Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
File: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft (raw, json)
Hash identifier: PPdGv6g4DPyOMDJ6O0W2hPpaa8omCt1hSF7f+jtu9uw=
Subject key identifier: E7:B8:CE:24:41:DB:4D:6F:87:D8:7C:C2:0C:8C:36:70:8F:9E:50:FB
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 019A1A98AFD47705AF4CA364B63BB432E6C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
Manifest number: 1727
Signing time: Sat 25 Oct 2025 09:00:05 +0000
Manifest this update: Sat 25 Oct 2025 09:00:05 +0000
Manifest next update: Sun 26 Oct 2025 09:00:05 +0000
Files and hashes: 1: 3XRXUFFaWVh_usZeR7hZVb4Jvcw.roa (hash: yAwRlDNm7OdLzFSk+lSyDArDl3R3ItMyb247bPQjawI=)
2: 4GFLNoudKsxo0lKJ1-DlrH13jnQ.roa (hash: HUsEZcDE4OcjX3j8qjU3YIB7IUQvhWtNObC5QxLBOjI=)
3: HABzsmEXoTX-9F80tlefBrIojpE.roa (hash: 52kUggTy9NYk2U3Bjz9hs7uyoLjfvw/NlnF/Z95I8C4=)
4: QePjCCFm1FINIQleulFli9B8Eok.roa (hash: /guHrTHyVfudxkCaMQP2S3B+Z/m09hjKdZNM8RCBhu8=)
5: RvvULY1y4xBfF8ZuGzWFY0OKEEg.roa (hash: NY71LOvBCM5qGOh91dHK/WKKwDoM07O+dhz3A0gNPUc=)
6: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl (hash: NefSy7t0wRX2nB/VgOzYBER+VuwLPm6wTDtcuUinBPM=)
7: gjLZ8xPb1tsKV2vJR4IOeOvDkLQ.roa (hash: xoIQZnhZzbbmusOiJUznTII6cc6W+LUSKGBLQbZkQx8=)
8: t8J6z3tO2f2jI-WXfX5Z7ghB42Y.roa (hash: CJg1Zg1dR2GxxLuD5y1ebgKx9+kGLch5/dW0dbkm29Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:98:af:d4:77:05:af:4c:a3:64:b6:3b:b4:32:e6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Oct 25 09:00:05 2025 GMT
Not After : Oct 26 09:00:05 2025 GMT
Subject: CN=e7b8ce2441db4d6f87d87cc20c8c36708f9e50fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:f1:d4:f7:db:92:25:56:aa:9f:fa:8f:84:
40:1f:81:26:ae:de:92:b9:54:f5:b1:da:fd:89:1c:
8f:b9:48:81:f0:be:c2:66:b1:7f:59:96:39:1f:cd:
bb:49:bc:c4:4c:00:9b:9e:f3:9f:07:0f:b8:b7:35:
24:91:32:2a:07:b3:ef:a9:6a:71:ec:b9:a9:44:3e:
de:0f:dd:cc:e8:87:ea:9d:17:9c:17:11:cd:89:2f:
15:d9:03:54:ba:bc:66:8c:30:02:4f:6c:1c:b0:94:
ab:d4:98:bd:17:b2:b4:16:35:74:ef:b8:45:9e:07:
e7:10:ab:b8:6b:17:79:dc:68:6c:5c:49:76:a6:95:
fc:03:59:80:ee:ab:10:d8:b8:95:b8:21:c3:54:f5:
22:4e:b5:f5:dc:18:3e:32:c8:f0:e5:7d:e0:43:c4:
ca:6d:97:9c:81:3b:03:1f:9a:c7:07:06:3e:a2:1d:
5a:49:26:f3:9a:dc:78:e8:67:20:2a:32:70:bd:77:
bf:8a:61:b6:5a:b4:7e:27:40:af:c2:df:33:57:db:
d6:01:1f:ea:2b:6f:2f:db:65:d9:3a:17:20:04:15:
38:3e:c7:e9:32:a7:5e:e2:a2:78:b0:4f:0c:ce:f8:
fd:04:7e:ed:29:2d:36:ef:c6:d1:bd:eb:a1:bc:47:
