Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
File: bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft (raw, json)
Hash identifier: Hezxb0x6v2ftzF4rWvSklOTiQYUB8fmzssa4xc025oE=
Subject key identifier: D0:BD:62:94:51:CF:13:5E:62:18:F7:B6:99:AF:0A:DC:22:58:F7:40
Authority key identifier: 6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
Certificate issuer: /CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Certificate serial: 019A23D34844F0C83F771DC75E4FDF43EE32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
Manifest number: 16FB
Signing time: Mon 27 Oct 2025 04:00:40 +0000
Manifest this update: Mon 27 Oct 2025 04:00:40 +0000
Manifest next update: Tue 28 Oct 2025 04:00:40 +0000
Files and hashes: 1: YcO7jD5AOjhycshFGG-dIbqWcW4.roa (hash: BRqKFwkTw48defv1cFItIn/eg55FRfTYZOTRhHFmj2Q=)
2: bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl (hash: zeLkKyfcf+b+KQ/jrDi1xjDF6badukUYoAvKn/pfyTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:48:44:f0:c8:3f:77:1d:c7:5e:4f:df:43:ee:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Validity
Not Before: Oct 27 04:00:40 2025 GMT
Not After : Oct 28 04:00:40 2025 GMT
Subject: CN=d0bd629451cf135e6218f7b699af0adc2258f740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:9c:76:4b:5e:15:47:4c:b3:d4:42:b4:01:
78:5e:12:91:41:43:80:a6:fc:d7:71:ba:49:21:9a:
6a:0c:ec:4e:a5:39:59:75:c7:64:f4:0c:79:40:ab:
28:e1:84:ca:6a:09:90:55:42:41:12:26:50:66:07:
c1:c5:43:0f:05:7c:24:ac:de:b7:10:0c:33:8b:34:
70:18:bd:05:45:89:7b:4c:9d:3f:08:f7:37:9d:df:
73:fc:a0:8a:e2:46:a8:7f:80:26:53:b0:47:28:71:
83:74:c3:e6:18:75:f8:1c:e2:97:9e:a9:73:88:9a:
74:5f:e1:50:98:ec:20:8c:a5:42:cd:b4:df:cb:89:
92:15:fc:11:2a:cd:75:59:74:2e:5d:26:1f:4a:7c:
47:a9:12:39:83:3a:71:90:26:d5:8f:19:55:76:e8:
7f:35:87:c4:6a:48:8d:bd:49:13:a2:71:7c:16:60:
75:ab:03:aa:83:c7:da:35:8f:5b:dd:30:98:d3:64:
43:69:3b:28:74:ef:de:1e:03:a0:ae:eb:11:16:09:
0a:80:e6:bf:d9:63:0c:ab:42:9d:1a:f2:68:9b:c7:
51:4b:c4:e8:47:1b:ac:1d:ef:20:24:01:ae:64:01:
31:7c:45:6d:4e:8a:d9:fa:be:98:e4:f2:59:0c:9f:
ce:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BD:62:94:51:CF:13:5E:62:18:F7:B6:99:AF:0A:DC:22:58:F7:40
X509v3 Authority Key Identifier:
keyid:6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:08:78:fe:93:e4:55:30:8f:0d:24:54:9c:72:d7:06:23:4f:
a9:f5:e4:ae:1b:2d:4c:f4:9d:cc:4a:27:03:11:c3:e4:81:3b:
71:48:81:f2:aa:19:af:f0:82:a3:b6:11:35:82:d4:32:1b:4f:
ff:77:2c:55:60:49:c9:c7:c4:32:cd:99:aa:e4:2f:25:96:6c:
82:75:5f:a5:32:5f:a1:4f:83:3c:e8:e3:45:24:40:e1:0e:7c:
de:60:53:3f:38:0c:1f:9b:0b:fc:5c:0d:e8:2d:3d:ce:4e:5b:
b1:23:77:1d:a3:34:1a:36:3f:d4:bb:1d:87:cb:31:67:74:05:
0d:4d:cf:8a:5d:91:5e:ee:80:c1:c7:fc:25:da:8f:65:5c:5e:
66:ec:23:3f:4c:71:04:8a:b2:a2:0a:66:4f:db:47:78:46:f0:
df:9b:a4:39:14:e2:b1:2b:9d:f9:ea:fb:34:df:ce:ae:65:01:
d4:6b:85:db:96:74:83:a8:ca:d4:bf:78:e3:a0:a2:86:28:87:
2f:2f:51:85:62:63:31:64:56:87:fa:a3:20:9f:e9:bd:ff:b2:
a4:99:a7:d1:57:63:b7:8e:8a:93:bf:3b:fc:27:10:02:14:eb:
8e:02:54:a0:f0:14:5d:20:6c:f7:97:16:ab:76:62:d9:65:0a:
c2:f6:37:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoj00hE8Mg/dx3HXk/fQ+4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYmMyMGE3MzZmZmMxMzE5ZWZkZTRkYjYzMTM3Yzg3ODNj
NmIzNTAwHhcNMjUxMDI3MDQwMDQwWhcNMjUxMDI4MDQwMDQwWjAzMTEwLwYDVQQD
EyhkMGJkNjI5NDUxY2YxMzVlNjIxOGY3YjY5OWFmMGFkYzIyNThmNzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXmcdkteFUdMs9RCtAF4XhKRQUOA
pvzXcbpJIZpqDOxOpTlZdcdk9Ax5QKso4YTKagmQVUJBEiZQZgfBxUMPBXwkrN63
EAwzizRwGL0FRYl7TJ0/CPc3nd9z/KCK4kaof4AmU7BHKHGDdMPmGHX4HOKXnqlz
iJp0X+FQmOwgjKVCzbTfy4mSFfwRKs11WXQuXSYfSnxHqRI5gzpxkCbVjxlVduh/
NYfEakiNvUkTonF8FmB1qwOqg8faNY9b3TCY02RDaTsodO/eHgOgrusRFgkKgOa/
2WMMq0KdGvJom8dRS8ToRxusHe8gJAGuZAExfEVtTorZ+r6Y5PJZDJ/OLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNC9YpRRzxNeYhj3tpmvCtwiWPdAMB8GA1UdIwQY
MBaAFG28IKc2/8Exnv3k22MTfIeDxrNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjkt
YTU0ZWMwZDY4ZmE4LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjktYTU0ZWMwZDY4ZmE4
LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAh4/pPk
VTCPDSRUnHLXBiNPqfXkrhstTPSdzEonAxHD5IE7cUiB8qoZr/CCo7YRNYLUMhtP
/3csVWBJycfEMs2ZquQvJZZsgnVfpTJfoU+DPOjjRSRA4Q583mBTPzgMH5sL/FwN
6C09zk5bsSN3HaM0GjY/1Lsdh8sxZ3QFDU3Pil2RXu6Awcf8JdqPZVxeZuwjP0xx
BIqyogpmT9tHeEbw35ukORTisSud+er7NN/OrmUB1GuF25Z0g6jK1L9446CihiiH
Ly9RhWJjMWRWh/qjIJ/pvf+ypJmn0Vdjt46Kk787/CcQAhTrjgJUoPAUXSBs95cW
q3Zi2WUKwvY3hg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 10:57:12 2025 by rpki-client