Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
File: BDaS8qHRvHb_f50pCRvtoIt7yWw.mft (raw, json)
Hash identifier: 0nTCZLJGV+1B/F3H03xaZMNnT1TVllkkmlm4g0GP8aM=
Subject key identifier: 31:FC:54:22:3F:DE:19:CC:E3:60:47:F7:CE:04:DF:C2:ED:E2:53:B5
Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
Certificate issuer: /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Certificate serial: 019A1C50A064CFCA46C064290BD17F2B5C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 17:00:37 +0000
Manifest this update: Sat 25 Oct 2025 17:00:37 +0000
Manifest next update: Sun 26 Oct 2025 17:00:37 +0000
Files and hashes: 1: BDaS8qHRvHb_f50pCRvtoIt7yWw.crl (hash: yqiK6D/4ob5FLJch1APCaef3Le0j4eNGIYvaWG1Pzqk=)
2: F5ASQ_x2NzqLG2YPK-IJMnC68oA.roa (hash: rL17KB2ZeYz5uA3Maczd8dyCWpJw7h3YziKqc9PF9RM=)
3: fKRgm3J38CdqPYWraPnwaBHZfSw.roa (hash: faZcv/HNNKoTcf9eyD+mOEilysgTYS2fYEJ0tHKXiUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:50:a0:64:cf:ca:46:c0:64:29:0b:d1:7f:2b:5c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Validity
Not Before: Oct 25 17:00:37 2025 GMT
Not After : Oct 26 17:00:37 2025 GMT
Subject: CN=31fc54223fde19cce36047f7ce04dfc2ede253b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:e3:be:bf:d6:06:8b:2d:51:41:09:5d:58:
bf:c0:5f:3e:aa:bb:e1:b0:fd:b1:d5:ca:b3:5f:83:
cb:24:3c:76:c2:4e:6d:25:46:d8:bd:c3:3e:b6:31:
e4:40:3f:48:43:e1:c7:d4:7f:4f:9a:8f:6b:f8:e0:
52:01:5d:ff:bc:d3:d0:67:9f:98:c8:8a:ef:a8:cf:
cf:6d:b8:b2:5a:0e:35:85:9a:fd:21:04:34:be:76:
f1:fc:dc:7e:6d:02:b4:07:b7:a2:90:61:1d:82:eb:
a7:ad:9d:cc:6d:bc:9c:7b:1b:22:a8:0f:76:81:65:
f0:57:1d:ba:d7:81:bc:ee:19:03:81:9c:5d:7d:2a:
0b:bd:82:89:87:ef:84:a5:47:07:13:db:38:ca:12:
f0:43:54:98:6f:bf:13:06:bd:6b:d5:df:64:dc:a1:
db:3c:2c:1d:2f:ad:f1:65:ea:6e:51:8d:ea:c5:9d:
8b:1b:8a:ee:47:54:81:ce:7f:d7:aa:82:4a:0e:56:
22:eb:28:53:11:0b:db:76:fe:9f:60:2b:ff:73:d1:
16:35:59:ef:24:71:ee:08:78:c7:d9:f9:b5:16:57:
02:1f:a2:04:56:e8:14:96:28:08:1a:81:86:54:5d:
44:31:ad:ad:c4:61:ea:84:de:97:86:0b:fe:89:a6:
32:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FC:54:22:3F:DE:19:CC:E3:60:47:F7:CE:04:DF:C2:ED:E2:53:B5
X509v3 Authority Key Identifier:
keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:08:1c:3d:cc:9d:dd:b3:4f:15:fd:c3:bd:d0:c6:7f:aa:1f:
7c:8a:3c:e0:37:f8:d0:ce:cb:25:71:ce:5c:7f:1e:d8:9b:f9:
