Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
File: BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json)
Hash identifier: CKBauH6smNlQqzSwghJsh9Su/y4sOa71n5yog6Qt6Rw=
Subject key identifier: 7B:A2:90:A4:E7:1C:11:57:05:C8:54:88:AA:52:99:DC:CF:F4:91:0E
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 019925FB86129D520B817A6CBCF328A57F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
Manifest number: 015D
Signing time: Sun 07 Sep 2025 21:01:04 +0000
Manifest this update: Sun 07 Sep 2025 21:01:04 +0000
Manifest next update: Mon 08 Sep 2025 21:01:04 +0000
Files and hashes: 1: 57Lfb7ah2xU_M9L9IrSglqivw58.roa (hash: FASmr5J/BhtQxegMIqPfowOKPKTy7iogwvSsCFnhGts=)
2: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: uM3ypc1uBPIoAgevCuFa0PwmtiQLmCCAumpCykpZiSA=)
3: EkCtc_4p6Wq07p2MBIBwRSOGLNs.roa (hash: PmCi1laieXiPQLLV9yPTc6b/nV7EnLvVoi7Z0pQseeI=)
4: Mmrr_XQ_x4BmANs7gCo-KqYTJm4.roa (hash: WNj9dn+QKBH33dHyCXrqaGnhqfpAS/VW6cjp/ENdP7Y=)
5: QiP2e3x_rk7iRNXlx3qpGKC2ZFM.roa (hash: vHegMQJcMMrZ9ipca/2uljwW/rl/U/kHJoVxrAe7em4=)
6: eAr-aAj7uWMuBz66qsxEYuZsKRU.roa (hash: upDaP9emSBMltrR9yq3F/Qw8IFTio9ABAVUioXIvrx4=)
7: jmGzc4FW1R6PAQNH4WxlC9OKi34.roa (hash: q2c49YbHCp9droshhYthNjwqMciPkn/uk7InBbQTyJo=)
8: la9aPzQVD_3MH6vIM8gHmz0Okf8.roa (hash: 2nwinZpGIRLeFQvdzRrYTsyFZ0LA2gopOvT8PpZvG0I=)
9: nT1Muh75nfclTugYJPU4QbmvCas.roa (hash: zNVGu7SWN+42Lm2+XXE7BlInogskRZLn7kb6g01Zn4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:25:fb:86:12:9d:52:0b:81:7a:6c:bc:f3:28:a5:7f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Sep 7 21:01:04 2025 GMT
Not After : Sep 8 21:01:04 2025 GMT
Subject: CN=7ba290a4e71c115705c85488aa5299dccff4910e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:32:3b:f3:a8:8d:a2:83:2c:74:76:40:5d:
6b:20:d9:05:0d:f9:de:43:5e:e9:ea:58:62:da:5c:
ec:bb:88:9d:95:84:00:ed:0d:e0:63:98:7a:94:9a:
11:4d:5c:1d:39:83:22:dd:08:df:25:cf:cf:3c:60:
ff:a8:fe:72:89:ff:ab:0c:c4:e5:38:51:ae:e4:6c:
00:f1:f2:41:0a:ed:66:7d:80:3d:eb:1c:bb:55:4b:
31:a1:8d:e3:a8:d0:e0:d3:af:c5:d3:56:c8:86:f2:
5a:64:eb:e7:e2:2a:cd:a7:0b:22:9c:4e:2c:47:73:
c2:05:8e:ea:da:d5:d0:3c:2b:03:fc:13:f7:d7:77:
13:db:64:9e:6b:32:80:b4:a5:22:ac:42:3a:94:ae:
31:32:49:67:38:70:ed:fc:cb:3c:eb:d4:14:a7:f0:
b7:4e:ad:a2:1c:9e:6d:5c:27:dd:af:46:94:94:94:
46:26:27:dd:41:9d:be:ac:2c:a7:47:f5:a7:7b:5b:
e9:d4:3a:4b:0a:dc:54:89:71:5a:24:3f:2c:38:63:
02:9f:f4:8a:9d:1c:1d:a6:98:e7:df:95:48:9b:83:
72:35:56:a4:9c:85:03:c0:a3:cd:c4:f5:f0:28:89:
