Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
File: bxOPLgM_lCu5TnMf9FJEjGgCroI.mft (raw, json)
Hash identifier: JTPW8di0in/X7mza1J6UIzsFQjeMKeHhXOdaXTMIiPg=
Subject key identifier: 63:EC:A9:9E:87:BC:B8:AE:A2:04:73:1B:CF:1F:48:DE:75:96:F8:E6
Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
Certificate issuer: /CN=6f138f2e033f942bb94e731ff452448c6802ae82
Certificate serial: 019A7113756DAB4C3A5F84E3D62707D7371F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:01:31 +0000
Manifest this update: Tue 11 Nov 2025 04:01:31 +0000
Manifest next update: Wed 12 Nov 2025 04:01:31 +0000
Files and hashes: 1: 2cCUJtYhVepSHvUymWA4difKbm4.roa (hash: 2GZetLN+ABzzZiJpVfwp76NOZrbjBE0afEtmIXZxkxM=)
2: bxOPLgM_lCu5TnMf9FJEjGgCroI.crl (hash: +L4TwivcPXFBu2q4nllIECDKURJDshIjgYQGs3BYIZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:75:6d:ab:4c:3a:5f:84:e3:d6:27:07:d7:37:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82
Validity
Not Before: Nov 11 04:01:31 2025 GMT
Not After : Nov 12 04:01:31 2025 GMT
Subject: CN=63eca99e87bcb8aea204731bcf1f48de7596f8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:1c:99:d2:51:6a:0d:34:2a:14:2e:f9:7c:
26:64:17:8d:78:9c:c9:f8:89:d2:82:28:d0:21:9f:
6f:55:e3:6c:b0:66:51:8b:81:02:e6:2d:35:56:02:
b6:5b:6c:e9:3d:12:de:db:8e:dc:1a:dc:c7:f1:38:
9b:81:99:db:5e:c3:b1:d0:80:27:36:23:0d:32:7b:
06:f2:44:de:5e:85:3c:73:cd:84:f2:39:4c:08:0e:
e3:7c:45:ce:f6:84:d8:c2:f4:22:83:7d:04:b5:8b:
f3:84:86:de:21:8d:1a:93:b6:07:d5:77:4b:55:42:
36:4b:45:f2:fd:fe:c9:b5:bb:89:94:34:53:11:65:
12:3c:12:71:ad:c2:08:16:46:b6:66:71:2a:53:ad:
d5:63:d2:d7:a7:89:69:de:a0:d2:de:3c:9e:54:45:
8c:af:76:3a:ea:22:6c:db:69:66:64:8c:6e:19:6a:
12:c0:b2:cd:54:b4:46:9e:a7:bc:b1:6c:03:2f:8b:
c8:2b:e3:c7:ec:e5:d6:8b:96:5c:9d:a4:df:e2:c3:
5b:9f:1c:27:f8:7a:77:6d:e8:ce:d3:1f:bc:75:79:
07:80:53:6b:1c:e9:d0:91:e2:60:36:9d:7a:13:f3:
3b:c6:9e:3d:18:57:c3:50:48:46:b1:a8:d0:6c:34:
82:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EC:A9:9E:87:BC:B8:AE:A2:04:73:1B:CF:1F:48:DE:75:96:F8:E6
X509v3 Authority Key Identifier:
keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fe:c7:59:f4:d3:b6:a5:73:22:b2:6d:e6:b7:e8:87:15:16:
14:ab:90:3a:58:9d:fd:c0:f8:c2:3f:cf:f0:0f:af:74:3a:66:
5e:89:7c:4a:d7:1e:ea:29:e5:e5:7b:ac:6b:02:86:c5:67:f1:
b2:e3:5f:1f:8a:3c:27:39:6e:4d:f5:a3:22:28:c9:94:38:e9:
28:58:93:cb:00:ce:d1:a3:68:68:d6:39:f7:99:79:e9:7f:9e:
78:6e:77:6c:7a:e8:3d:a9:cf:9d:80:b1:ed:c5:51:51:f9:9c:
ba:7b:e0:0b:e5:00:3d:78:34:5b:44:18:00:69:36:37:02:67:
c1:1d:4a:b1:72:14:84:ab:2f:77:ba:34:d5:3f:db:9c:c5:34:
e4:37:df:3c:e2:12:1d:92:b2:99:df:c8:99:b0:80:8b:3a:c8:
92:fc:03:86:04:fa:e7:78:30:bd:1f:0e:22:04:36:eb:51:c3:
6f:c9:49:39:51:5e:91:fc:28:a8:30:45:f7:c0:44:cf:71:31:
8d:c2:d2:6a:2a:1f:1a:8f:9a:b2:50:21:ab:d2:c3:99:ba:ef:
96:07:2f:e8:8c:d5:8d:c0:19:ed:a5:0b:c1:cd:98:cf:4f:0c:
ac:6f:e3:5a:f6:c0:3b:69:cc:ae:93:28:7f:59:2c:ee:87:8a:
ea:ec:4e:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE3Vtq0w6X4Tj1icH1zcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMTM4ZjJlMDMzZjk0MmJiOTRlNzMxZmY0NTI0NDhjNjgw
MmFlODIwHhcNMjUxMTExMDQwMTMxWhcNMjUxMTEyMDQwMTMxWjAzMTEwLwYDVQQD
Eyg2M2VjYTk5ZTg3YmNiOGFlYTIwNDczMWJjZjFmNDhkZTc1OTZmOGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCIcmdJRag00KhQu+XwmZBeNeJzJ
+InSgijQIZ9vVeNssGZRi4EC5i01VgK2W2zpPRLe247cGtzH8TibgZnbXsOx0IAn
NiMNMnsG8kTeXoU8c82E8jlMCA7jfEXO9oTYwvQig30EtYvzhIbeIY0ak7YH1XdL
VUI2S0Xy/f7JtbuJlDRTEWUSPBJxrcIIFka2ZnEqU63VY9LXp4lp3qDS3jyeVEWM
r3Y66iJs22lmZIxuGWoSwLLNVLRGnqe8sWwDL4vIK+PH7OXWi5ZcnaTf4sNbnxwn
+Hp3bejO0x+8dXkHgFNrHOnQkeJgNp16E/M7xp49GFfDUEhGsajQbDSCfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPsqZ6HvLiuogRzG88fSN51lvjmMB8GA1UdIwQY
MBaAFG8Tjy4DP5QruU5zH/RSRIxoAq6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hYmI4ZmMtYTgyYi00MTU3LWIyOGUt
ZTEzOWZiYzI3OWI5LzEvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9hYmI4ZmMtYTgyYi00MTU3LWIyOGUtZTEzOWZiYzI3OWI5
LzEvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjv7HWfTT
tqVzIrJt5rfohxUWFKuQOlid/cD4wj/P8A+vdDpmXol8Stce6inl5XusawKGxWfx
suNfH4o8JzluTfWjIijJlDjpKFiTywDO0aNoaNY595l56X+eeG53bHroPanPnYCx
7cVRUfmcunvgC+UAPXg0W0QYAGk2NwJnwR1KsXIUhKsvd7o01T/bnMU05DffPOIS
HZKymd/ImbCAizrIkvwDhgT653gwvR8OIgQ261HDb8lJOVFekfwoqDBF98BEz3Ex
jcLSaiofGo+aslAhq9LDmbrvlgcv6IzVjcAZ7aULwc2Yz08MrG/jWvbAO2nMrpMo
f1ks7oeK6uxO/w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:18 2025 by rpki-client