Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File: bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier: fMiLesCRHDhPg9YAgTSMbBgrX0OaXIADGR7R6oGYsMQ=
Subject key identifier: 45:64:DD:07:1A:E1:A5:B2:37:FF:C1:C8:16:B4:99:59:E2:9A:D1:43
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial: 019A4D737AE36C93FF17EC4318C892133475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 06:00:05 +0000
Manifest this update: Tue 04 Nov 2025 06:00:05 +0000
Manifest next update: Wed 05 Nov 2025 06:00:05 +0000
Files and hashes: 1: NEV_-oCqja9NUg4iDlmgfjuQWbE.roa (hash: ReSei0m0CMnR22mGMZi2S582O1et/LA16EgWBVKTiLE=)
2: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: mmdVFIDQ20S+G55AY3l8jRHtLg1RcWnpJvEcoqv+L1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:7a:e3:6c:93:ff:17:ec:43:18:c8:92:13:34:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
Validity
Not Before: Nov 4 06:00:05 2025 GMT
Not After : Nov 5 06:00:05 2025 GMT
Subject: CN=4564dd071ae1a5b237ffc1c816b49959e29ad143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:65:1d:88:7a:25:02:d3:d2:ce:13:8e:d8:97:
dd:b4:77:41:87:39:86:4b:5a:e4:c3:ea:83:e2:28:
29:7d:db:29:15:8f:3e:9a:26:68:0a:1c:6e:4b:28:
c8:28:02:af:f3:51:13:74:15:75:8d:6b:5a:87:4f:
45:fa:f3:19:a4:35:e3:aa:ff:1e:fc:fa:08:69:cb:
ca:7c:f1:76:21:e0:fe:5a:7e:88:6b:80:15:91:5f:
7e:47:3d:e7:fe:34:8f:6c:6f:7b:25:4d:62:d8:12:
4f:1f:80:54:98:07:41:e9:63:0f:5a:a2:08:55:7b:
a1:80:c2:62:34:b8:f8:90:dc:bf:6a:4d:6e:c2:71:
ec:b1:ef:f4:8e:6a:d7:d8:51:c2:97:f9:e1:f9:f8:
94:16:91:12:33:de:74:fb:76:da:78:3c:11:d8:6d:
5a:2f:2b:64:12:22:a3:a0:9a:ed:d3:f7:26:77:da:
ba:24:cb:0a:c4:ae:75:81:ee:10:cf:cc:46:4d:a5:
f2:6a:1d:36:f7:f3:e7:0f:c2:09:1b:39:79:6c:73:
b4:2d:1f:ea:c5:e3:02:cd:62:ed:66:c3:05:2e:c5:
1f:a5:0a:83:33:d2:a2:9c:9a:67:f7:26:0f:fc:b6:
b4:17:2a:84:4b:83:82:8a:d6:e0:ee:2e:b1:b6:0c:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:64:DD:07:1A:E1:A5:B2:37:FF:C1:C8:16:B4:99:59:E2:9A:D1:43
X509v3 Authority Key Identifier:
keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:3e:e1:a1:7c:93:0a:32:3a:7c:a8:30:f8:33:20:18:70:09:
90:75:3d:a2:9d:79:b4:2e:36:45:54:0a:a2:30:f0:19:71:fc:
3d:8d:df:69:6b:a0:1b:fb:5c:1c:4a:d0:f8:e5:82:88:6d:ce:
6b:b5:ae:b2:a7:63:ae:e2:9e:ce:16:28:de:c8:bc:b6:ff:c3:
72:3e:84:22:9b:cd:73:32:81:0e:41:80:3a:f9:a3:0f:7e:68:
4e:42:cf:c2:c0:56:a7:77:27:f5:91:e0:31:7f:a7:45:03:b5:
9d:b8:1e:a4:7e:88:20:33:e1:3f:ef:f4:4d:c6:b8:db:41:de:
47:8f:52:62:7c:2b:41:d9:1b:35:2e:39:99:16:c6:ff:e7:d0:
1d:68:99:81:5a:d9:8f:9c:eb:04:5f:db:5f:0d:27:df:02:89:
d0:b0:ba:fb:e6:40:e0:b7:e8:4f:2e:7b:b5:b3:19:5a:b5:70:
ab:0d:85:04:90:0f:95:1d:b6:3c:06:06:78:f1:f3:45:3b:07:
11:03:0d:c6:e1:75:00:a9:c3:c3:13:ff:59:41:0f:c0:0f:c2:
71:01:56:5f:f5:3d:d8:5f:6e:9d:78:1f:2c:47:e4:32:42:76:
33:d5:96:8c:69:0a:9e:8b:b2:51:fd:1d:8a:8d:3b:bf:3c:94:
c3:38:77:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc3rjbJP/F+xDGMiSEzR1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYzU3NjkxYzE1YzllYjNhMzc5OTE3ODA2ZDI5NGZkMzkx
NzVlMDcwHhcNMjUxMTA0MDYwMDA1WhcNMjUxMTA1MDYwMDA1WjAzMTEwLwYDVQQD
Eyg0NTY0ZGQwNzFhZTFhNWIyMzdmZmMxYzgxNmI0OTk1OWUyOWFkMTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GUdiHolAtPSzhOO2JfdtHdBhzmG
S1rkw+qD4igpfdspFY8+miZoChxuSyjIKAKv81ETdBV1jWtah09F+vMZpDXjqv8e
/PoIacvKfPF2IeD+Wn6Ia4AVkV9+Rz3n/jSPbG97JU1i2BJPH4BUmAdB6WMPWqII
VXuhgMJiNLj4kNy/ak1uwnHsse/0jmrX2FHCl/nh+fiUFpESM950+3baeDwR2G1a
LytkEiKjoJrt0/cmd9q6JMsKxK51ge4Qz8xGTaXyah029/PnD8IJGzl5bHO0LR/q
xeMCzWLtZsMFLsUfpQqDM9KinJpn9yYP/La0FyqES4OCitbg7i6xtgwdKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVk3Qca4aWyN//ByBa0mVnimtFDMB8GA1UdIwQY
MBaAFGzFdpHBXJ6zo3mReAbSlP05F14HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMt
ZmRkYjk2ZTZkYWQxLzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMtZmRkYjk2ZTZkYWQx
LzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4j7hoXyT
CjI6fKgw+DMgGHAJkHU9op15tC42RVQKojDwGXH8PY3faWugG/tcHErQ+OWCiG3O
a7WusqdjruKezhYo3si8tv/Dcj6EIpvNczKBDkGAOvmjD35oTkLPwsBWp3cn9ZHg
MX+nRQO1nbgepH6IIDPhP+/0Tca420HeR49SYnwrQdkbNS45mRbG/+fQHWiZgVrZ
j5zrBF/bXw0n3wKJ0LC6++ZA4LfoTy57tbMZWrVwqw2FBJAPlR22PAYGePHzRTsH
EQMNxuF1AKnDwxP/WUEPwA/CcQFWX/U92F9unXgfLEfkMkJ2M9WWjGkKnouyUf0d
io07vzyUwzh3Xg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:55 2025 by rpki-client