3c:fe:de:0f:a2:93:a9:85:b4:06:32:73:5c:d9:57:
48:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A2:90:A4:E7:1C:11:57:05:C8:54:88:AA:52:99:DC:CF:F4:91:0E
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:be:6b:f3:da:47:7f:f6:90:50:ae:b8:99:2a:a0:24:02:6f:
48:7e:39:25:09:f7:53:b3:e3:49:66:42:1c:e1:24:67:46:cc:
a4:53:13:44:7e:8e:0d:1b:2f:ca:4e:53:bd:25:7b:16:86:88:
5d:0b:a9:66:ef:62:1c:78:0f:ad:3b:ee:75:a3:cb:97:ce:c2:
84:b1:48:61:e9:a8:f2:47:d9:cf:65:be:80:34:44:5a:4c:a6:
23:d7:18:33:f5:e5:c1:e3:7e:84:82:91:cb:48:05:5c:e9:5a:
26:50:79:ca:f4:81:7e:1b:6b:18:94:70:84:1a:3b:ca:13:4a:
d9:a6:dc:43:b4:9b:35:c5:7c:c1:4e:17:f7:7a:b6:f2:e2:d8:
19:9c:25:63:ca:03:95:50:1f:a4:fe:ea:78:69:72:8f:6b:70:
4a:79:52:0e:02:80:2a:29:0a:1d:97:c9:0b:2e:56:5d:60:b7:
36:a8:d2:a9:7c:23:ca:db:a0:e3:fc:8e:a1:11:89:a8:38:2a:
93:66:c9:11:b5:04:37:4d:02:fc:b0:66:e2:de:fb:97:34:c3:
d1:74:c0:1e:06:ba:b0:91:2f:3a:e1:75:b1:d5:3b:29:95:4e:
78:26:c4:c2:76:b3:2c:a7:5c:5d:72:54:b8:98:5a:7f:43:1c:
fb:14:5e:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkl+4YSnVILgXpsvPMopX8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZDRkNDlkYTNlMTQ4NTVhN2I4ODM2MDNmZjE0OGMxYmIy
MWY2OTAwHhcNMjUwOTA3MjEwMTA0WhcNMjUwOTA4MjEwMTA0WjAzMTEwLwYDVQQD
Eyg3YmEyOTBhNGU3MWMxMTU3MDVjODU0ODhhYTUyOTlkY2NmZjQ5MTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmUyO/OojaKDLHR2QF1rINkFDfne
Q17p6lhi2lzsu4idlYQA7Q3gY5h6lJoRTVwdOYMi3QjfJc/PPGD/qP5yif+rDMTl
OFGu5GwA8fJBCu1mfYA96xy7VUsxoY3jqNDg06/F01bIhvJaZOvn4irNpwsinE4s
R3PCBY7q2tXQPCsD/BP313cT22SeazKAtKUirEI6lK4xMklnOHDt/Ms869QUp/C3
Tq2iHJ5tXCfdr0aUlJRGJifdQZ2+rCynR/Wne1vp1DpLCtxUiXFaJD8sOGMCn/SK
nRwdppjn35VIm4NyNVaknIUDwKPNxPXwKIk8/t4PopOphbQGMnNc2VdIbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuikKTnHBFXBchUiKpSmdzP9JEOMB8GA1UdIwQY
MBaAFAXU1J2j4UhVp7iDYD/xSMG7IfaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQt
NThmMWNiZjNjYWMzLzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQtNThmMWNiZjNjYWMz
LzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATr5r89pH
f/aQUK64mSqgJAJvSH45JQn3U7PjSWZCHOEkZ0bMpFMTRH6ODRsvyk5TvSV7FoaI
XQupZu9iHHgPrTvudaPLl87ChLFIYemo8kfZz2W+gDREWkymI9cYM/XlweN+hIKR
y0gFXOlaJlB5yvSBfhtrGJRwhBo7yhNK2abcQ7SbNcV8wU4X93q28uLYGZwlY8oD
lVAfpP7qeGlyj2twSnlSDgKAKikKHZfJCy5WXWC3NqjSqXwjytug4/yOoRGJqDgq
k2bJEbUEN00C/LBm4t77lzTD0XTAHga6sJEvOuF1sdU7KZVOeCbEwnazLKdcXXJU
uJhaf0Mc+xRefA==
-----END CERTIFICATE-----
Generated at Mon Sep 8 05:05:15 2025 by rpki-client