e8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B8:CE:24:41:DB:4D:6F:87:D8:7C:C2:0C:8C:36:70:8F:9E:50:FB
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:f8:b0:3b:bf:ba:9e:55:f8:2d:10:d4:ed:1a:97:16:a0:18:
f5:35:a4:49:9a:71:0f:af:3f:bb:1e:5b:5c:dc:53:ea:76:03:
3c:0a:fb:30:1a:bf:9c:bd:ef:43:cd:a5:04:11:7b:bd:23:02:
1d:13:18:13:59:6e:a6:42:21:f3:d8:ba:26:19:95:e6:65:f2:
f1:d7:c6:15:78:70:fb:a7:ab:47:b1:76:83:58:2b:3b:ad:b2:
aa:57:13:af:8e:90:42:37:15:02:8d:e8:1b:83:1e:7c:9a:0a:
a1:fb:77:9d:2c:56:74:78:c3:98:21:ef:55:2f:67:be:b4:64:
b8:54:e6:f8:a1:f4:ac:a3:c2:35:c9:0b:26:a2:87:fc:d3:fc:
94:b2:31:9e:68:83:d0:48:db:f7:09:f0:73:30:90:6c:1a:65:
59:15:7c:3e:0b:fe:ea:0a:33:91:d6:4a:11:4a:3c:8d:bb:94:
39:b2:91:55:55:b9:35:4c:29:69:a6:e7:90:d9:f5:2d:4f:e0:
3a:87:31:f8:ea:a5:9f:8f:c4:d9:c5:62:4c:a4:1c:38:b3:d2:
8c:50:e1:8e:e7:52:29:a4:8e:a2:d4:2f:8b:2a:79:d1:c9:75:
2c:ef:e8:e9:47:57:4d:ea:16:e6:5b:a4:c2:4e:ef:27:e7:b8:
bd:c2:34:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoamK/UdwWvTKNktju0MubDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMDNhMmNhZjI5ODAxOWZiZDY2ODYyMTUxNmM4YzZlMWQx
MGU4M2MwHhcNMjUxMDI1MDkwMDA1WhcNMjUxMDI2MDkwMDA1WjAzMTEwLwYDVQQD
EyhlN2I4Y2UyNDQxZGI0ZDZmODdkODdjYzIwYzhjMzY3MDhmOWU1MGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRzx1PfbkiVWqp/6j4RAH4Emrt6S
uVT1sdr9iRyPuUiB8L7CZrF/WZY5H827SbzETACbnvOfBw+4tzUkkTIqB7PvqWpx
7LmpRD7eD93M6IfqnRecFxHNiS8V2QNUurxmjDACT2wcsJSr1Ji9F7K0FjV077hF
ngfnEKu4axd53GhsXEl2ppX8A1mA7qsQ2LiVuCHDVPUiTrX13Bg+Msjw5X3gQ8TK
bZecgTsDH5rHBwY+oh1aSSbzmtx46GcgKjJwvXe/imG2WrR+J0Cvwt8zV9vWAR/q
K28v22XZOhcgBBU4PsfpMqde4qJ4sE8Mzvj9BH7tKS0278bRveuhvEfo9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOe4ziRB201vh9h8wgyMNnCPnlD7MB8GA1UdIwQY
MBaAFGwDosrymAGfvWaGIVFsjG4dEOg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDkt
ZmMzN2ZiMGNkNDNiLzEvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDktZmMzN2ZiMGNkNDNi
LzEvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuviwO7+6
nlX4LRDU7RqXFqAY9TWkSZpxD68/ux5bXNxT6nYDPAr7MBq/nL3vQ82lBBF7vSMC
HRMYE1lupkIh89i6JhmV5mXy8dfGFXhw+6erR7F2g1grO62yqlcTr46QQjcVAo3o
G4MefJoKoft3nSxWdHjDmCHvVS9nvrRkuFTm+KH0rKPCNckLJqKH/NP8lLIxnmiD
0Ejb9wnwczCQbBplWRV8Pgv+6gozkdZKEUo8jbuUObKRVVW5NUwpaabnkNn1LU/g
Oocx+Oqln4/E2cViTKQcOLPSjFDhjudSKaSOotQviyp50cl1LO/o6UdXTeoW5luk
wk7vJ+e4vcI0wA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 11:27:17 2025 by rpki-client