Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
File: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft (raw, json)
Hash identifier: YgWx0q6BVQq7JoHnsomDFwn6dLkA2fEK5l5Y+e8wCMc=
Subject key identifier: 53:E4:73:DF:1F:BF:B6:0E:35:0B:BC:78:28:9A:64:1F:DD:30:C8:D3
Authority key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
Certificate issuer: /CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Certificate serial: 019A221BED61331808C19114F302D5C104B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 20:00:46 +0000
Manifest this update: Sun 26 Oct 2025 20:00:46 +0000
Manifest next update: Mon 27 Oct 2025 20:00:46 +0000
Files and hashes: 1: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl (hash: V3rZ7GuPE7gkiCc1viQOKvqbStb76DTEnagkzi1y65c=)
2: ifWZmIX4SXkuGkJP6QgKSkmuMBc.roa (hash: nU4OGwo7QVYE2TFfLmXken2fHAzhkJ4DtS2BG5Z6bzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:ed:61:33:18:08:c1:91:14:f3:02:d5:c1:04:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Validity
Not Before: Oct 26 20:00:46 2025 GMT
Not After : Oct 27 20:00:46 2025 GMT
Subject: CN=53e473df1fbfb60e350bbc78289a641fdd30c8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:6e:c7:45:84:ba:f5:02:7d:36:53:9e:ef:
6d:2f:54:0d:db:ba:78:39:8f:6b:bc:7b:20:03:a5:
0b:3c:17:1d:bd:b3:15:57:a3:ee:90:17:0b:07:9a:
4e:3d:4d:5f:37:ca:b7:25:3c:4b:8f:f0:fd:3c:14:
7c:3d:38:5d:c1:cd:b0:a3:6a:6e:60:b3:9a:26:88:
7f:f7:d1:af:04:07:8b:4a:43:e7:d5:52:a2:51:cf:
38:bf:1e:ac:c2:20:e0:dc:73:1d:c7:97:ab:25:79:
4d:85:82:12:af:4a:66:34:c8:68:64:2c:5c:18:0f:
6b:5b:33:ee:58:de:80:52:4d:ac:13:92:c1:a6:a5:
7f:ed:e4:fb:a6:3e:30:4b:f3:bf:c5:40:c8:7c:ba:
79:19:13:8e:b4:30:24:94:fd:a2:1a:3c:0f:b3:71:
da:d4:e7:2b:fb:5e:1f:8b:b4:7e:c0:b4:6d:a5:f6:
0e:c0:55:e1:2f:1c:45:8f:59:0d:22:f1:48:86:62:
b8:9f:ac:fe:af:f0:02:e3:ab:92:a4:4e:0c:b2:c4:
93:87:f4:e0:76:20:17:cf:de:01:42:e8:b5:b3:06:
dc:bf:53:e0:51:c3:d1:12:42:4a:fc:91:3c:d9:f9:
dd:55:2c:1d:00:c7:d8:58:23:7f:d4:d5:04:b0:97:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E4:73:DF:1F:BF:B6:0E:35:0B:BC:78:28:9A:64:1F:DD:30:C8:D3
X509v3 Authority Key Identifier:
keyid:05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:40:55:81:ea:7f:3e:3a:6f:93:9c:ee:be:89:d8:f7:fb:04:
72:c8:b3:8f:64:19:da:fd:dc:ea:06:e8:97:db:81:b0:d3:33:
7f:2d:92:83:ff:2b:e7:20:18:5b:71:16:b7:86:f9:18:5b:eb:
33:2d:2b:79:4c:d4:ea:1a:7c:e8:49:3d:c4:de:4e:e7:59:99:
b4:b6:dd:83:60:58:56:d7:e6:31:14:23:dc:b2:97:0c:3e:e6:
e8:cd:d2:16:61:19:30:6b:f1:ed:94:e6:1d:6b:b0:df:11:fa:
d5:58:47:44:0a:f8:9a:49:d7:d3:97:92:28:42:5e:9e:15:13:
fc:3c:6a:56:af:2d:b1:6c:3b:ac:2c:82:1b:ba:2f:e3:49:b9:
a1:f1:34:ca:ab:1c:a1:ec:6d:28:d6:49:d4:b0:eb:53:15:ed:
2d:0f:de:81:0b:60:6a:d7:12:49:c3:1f:2a:16:65:bb:9c:91:
7b:b8:e3:f5:00:05:77:a2:a7:e7:86:07:3c:f3:f8:a6:ea:ed:
84:49:82:7e:95:63:ef:f6:cd:f0:d1:df:6d:59:73:33:9d:4a:
50:a4:40:bb:ea:e8:9e:0f:77:c3:9d:3a:e6:5e:ed:06:05:f1:
04:6b:5d:01:a5:6f:e4:bd:01:bf:ac:6b:71:9e:db:35:a1:7e:
3e:97:92:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiG+1hMxgIwZEU8wLVwQS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YmQwZmFlZWRlNzNhZDNjZmM0Nzc4YjgyMzhjNjA4ZTQw
ZTk4NDEwHhcNMjUxMDI2MjAwMDQ2WhcNMjUxMDI3MjAwMDQ2WjAzMTEwLwYDVQQD
Eyg1M2U0NzNkZjFmYmZiNjBlMzUwYmJjNzgyODlhNjQxZmRkMzBjOGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgFux0WEuvUCfTZTnu9tL1QN27p4
OY9rvHsgA6ULPBcdvbMVV6PukBcLB5pOPU1fN8q3JTxLj/D9PBR8PThdwc2wo2pu
YLOaJoh/99GvBAeLSkPn1VKiUc84vx6swiDg3HMdx5erJXlNhYISr0pmNMhoZCxc
GA9rWzPuWN6AUk2sE5LBpqV/7eT7pj4wS/O/xUDIfLp5GROOtDAklP2iGjwPs3Ha
1Ocr+14fi7R+wLRtpfYOwFXhLxxFj1kNIvFIhmK4n6z+r/AC46uSpE4MssSTh/Tg
diAXz94BQui1swbcv1PgUcPREkJK/JE82fndVSwdAMfYWCN/1NUEsJeLPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPkc98fv7YONQu8eCiaZB/dMMjTMB8GA1UdIwQY
MBaAFAW9D67t5zrTz8R3i4I4xgjkDphBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmIwUHJ1M25PdFBQeEhlTGdqakdDT1FPbUVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MjE3ODgtZTRiZC00ODg5LWE1OTct
MTJkMGI2MzJlNWU4LzEvQmIwUHJ1M25PdFBQeEhlTGdqakdDT1FPbUVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy81MjE3ODgtZTRiZC00ODg5LWE1OTctMTJkMGI2MzJlNWU4
LzEvQmIwUHJ1M25PdFBQeEhlTGdqakdDT1FPbUVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEBVgep/
Pjpvk5zuvonY9/sEcsizj2QZ2v3c6gbol9uBsNMzfy2Sg/8r5yAYW3EWt4b5GFvr
My0reUzU6hp86Ek9xN5O51mZtLbdg2BYVtfmMRQj3LKXDD7m6M3SFmEZMGvx7ZTm
HWuw3xH61VhHRAr4mknX05eSKEJenhUT/DxqVq8tsWw7rCyCG7ov40m5ofE0yqsc
oextKNZJ1LDrUxXtLQ/egQtgatcSScMfKhZlu5yRe7jj9QAFd6Kn54YHPPP4purt
hEmCfpVj7/bN8NHfbVlzM51KUKRAu+rong93w5065l7tBgXxBGtdAaVv5L0Bv6xr
cZ7bNaF+PpeScQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 22:58:33 2025 by rpki-client