67:4c:29:d3:ab:46:80:58:94:55:29:77:cb:2e:85:fd:b2:ad:
7e:b9:25:2c:8e:6b:e2:39:b6:b7:46:99:47:84:90:26:39:99:
cd:82:e0:56:57:cb:f0:ab:d8:49:25:4e:96:4c:49:12:bb:2a:
33:43:97:7e:1a:47:99:40:6e:d3:82:29:df:8b:0e:d6:ca:e6:
6f:a6:b1:cb:99:ce:0f:0c:b1:0e:fe:6c:ff:99:7b:1b:4e:ce:
54:ef:4f:df:a6:cf:7b:6e:1f:ae:db:7d:19:c5:29:cf:3b:81:
96:e4:87:87:94:13:30:42:ce:0c:f1:14:d9:79:06:21:dc:1c:
d8:5a:cc:32:3b:79:1e:b2:d9:a2:4a:51:36:66:b7:1f:af:a0:
6a:4a:ec:7d:38:7f:ee:94:38:09:eb:86:5d:86:70:e8:92:20:
09:40:af:c7:98:7d:bd:30:07:a9:9d:a0:b1:2b:07:ae:e6:10:
f7:9f:67:a2:be:31:59:2a:21:09:fe:b3:6f:84:2f:bb:9b:75:
01:25:e2:a8:4b:b9:e0:2b:75:d6:c0:8f:a6:98:76:23:c3:42:
b2:3b:d2:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZocUKBkz8pGwGQpC9F/K1w9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MzY5MmYyYTFkMWJjNzZmZjdmOWQyOTA5MWJlZGEwOGI3
YmM5NmMwHhcNMjUxMDI1MTcwMDM3WhcNMjUxMDI2MTcwMDM3WjAzMTEwLwYDVQQD
EygzMWZjNTQyMjNmZGUxOWNjZTM2MDQ3ZjdjZTA0ZGZjMmVkZTI1M2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUHjvr/WBostUUEJXVi/wF8+qrvh
sP2x1cqzX4PLJDx2wk5tJUbYvcM+tjHkQD9IQ+HH1H9Pmo9r+OBSAV3/vNPQZ5+Y
yIrvqM/PbbiyWg41hZr9IQQ0vnbx/Nx+bQK0B7eikGEdguunrZ3MbbycexsiqA92
gWXwVx2614G87hkDgZxdfSoLvYKJh++EpUcHE9s4yhLwQ1SYb78TBr1r1d9k3KHb
PCwdL63xZepuUY3qxZ2LG4ruR1SBzn/XqoJKDlYi6yhTEQvbdv6fYCv/c9EWNVnv
JHHuCHjH2fm1FlcCH6IEVugUligIGoGGVF1EMa2txGHqhN6Xhgv+iaYyFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDH8VCI/3hnM42BH984E38Lt4lO1MB8GA1UdIwQY
MBaAFAQ2kvKh0bx2/3+dKQkb7aCLe8lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkRhUzhxSFJ2SGJfZjUwcENSdnRvSXQ3eVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jNmUyMTctMDNmZi00Mzk2LWFkZmUt
MjU1ZjBjNTFiYmUwLzEvQkRhUzhxSFJ2SGJfZjUwcENSdnRvSXQ3eVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jNmUyMTctMDNmZi00Mzk2LWFkZmUtMjU1ZjBjNTFiYmUw
LzEvQkRhUzhxSFJ2SGJfZjUwcENSdnRvSXQ3eVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwgcPcyd
3bNPFf3DvdDGf6offIo84Df40M7LJXHOXH8e2Jv5Z0wp06tGgFiUVSl3yy6F/bKt
frklLI5r4jm2t0aZR4SQJjmZzYLgVlfL8KvYSSVOlkxJErsqM0OXfhpHmUBu04Ip
34sO1srmb6axy5nODwyxDv5s/5l7G07OVO9P36bPe24frtt9GcUpzzuBluSHh5QT
MELODPEU2XkGIdwc2FrMMjt5HrLZokpRNma3H6+gakrsfTh/7pQ4CeuGXYZw6JIg
CUCvx5h9vTAHqZ2gsSsHruYQ959nor4xWSohCf6zb4Qvu5t1ASXiqEu54Ct11sCP
pph2I8NCsjvS1A==
-----END CERTIFICATE-----
Generated at Sat Oct 25 21:50:44 2025 by rpki-client