Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
File: bCynx_AN7ET0jEnyKldylIaaqbo.mft (raw, json)
Hash identifier: QaBI/03Md1p2S38hLjoUR9HR5/xuwmzhnV2IaNJ7KiE=
Subject key identifier: A2:A5:FE:BA:B1:5F:49:7B:FC:0D:1D:6D:A8:53:08:1F:25:03:5A:F5
Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
Certificate issuer: /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Certificate serial: 019A725C41B9AB0774B721F6D8B86265CF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 10:00:39 +0000
Manifest this update: Tue 11 Nov 2025 10:00:39 +0000
Manifest next update: Wed 12 Nov 2025 10:00:39 +0000
Files and hashes: 1: CFjxJzCmd6HUFa7VuE6yI0I0AMQ.roa (hash: MIyflourwhBuhTA+A0FwkrenrfoY9JbHcdU1eop0jPQ=)
2: bCynx_AN7ET0jEnyKldylIaaqbo.crl (hash: H3LLRmlm3VEpaU8KZRhgAZFERP9yyvMqI9givsplfoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:41:b9:ab:07:74:b7:21:f6:d8:b8:62:65:cf:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Validity
Not Before: Nov 11 10:00:39 2025 GMT
Not After : Nov 12 10:00:39 2025 GMT
Subject: CN=a2a5febab15f497bfc0d1d6da853081f25035af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:7e:da:8b:76:29:01:c7:16:2c:39:5c:48:
81:70:fe:a3:bb:19:11:9f:63:a9:63:56:4d:58:ea:
c0:f0:96:6a:9e:a6:1a:99:b2:05:57:88:18:f0:b0:
3c:1a:88:6c:f9:33:d4:1e:a4:cc:9a:55:c3:d7:e6:
37:75:33:6e:2c:0c:98:38:28:1a:49:33:a4:bf:57:
67:e5:3c:e3:85:73:41:99:78:35:65:74:66:08:d8:
3a:36:5e:8b:3e:a1:36:6d:1c:65:8e:7f:2f:68:e5:
46:09:2d:af:f8:e1:b0:7b:a5:5d:b6:95:98:0a:50:
2b:b8:e5:8d:53:e4:0f:49:25:cb:22:84:7e:b6:bc:
17:6f:26:fc:04:c7:88:1e:7f:0b:9b:02:be:be:91:
c9:72:46:84:a8:fc:08:05:a0:11:10:7c:c6:97:ba:
b9:92:48:71:8f:1f:77:89:cb:ad:93:77:de:b3:a7:
46:79:8d:ca:dc:a2:ce:9e:0d:90:48:3e:c0:e7:04:
09:79:dc:cb:7d:7b:fc:4f:f8:7c:34:b5:c8:0e:40:
3f:43:40:72:b4:6c:f6:cf:39:3c:09:80:55:11:b6:
52:3a:6f:04:72:d2:76:75:36:3f:1f:a4:a6:1c:36:
d0:a8:61:da:6c:26:6f:e4:53:08:ef:33:0d:08:41:
e3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A5:FE:BA:B1:5F:49:7B:FC:0D:1D:6D:A8:53:08:1F:25:03:5A:F5
X509v3 Authority Key Identifier:
keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:df:97:82:0e:6c:f7:dd:d1:c4:08:c4:2f:7a:4a:d8:58:88:
a6:17:95:80:df:29:32:68:f2:1a:84:a3:1d:c3:ed:e5:0a:7a:
9b:aa:12:30:71:2e:00:ee:c2:11:de:b9:c0:a9:8c:cb:f6:88:
ab:ba:cd:7e:70:47:f6:6c:a3:a5:a1:4f:a7:bd:26:30:c9:6e:
fd:df:e0:8b:cd:25:17:75:99:d2:13:b5:34:95:bd:72:60:e8:
42:92:02:58:8a:39:3b:65:1b:00:6a:74:fc:13:1c:21:66:48:
e2:15:df:ab:9d:12:72:e1:f5:1a:bf:4b:44:b3:97:e9:82:9f:
c0:ce:ab:ef:eb:34:69:a6:81:c7:3f:18:4c:4e:b6:29:1f:4e:
cf:a5:ce:2b:1b:0d:94:f7:ae:41:9c:69:0e:26:1b:9d:24:39:
1e:00:9d:6f:9b:f1:9a:a5:09:2e:77:d2:34:73:8e:7e:3a:83:
9f:d5:df:85:9d:92:c2:40:33:6d:5c:8d:04:54:47:ad:18:cf:
8f:aa:41:02:dc:6b:93:03:17:e6:50:7a:0e:dd:2b:ad:e3:8a:
1d:bc:27:aa:26:d9:0c:dc:7c:35:c9:88:ee:7d:03:42:0b:bd:
1a:92:0d:82:09:2c:59:4d:e8:a9:13:61:53:e3:ed:99:1d:b4:
af:22:f1:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXEG5qwd0tyH22LhiZc8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMmNhN2M3ZjAwZGVjNDRmNDhjNDlmMjJhNTc3Mjk0ODY5
YWE5YmEwHhcNMjUxMTExMTAwMDM5WhcNMjUxMTEyMTAwMDM5WjAzMTEwLwYDVQQD
EyhhMmE1ZmViYWIxNWY0OTdiZmMwZDFkNmRhODUzMDgxZjI1MDM1YWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7l+2ot2KQHHFiw5XEiBcP6juxkR
n2OpY1ZNWOrA8JZqnqYambIFV4gY8LA8Gohs+TPUHqTMmlXD1+Y3dTNuLAyYOCga
STOkv1dn5TzjhXNBmXg1ZXRmCNg6Nl6LPqE2bRxljn8vaOVGCS2v+OGwe6VdtpWY
ClAruOWNU+QPSSXLIoR+trwXbyb8BMeIHn8LmwK+vpHJckaEqPwIBaAREHzGl7q5
kkhxjx93icutk3fes6dGeY3K3KLOng2QSD7A5wQJedzLfXv8T/h8NLXIDkA/Q0By
tGz2zzk8CYBVEbZSOm8EctJ2dTY/H6SmHDbQqGHabCZv5FMI7zMNCEHjZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKl/rqxX0l7/A0dbahTCB8lA1r1MB8GA1UdIwQY
MBaAFGwsp8fwDexE9IxJ8ipXcpSGmqm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMt
NDNkYzJiNWVlYjViLzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMtNDNkYzJiNWVlYjVi
LzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGt+Xgg5s
993RxAjEL3pK2FiIpheVgN8pMmjyGoSjHcPt5Qp6m6oSMHEuAO7CEd65wKmMy/aI
q7rNfnBH9myjpaFPp70mMMlu/d/gi80lF3WZ0hO1NJW9cmDoQpICWIo5O2UbAGp0
/BMcIWZI4hXfq50ScuH1Gr9LRLOX6YKfwM6r7+s0aaaBxz8YTE62KR9Oz6XOKxsN
lPeuQZxpDiYbnSQ5HgCdb5vxmqUJLnfSNHOOfjqDn9XfhZ2SwkAzbVyNBFRHrRjP
j6pBAtxrkwMX5lB6Dt0rreOKHbwnqibZDNx8NcmI7n0DQgu9GpINggksWU3oqRNh
U+PtmR20ryLxKw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:32 2025 by rpki-client