Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
File: bxCL1a3fq_FR2QeePT00Emlmb6c.mft (raw, json)
Hash identifier: 5Kg1fkuHFlQNehc68VR4tEDC4+zASNqDc9ULJxdmnEI=
Subject key identifier: 9B:D7:F9:2C:B9:09:4B:8E:83:6E:9F:6D:3A:87:15:51:99:9D:64:9A
Authority key identifier: 6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
Certificate issuer: /CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Certificate serial: 019A71B8664FBE39155E18C672DE7633FF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
Manifest number: 08A1
Signing time: Tue 11 Nov 2025 07:01:41 +0000
Manifest this update: Tue 11 Nov 2025 07:01:41 +0000
Manifest next update: Wed 12 Nov 2025 07:01:41 +0000
Files and hashes: 1: SVN8chXXLiylZ6iSzxPfIxpS6Wc.roa (hash: S3c0fzdOzI2koB/V4F0MudazfO5SBRZZKt7wV9ucqpI=)
2: bxCL1a3fq_FR2QeePT00Emlmb6c.crl (hash: LEGhu2W11vsvUO/YUMBUDs4ZZxH7eQYTHD1UcTKbXgo=)
3: h7d4ZTDpPr-K2jwKQKNmXhUJLpc.roa (hash: JWS67wGbGixzjqGud+OGYY8Sh8Xk+/Z+C9GlJ0f+TYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:66:4f:be:39:15:5e:18:c6:72:de:76:33:ff:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Validity
Not Before: Nov 11 07:01:41 2025 GMT
Not After : Nov 12 07:01:41 2025 GMT
Subject: CN=9bd7f92cb9094b8e836e9f6d3a871551999d649a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2c:1b:0d:e6:49:86:bf:0f:94:30:69:82:0d:
bd:e2:f9:14:de:b3:cd:a6:7a:b0:f9:72:aa:36:a1:
7d:a2:2c:74:6d:54:35:21:15:06:40:82:50:72:ed:
04:ce:e4:77:20:f6:f0:09:c1:0f:05:f2:65:c8:2c:
bb:79:5e:9b:ff:58:6f:42:4d:cd:db:a2:26:2c:6d:
0a:60:af:d6:8d:09:15:a0:b2:d2:1a:64:0b:d8:06:
30:b6:ee:3b:e9:ad:23:85:4d:f6:3d:ac:9b:09:f4:
1e:b8:4a:f2:2c:4d:b8:fa:da:11:7f:79:04:d6:20:
c6:86:6f:e3:30:c4:60:21:77:bd:2b:81:21:8f:5c:
0c:0b:40:56:46:87:fa:1b:e0:45:7f:4f:3e:f1:9d:
02:bc:9d:38:d7:a4:75:e1:41:55:43:e6:37:1b:e6:
ab:9e:55:9c:73:9d:f0:6c:83:51:59:48:ec:49:30:
bc:a6:d7:eb:5d:10:7f:bf:7f:2b:4f:61:6a:dd:05:
65:72:4f:e8:37:df:6e:10:18:a4:e1:aa:e0:78:5a:
97:85:fc:24:29:a5:c2:6d:c5:25:10:aa:1d:4e:a3:
1f:ad:00:b4:c0:6b:2b:90:7a:89:b6:66:cf:3d:f7:
22:17:55:2a:23:97:49:5d:b1:b7:55:9b:2c:dd:9d:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D7:F9:2C:B9:09:4B:8E:83:6E:9F:6D:3A:87:15:51:99:9D:64:9A
X509v3 Authority Key Identifier:
keyid:6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:79:66:19:69:6e:ff:e8:11:7a:c5:c6:68:e3:7d:3e:94:60:
94:b1:4f:fe:d3:88:42:41:29:bc:42:dd:c8:c3:13:6a:7b:41:
bf:93:d5:99:61:7b:ee:98:b6:d4:69:d0:b0:1f:3e:d2:7c:d0:
1a:e0:42:6d:a1:2d:63:8b:c6:c9:4c:bc:4b:c9:28:af:6c:d0:
3a:4d:22:35:bc:a0:85:2e:50:9d:d6:c7:8e:e2:37:7a:cf:5d:
57:13:20:0d:62:ae:25:26:e3:db:bc:24:d3:4e:60:b3:91:86:
84:91:6f:33:1f:75:08:b9:f0:c7:a4:b2:4b:1f:22:dd:9b:9b:
50:58:02:31:fc:8e:5a:e6:67:a9:e4:e5:22:5b:09:f6:98:ab:
be:8a:73:35:23:17:16:61:4c:60:dc:fb:ab:3e:7d:58:fa:ad:
b1:10:dc:fb:70:0a:e6:74:95:e7:cb:da:44:b3:bd:86:a8:c5:
69:dc:d0:29:d1:12:85:87:28:2a:d9:1f:b3:0e:9c:48:5e:e1:
ba:7c:88:8c:e3:f9:09:8a:6e:3a:c4:07:ea:84:09:dd:79:4a:
13:31:bc:c1:df:9f:12:6e:14:52:8e:30:e3:b0:e8:5e:8a:00:
67:59:fd:78:6a:76:ec:75:47:ca:ce:63:06:20:31:8c:40:11:
ed:a1:0c:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuGZPvjkVXhjGct52M/8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMTA4YmQ1YWRkZmFiZjE1MWQ5MDc5ZTNkM2QzNDEyNjk2
NjZmYTcwHhcNMjUxMTExMDcwMTQxWhcNMjUxMTEyMDcwMTQxWjAzMTEwLwYDVQQD
Eyg5YmQ3ZjkyY2I5MDk0YjhlODM2ZTlmNmQzYTg3MTU1MTk5OWQ2NDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iwbDeZJhr8PlDBpgg294vkU3rPN
pnqw+XKqNqF9oix0bVQ1IRUGQIJQcu0EzuR3IPbwCcEPBfJlyCy7eV6b/1hvQk3N
26ImLG0KYK/WjQkVoLLSGmQL2AYwtu476a0jhU32PaybCfQeuEryLE24+toRf3kE
1iDGhm/jMMRgIXe9K4Ehj1wMC0BWRof6G+BFf08+8Z0CvJ0416R14UFVQ+Y3G+ar
nlWcc53wbINRWUjsSTC8ptfrXRB/v38rT2Fq3QVlck/oN99uEBik4argeFqXhfwk
KaXCbcUlEKodTqMfrQC0wGsrkHqJtmbPPfciF1UqI5dJXbG3VZss3Z0UTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvX+Sy5CUuOg26fbTqHFVGZnWSaMB8GA1UdIwQY
MBaAFG8Qi9Wt36vxUdkHnj09NBJpZm+nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnhDTDFhM2ZxX0ZSMlFlZVBUMDBFbWxtYjZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iN2I3ZmEtMTNkMC00ZmZjLTk4Nzgt
MDk3YjRkNmQ4MWU0LzEvYnhDTDFhM2ZxX0ZSMlFlZVBUMDBFbWxtYjZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iN2I3ZmEtMTNkMC00ZmZjLTk4NzgtMDk3YjRkNmQ4MWU0
LzEvYnhDTDFhM2ZxX0ZSMlFlZVBUMDBFbWxtYjZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3lmGWlu
/+gResXGaON9PpRglLFP/tOIQkEpvELdyMMTantBv5PVmWF77pi21GnQsB8+0nzQ
GuBCbaEtY4vGyUy8S8kor2zQOk0iNbyghS5QndbHjuI3es9dVxMgDWKuJSbj27wk
005gs5GGhJFvMx91CLnwx6SySx8i3ZubUFgCMfyOWuZnqeTlIlsJ9pirvopzNSMX
FmFMYNz7qz59WPqtsRDc+3AK5nSV58vaRLO9hqjFadzQKdEShYcoKtkfsw6cSF7h
unyIjOP5CYpuOsQH6oQJ3XlKEzG8wd+fEm4UUo4w47DoXooAZ1n9eGp27HVHys5j
BiAxjEAR7aEMhw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:53 2025 by rpki-client