:88:23:53:FD:84:B8:1D:67:4F
X509v3 Authority Key Identifier:
keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:29:f6:ac:ed:27:a7:fd:49:99:c2:92:a3:91:e3:7e:4c:cf:
6c:e5:7f:67:82:b0:88:ea:46:e1:d7:3e:bd:b5:be:c5:72:2f:
1c:08:99:37:85:96:d3:62:3d:f5:76:c0:5a:b8:d2:e9:e4:eb:
20:3a:b4:29:a5:21:f5:20:bb:6e:5b:0d:29:42:e0:68:3e:f9:
ab:55:78:90:f3:52:c0:40:af:76:b0:95:53:a9:97:a7:f0:a8:
d4:be:1d:87:63:1d:ca:e7:1e:a4:6b:7e:cd:3e:ba:27:ad:52:
ac:6b:f9:3e:08:93:39:ea:1a:b1:e0:f6:4d:72:67:9d:70:10:
d0:a3:84:46:5f:a8:b6:cd:fa:63:e9:12:34:61:74:9a:ac:0e:
82:a5:d0:aa:cd:88:b3:2f:ba:95:68:12:59:4e:45:84:f0:7e:
7a:c4:ba:82:56:85:4d:70:ce:a8:d9:70:76:cc:83:f1:30:9f:
da:18:87:7a:35:fd:fe:25:92:df:db:03:e9:f3:ff:5b:b4:a4:
ce:fc:c0:2d:18:8f:16:d4:af:e1:b6:d0:18:3d:2b:c6:9d:42:
be:c3:cf:55:54:b3:4c:10:0f:9b:88:81:2e:7a:34:db:3a:41:
b9:39:45:c4:b2:9f:e5:3a:13:50:0d:33:ca:9c:34:eb:da:43:
83:ee:c9:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk8AEpzsCj7vKNYXQIEL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MDBkNzdlZjllYTBlZDI5NTJiZTJmNjBmYWQzYWVjYzJl
MTY4YWMwHhcNMjUxMTExMTEwMTE2WhcNMjUxMTEyMTEwMTE2WjAzMTEwLwYDVQQD
EygzMGM1NGUzZDAzNTdlMTg2YjZlZmQ4ODgyMzUzZmQ4NGI4MWQ2NzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFocrQGjm1AUx3NgLLFATQwzQYBJ
R1nbdQ6JpeDVXuT+amCn+LVz/8PYE5lVWUwSW3EzWjoPHOw9LBz/jaQHbH7soxh4
kkJ3HtE8ZKsCYrZ4Yp3RMrgr2NGRd7RNxQJ0rz7KNe7fIFmAri9NoCq10gDp6jQH
X7ZLggL2MKh8WC7PQxlH0r2O3cDTHmITMRGiU4a2BBb0BGt+AGbErvISVSWnUfBt
LSMZ8kWJFM8lDvJyRKiP1VzxUGrL+G3Lf4C+a49uS4Awt8efT/4aT+s+GVAz3W0c
phLzF0S5K6ZaGPH6giSspwQUsRXE9v/1pPNvx2+e2pVirVxDm+eCYBK8uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDFTj0DV+GGtu/YiCNT/YS4HWdPMB8GA1UdIwQY
MBaAFAQA13756g7SlSvi9g+tOuzC4WisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkFEWGZ2bnFEdEtWSy1MMkQ2MDY3TUxoYUt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy85OGM1YzMtOTkyOC00OTU3LTk0NDgt
YTYwMTM4YzFjMDQ2LzEvQkFEWGZ2bnFEdEtWSy1MMkQ2MDY3TUxoYUt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy85OGM1YzMtOTkyOC00OTU3LTk0NDgtYTYwMTM4YzFjMDQ2
LzEvQkFEWGZ2bnFEdEtWSy1MMkQ2MDY3TUxoYUt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSn2rO0n
p/1JmcKSo5HjfkzPbOV/Z4KwiOpG4dc+vbW+xXIvHAiZN4WW02I99XbAWrjS6eTr
IDq0KaUh9SC7blsNKULgaD75q1V4kPNSwECvdrCVU6mXp/Co1L4dh2MdyucepGt+
zT66J61SrGv5PgiTOeoaseD2TXJnnXAQ0KOERl+ots36Y+kSNGF0mqwOgqXQqs2I
sy+6lWgSWU5FhPB+esS6glaFTXDOqNlwdsyD8TCf2hiHejX9/iWS39sD6fP/W7Sk
zvzALRiPFtSv4bbQGD0rxp1CvsPPVVSzTBAPm4iBLno02zpBuTlFxLKf5ToTUA0z
ypw069pDg+7JhQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:19 2025 by rpki-client