Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
File: BFYL6jkur2kgircF70Bc94aEF2s.mft (raw, json)
Hash identifier: KnZHEhSKQ94Ht4qc3wnQCMyXzhJLvga96nNkbUtEFyc=
Subject key identifier: 69:94:C3:12:E7:02:75:05:AE:DD:65:69:C3:80:1A:77:8B:FD:40:15
Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
Certificate issuer: /CN=04560bea392eaf69208ab705ef405cf78684176b
Certificate serial: 0198C56D06C49C5C4C2E43BCADE4DC163062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
Manifest number: 1646
Signing time: Wed 20 Aug 2025 03:01:53 +0000
Manifest this update: Wed 20 Aug 2025 03:01:53 +0000
Manifest next update: Thu 21 Aug 2025 03:01:53 +0000
Files and hashes: 1: 8kdm1ZAPNcZedXP01TafIjBXKRs.roa (hash: itb59cI824fq1EKKCsVfc6XjwoFA0+TxsZlQLnTiMW4=)
2: BFYL6jkur2kgircF70Bc94aEF2s.crl (hash: jQYUb7ogoQceCoMW7YU+9NXlhVzUR2KCCXYEZbslU7g=)
3: NyItizXaNDYcIoRvpNc_5Mkg2Qg.roa (hash: 6BsyUuSqs5SSPqJlfjsNi68lsr8Mj9jzzqX6MyZpWe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 03:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c5:6d:06:c4:9c:5c:4c:2e:43:bc:ad:e4:dc:16:30:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b
Validity
Not Before: Aug 20 03:01:53 2025 GMT
Not After : Aug 21 03:01:53 2025 GMT
Subject: CN=6994c312e7027505aedd6569c3801a778bfd4015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:bb:3b:80:cb:d8:02:d4:23:ab:12:f5:f0:
f4:53:6f:a5:b4:f1:d1:10:f0:fa:34:29:09:6a:a7:
cc:4c:b9:95:48:56:bb:f7:72:80:3a:ca:8d:8f:31:
39:9f:35:c9:4b:86:64:41:99:ae:12:6e:b9:04:24:
b0:5c:48:e1:16:de:08:2d:7e:71:cb:fe:1b:fe:a3:
93:d8:9a:9f:f9:db:6d:e2:81:8d:6f:67:89:56:02:
d1:56:a3:b0:44:07:93:40:67:88:c7:a7:31:64:31:
f7:23:06:fd:32:73:45:e2:57:04:26:6b:b7:12:32:
9a:de:0e:71:81:89:fc:bf:2e:d6:9c:09:d0:92:20:
18:1e:ed:57:fe:31:22:5d:53:e7:bc:32:11:7d:89:
1b:4f:53:b7:c8:b6:f6:96:89:66:6c:ad:64:3c:90:
65:25:16:ad:0a:3f:95:6a:52:9a:da:42:f9:8e:32:
93:d4:43:92:a8:da:4e:34:da:29:32:ed:d8:36:89:
1c:c3:fa:73:a0:f7:de:77:8c:da:6d:c5:06:d9:2e:
55:c5:90:e6:44:b8:e8:ab:6f:d2:cb:50:97:71:b3:
2f:bf:ea:a0:a6:fd:64:2d:f1:bc:c9:9c:0b:90:19:
ea:4b:c0:dd:27:2e:77:f9:b3:2d:22:19:1b:e5:53:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:94:C3:12:E7:02:75:05:AE:DD:65:69:C3:80:1A:77:8B:FD:40:15
X509v3 Authority Key Identifier:
keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:af:32:59:45:52:df:b1:56:ea:ac:5f:e4:1a:bb:82:36:ff:
75:d3:68:9a:ba:2c:6a:f0:91:07:69:ca:e5:d9:df:9a:ff:3b:
18:66:76:71:2c:fa:3f:23:5a:8f:5b:7b:a8:80:d1:25:46:2b:
7f:42:ae:64:88:ed:26:b6:53:79:ae:7d:44:15:dd:6b:18:9e:
19:b5:6a:0e:b4:63:6a:9a:cb:8c:2a:67:1d:01:ee:5e:14:6d:
36:7a:29:8f:f6:59:28:9e:af:30:6d:13:21:79:68:d1:21:c4:
0e:84:14:52:21:a0:d5:42:6e:f6:0b:74:67:08:23:a6:35:27:
69:ca:a6:25:08:87:9e:e6:71:a9:95:d1:84:49:bb:06:27:9f:
3c:c5:97:30:f9:ea:50:dd:d5:49:e1:c6:bd:a9:3f:24:d6:48:
51:d1:1a:21:e5:57:81:0e:13:e2:f4:2b:27:e9:94:e2:91:d2:
21:f1:fc:d0:cb:e5:80:9f:15:f1:6f:34:7f:5c:ce:11:29:be:
8c:ec:ab:03:b3:91:2d:68:a4:e7:d2:55:a5:e2:b0:36:30:68:
f1:00:a7:ba:0d:77:21:5a:6a:95:84:5f:40:07:28:65:f5:fd:
0e:68:3c:53:f3:ab:9e:23:0b:60:26:5c:09:ce:44:fc:c0:61:
95:b8:26:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjFbQbEnFxMLkO8reTcFjBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NTYwYmVhMzkyZWFmNjkyMDhhYjcwNWVmNDA1Y2Y3ODY4
NDE3NmIwHhcNMjUwODIwMDMwMTUzWhcNMjUwODIxMDMwMTUzWjAzMTEwLwYDVQQD
Eyg2OTk0YzMxMmU3MDI3NTA1YWVkZDY1NjljMzgwMWE3NzhiZmQ0MDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdi7O4DL2ALUI6sS9fD0U2+ltPHR
EPD6NCkJaqfMTLmVSFa793KAOsqNjzE5nzXJS4ZkQZmuEm65BCSwXEjhFt4ILX5x
y/4b/qOT2Jqf+dtt4oGNb2eJVgLRVqOwRAeTQGeIx6cxZDH3Iwb9MnNF4lcEJmu3
EjKa3g5xgYn8vy7WnAnQkiAYHu1X/jEiXVPnvDIRfYkbT1O3yLb2lolmbK1kPJBl
JRatCj+ValKa2kL5jjKT1EOSqNpONNopMu3YNokcw/pzoPfed4zabcUG2S5VxZDm
RLjoq2/Sy1CXcbMvv+qgpv1kLfG8yZwLkBnqS8DdJy53+bMtIhkb5VOh1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmUwxLnAnUFrt1lacOAGneL/UAVMB8GA1UdIwQY
MBaAFARWC+o5Lq9pIIq3Be9AXPeGhBdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9jZTRhNGUtYjFhMy00NWY0LWEyN2Mt
ZTFhY2EwMTA2MmZmLzEvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9jZTRhNGUtYjFhMy00NWY0LWEyN2MtZTFhY2EwMTA2MmZm
LzEvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASa8yWUVS
37FW6qxf5Bq7gjb/ddNomrosavCRB2nK5dnfmv87GGZ2cSz6PyNaj1t7qIDRJUYr
f0KuZIjtJrZTea59RBXdaxieGbVqDrRjaprLjCpnHQHuXhRtNnopj/ZZKJ6vMG0T
IXlo0SHEDoQUUiGg1UJu9gt0ZwgjpjUnacqmJQiHnuZxqZXRhEm7BiefPMWXMPnq
UN3VSeHGvak/JNZIUdEaIeVXgQ4T4vQrJ+mU4pHSIfH80MvlgJ8V8W80f1zOESm+
jOyrA7ORLWik59JVpeKwNjBo8QCnug13IVpqlYRfQAcoZfX9Dmg8U/OrniMLYCZc
Cc5E/MBhlbgmTQ==
-----END CERTIFICATE-----
Generated at Wed Aug 20 13:11:02 2025 by rpki-client