Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
File: BXEVMhUM58l6fqSMDXekLm8NX8M.mft (raw, json)
Hash identifier: Uptmcwqej3bBT87NATIOnEUvEKvdhbIUozzPowYedu4=
Subject key identifier: 63:D3:C1:39:0E:64:ED:1B:AC:F5:20:AC:DE:DE:94:01:4F:C0:BE:5B
Authority key identifier: 05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
Certificate issuer: /CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Certificate serial: 019A7149E6BA00D9BA213789BD916C9D16BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
Manifest number: 07A6
Signing time: Tue 11 Nov 2025 05:00:59 +0000
Manifest this update: Tue 11 Nov 2025 05:00:59 +0000
Manifest next update: Wed 12 Nov 2025 05:00:59 +0000
Files and hashes: 1: BXEVMhUM58l6fqSMDXekLm8NX8M.crl (hash: Q/mF+eJECnlHuM+MjCDB7CDmxhvIbUFY2o8hLglWQ5w=)
2: WQBZ-f5dGsC1cL_jEBOvsIELp80.roa (hash: R9ehHlzYxXlTfaqJUkztXePFQ64EbowiDEZr/EhM2e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e6:ba:00:d9:ba:21:37:89:bd:91:6c:9d:16:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Validity
Not Before: Nov 11 05:00:59 2025 GMT
Not After : Nov 12 05:00:59 2025 GMT
Subject: CN=63d3c1390e64ed1bacf520acdede94014fc0be5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:73:5e:7a:23:70:aa:87:d2:dc:96:0a:67:9d:
53:3c:88:44:3e:3c:bf:a4:4a:bb:c5:5c:dd:ae:db:
0f:f9:cd:71:16:e5:e8:09:c2:f7:95:aa:fc:48:32:
67:6f:2b:df:b0:5b:19:68:e7:4b:54:58:ae:55:bc:
c7:d4:df:bc:4a:85:7e:4e:c9:b7:60:30:90:54:8a:
d6:cc:14:57:56:f5:ae:10:5e:5a:b3:19:57:b2:43:
56:be:64:b0:e4:7d:03:55:5a:d1:2a:bd:8b:cf:0e:
df:c2:57:88:08:e0:8a:bd:3f:f4:4f:e5:c0:22:06:
7e:b7:98:24:c2:01:30:16:71:67:29:c6:df:36:d8:
d7:d3:70:5e:74:ed:d1:f8:1d:f1:19:72:31:25:81:
76:7a:97:3d:59:98:2f:4f:9d:25:33:26:95:ce:39:
45:23:af:b5:9c:ea:2a:9f:15:e4:fa:c1:19:81:92:
7f:fa:2b:fc:2f:c6:f0:e8:ef:48:43:4b:75:dc:25:
4b:02:1d:7d:c1:08:44:65:bf:23:26:84:9c:a8:78:
27:e6:27:74:e8:7d:d5:69:ef:df:3d:ab:5c:02:6c:
e5:41:fc:ce:34:5f:86:44:d6:53:a1:7f:99:9a:10:
8c:0b:04:fa:ce:55:a5:b1:1c:d2:83:d4:df:da:e0:
f1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D3:C1:39:0E:64:ED:1B:AC:F5:20:AC:DE:DE:94:01:4F:C0:BE:5B
X509v3 Authority Key Identifier:
keyid:05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:09:05:2d:61:ba:92:44:ce:da:46:d2:81:1c:94:a2:e1:4e:
85:68:50:b8:35:92:4e:26:3e:04:dc:4a:b4:3e:ad:cb:84:05:
39:53:8f:3d:d5:3b:15:79:45:2e:50:4e:a3:0e:81:e6:76:47:
85:ad:a5:b6:6d:c5:2f:c6:64:08:b5:ed:ef:f8:e6:d8:18:3c:
b5:b4:c3:dd:83:8b:fb:b8:5e:f7:0c:e8:b5:f5:aa:35:59:09:
c5:a3:1e:ea:52:5e:1d:4d:17:02:ea:05:63:23:38:09:c9:55:
9b:87:f4:be:4b:a4:51:0b:a9:fe:4a:f8:6d:92:65:59:72:c7:
d3:dd:6a:89:15:37:36:96:95:5d:4f:b5:3b:d9:c7:dc:3b:e5:
a9:a1:65:48:7d:1f:af:59:1b:19:9f:e3:c7:bf:a8:0c:81:b7:
60:76:a1:0c:0d:f7:f3:0e:15:b0:09:db:1e:41:53:33:b9:3a:
32:36:3b:c6:8c:9e:c7:dd:04:08:76:6a:bf:68:e1:25:63:fa:
68:be:49:4a:86:6a:7e:9f:9e:cd:32:86:5e:cc:da:ed:36:52:
e9:89:ab:4d:f8:5d:62:e5:97:18:e5:98:85:04:6d:3f:b3:6f:
fd:b7:bd:ab:02:f9:e7:66:54:1c:84:fe:6a:59:d6:7d:fa:8c:
1c:24:4d:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSea6ANm6ITeJvZFsnRa+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzExNTMyMTUwY2U3Yzk3YTdlYTQ4YzBkNzdhNDJlNmYw
ZDVmYzMwHhcNMjUxMTExMDUwMDU5WhcNMjUxMTEyMDUwMDU5WjAzMTEwLwYDVQQD
Eyg2M2QzYzEzOTBlNjRlZDFiYWNmNTIwYWNkZWRlOTQwMTRmYzBiZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3NeeiNwqofS3JYKZ51TPIhEPjy/
pEq7xVzdrtsP+c1xFuXoCcL3lar8SDJnbyvfsFsZaOdLVFiuVbzH1N+8SoV+Tsm3
YDCQVIrWzBRXVvWuEF5asxlXskNWvmSw5H0DVVrRKr2Lzw7fwleICOCKvT/0T+XA
IgZ+t5gkwgEwFnFnKcbfNtjX03BedO3R+B3xGXIxJYF2epc9WZgvT50lMyaVzjlF
I6+1nOoqnxXk+sEZgZJ/+iv8L8bw6O9IQ0t13CVLAh19wQhEZb8jJoScqHgn5id0
6H3Vae/fPatcAmzlQfzONF+GRNZToX+ZmhCMCwT6zlWlsRzSg9Tf2uDxRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPTwTkOZO0brPUgrN7elAFPwL5bMB8GA1UdIwQY
MBaAFAVxFTIVDOfJen6kjA13pC5vDV/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80ZDg5ZDYtNDQ2NS00MzIxLTkyODIt
N2JjZmQ2NGUwMjg4LzEvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80ZDg5ZDYtNDQ2NS00MzIxLTkyODItN2JjZmQ2NGUwMjg4
LzEvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAogkFLWG6
kkTO2kbSgRyUouFOhWhQuDWSTiY+BNxKtD6ty4QFOVOPPdU7FXlFLlBOow6B5nZH
ha2ltm3FL8ZkCLXt7/jm2Bg8tbTD3YOL+7he9wzotfWqNVkJxaMe6lJeHU0XAuoF
YyM4CclVm4f0vkukUQup/kr4bZJlWXLH091qiRU3NpaVXU+1O9nH3DvlqaFlSH0f
r1kbGZ/jx7+oDIG3YHahDA338w4VsAnbHkFTM7k6MjY7xoyex90ECHZqv2jhJWP6
aL5JSoZqfp+ezTKGXsza7TZS6YmrTfhdYuWXGOWYhQRtP7Nv/be9qwL552ZUHIT+
alnWffqMHCRN9Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:57 2025 by rpki-client