Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
File: BKSudHHI82IdUyVtdfEQt0iZeJg.mft (raw, json)
Hash identifier: uHflssJJPDk8VTqIMTrlnycPu7UBkHcUTIKtHWokNSo=
Subject key identifier: F5:45:01:75:D7:20:14:97:53:02:C3:E2:E0:96:D5:9C:1D:22:7F:35
Authority key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
Certificate issuer: /CN=04a4ae7471c8f3621d53256d75f110b748997898
Certificate serial: 019A71B938FB4F15E87EE41497F0F23B20C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:35 +0000
Manifest this update: Tue 11 Nov 2025 07:02:35 +0000
Manifest next update: Wed 12 Nov 2025 07:02:35 +0000
Files and hashes: 1: BKSudHHI82IdUyVtdfEQt0iZeJg.crl (hash: e2NWNFVYZZxqmubYTeuNsH5TULEohN1PazK8KkaHX3g=)
2: N70Yb5HDAX3BIJy8UjKLLCNEous.roa (hash: qShtm2mEB1c+KG+KsBd4fYZEqu1nYfeAzh76OdmZs60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:38:fb:4f:15:e8:7e:e4:14:97:f0:f2:3b:20:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a4ae7471c8f3621d53256d75f110b748997898
Validity
Not Before: Nov 11 07:02:35 2025 GMT
Not After : Nov 12 07:02:35 2025 GMT
Subject: CN=f5450175d72014975302c3e2e096d59c1d227f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:e6:b6:c9:95:82:80:4b:9f:4b:a7:07:1c:
be:56:72:da:57:b5:c9:12:82:c3:c1:30:f3:59:7a:
a8:eb:be:d0:d4:62:c0:34:f7:5d:bb:7d:a1:10:cf:
51:cb:bc:fd:b0:26:a4:d4:d9:3c:35:85:a3:53:f2:
68:5b:f2:4a:4c:51:90:a8:de:a3:36:ce:f9:10:41:
2e:d7:23:71:f2:95:80:fd:cc:d5:2f:aa:91:c3:c2:
c9:0a:be:95:58:2d:70:ad:88:c2:49:a3:db:a6:91:
bb:d3:cb:24:12:67:bf:16:42:03:dd:95:42:db:c1:
84:89:42:00:08:aa:18:29:a1:1d:ed:22:20:ec:e0:
d5:4a:49:f7:d8:70:73:bc:3e:33:b8:03:6d:b5:24:
bc:a7:09:7d:55:53:78:ab:78:55:46:57:5d:14:4d:
d4:9e:19:8f:ac:74:f8:be:89:83:c0:98:7c:97:73:
8a:d9:84:f2:05:98:a2:fc:35:50:5b:30:a4:9f:81:
38:e4:16:cc:6c:50:57:c9:cf:77:10:5d:a5:4e:c3:
af:37:33:0b:96:43:56:16:50:c7:d1:b8:2c:e6:8d:
fc:3f:94:92:4c:f8:bb:d1:f3:42:13:8d:0e:19:73:
2a:5e:5d:5f:6a:51:2e:b5:68:e1:83:80:7f:a6:a2:
d8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:45:01:75:D7:20:14:97:53:02:C3:E2:E0:96:D5:9C:1D:22:7F:35
X509v3 Authority Key Identifier:
keyid:04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:45:dc:7d:c4:5a:71:0a:70:57:1d:37:df:a0:00:55:e6:60:
c9:66:26:b1:65:0b:7c:7e:80:69:5e:dd:e1:53:36:20:3f:ee:
a0:0b:b6:5f:a5:b9:a4:f9:28:73:59:fe:dc:4b:30:a5:5d:6b:
93:73:aa:ff:0b:85:4d:8f:35:b0:4d:98:dd:b4:3c:c6:9a:77:
a7:d1:b8:f4:96:bb:eb:02:d5:cb:cf:d6:b2:55:a2:dd:11:77:
c9:73:2a:6c:02:26:15:7a:67:5e:64:a1:ec:93:83:33:8b:6b:
e5:c5:b4:3c:60:5f:3a:f8:05:88:50:3e:a6:4d:4b:c8:47:4e:
ea:8b:10:76:87:ce:b4:6e:61:94:a0:d4:6a:04:c4:62:9c:c8:
5c:b9:49:32:9f:79:ef:6d:97:81:de:4f:c9:7a:63:04:02:43:
06:f1:7c:d1:74:05:9d:ea:c3:57:3b:7e:d4:c6:60:89:45:9a:
43:3b:13:07:67:a2:34:b2:dd:7e:b0:ef:5b:6d:d9:d8:e9:5a:
1b:44:38:0b:4e:cc:33:7a:7d:48:0c:9b:96:1e:aa:e5:63:de:
cd:a1:6a:4a:dc:81:39:79:f0:7f:c6:64:85:98:fc:4c:e3:70:
c9:cc:d2:5b:41:de:19:60:36:23:93:15:35:12:23:6c:98:e6:
47:d6:3d:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuTj7TxXofuQUl/DyOyDJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTRhZTc0NzFjOGYzNjIxZDUzMjU2ZDc1ZjExMGI3NDg5
OTc4OTgwHhcNMjUxMTExMDcwMjM1WhcNMjUxMTEyMDcwMjM1WjAzMTEwLwYDVQQD
EyhmNTQ1MDE3NWQ3MjAxNDk3NTMwMmMzZTJlMDk2ZDU5YzFkMjI3ZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxljmtsmVgoBLn0unBxy+VnLaV7XJ
EoLDwTDzWXqo677Q1GLANPddu32hEM9Ry7z9sCak1Nk8NYWjU/JoW/JKTFGQqN6j
Ns75EEEu1yNx8pWA/czVL6qRw8LJCr6VWC1wrYjCSaPbppG708skEme/FkID3ZVC
28GEiUIACKoYKaEd7SIg7ODVSkn32HBzvD4zuANttSS8pwl9VVN4q3hVRlddFE3U
nhmPrHT4vomDwJh8l3OK2YTyBZii/DVQWzCkn4E45BbMbFBXyc93EF2lTsOvNzML
lkNWFlDH0bgs5o38P5SSTPi70fNCE40OGXMqXl1falEutWjhg4B/pqLY3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVFAXXXIBSXUwLD4uCW1ZwdIn81MB8GA1UdIwQY
MBaAFASkrnRxyPNiHVMlbXXxELdImXiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mM2JhNWUtODk4Yy00ZmU5LWJkODgt
M2MzNjczZDQ0OTA1LzEvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mM2JhNWUtODk4Yy00ZmU5LWJkODgtM2MzNjczZDQ0OTA1
LzEvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0XcfcRa
cQpwVx0336AAVeZgyWYmsWULfH6AaV7d4VM2ID/uoAu2X6W5pPkoc1n+3EswpV1r
k3Oq/wuFTY81sE2Y3bQ8xpp3p9G49Ja76wLVy8/WslWi3RF3yXMqbAImFXpnXmSh
7JODM4tr5cW0PGBfOvgFiFA+pk1LyEdO6osQdofOtG5hlKDUagTEYpzIXLlJMp95
722Xgd5PyXpjBAJDBvF80XQFnerDVzt+1MZgiUWaQzsTB2eiNLLdfrDvW23Z2Ola
G0Q4C07MM3p9SAyblh6q5WPezaFqStyBOXnwf8ZkhZj8TONwyczSW0HeGWA2I5MV
NRIjbJjmR9Y9pA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:09 2025 by rpki-client