Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier: bkydb2MfRhxq2fEkdPmLH6s02jTS8RdHRCkMPNRciMY=
Subject key identifier: 80:2E:67:9F:FC:48:C7:82:2E:01:13:5D:42:CD:5D:6B:FE:DA:45:33
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 01990FE17793EE3B504D2049106AF92A3481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number: 1669
Signing time: Wed 03 Sep 2025 14:00:58 +0000
Manifest this update: Wed 03 Sep 2025 14:00:58 +0000
Manifest next update: Thu 04 Sep 2025 14:00:58 +0000
Files and hashes: 1: AsYD6hoeMD1Ii3ouRsCjixk0isY.roa (hash: zcxHBop/y0fEgcQmkIj/4jrHcOuohd20eiO0g8A5mhM=)
2: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: K6IHQp9EYgcAbexa4VkyJS0kbPmutNLvFBrx9W7JWDM=)
3: unS2BH6IRvMlWO0CeZZ9qSzMqA0.roa (hash: 7PVmOlO8Ugj501NmZwLgajumsSoAEyC9CKRs3IKLmtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:e1:77:93:ee:3b:50:4d:20:49:10:6a:f9:2a:34:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Sep 3 14:00:58 2025 GMT
Not After : Sep 4 14:00:58 2025 GMT
Subject: CN=802e679ffc48c7822e01135d42cd5d6bfeda4533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:40:12:67:6e:ac:04:ef:7e:13:48:69:a9:
0d:29:23:eb:8f:53:39:4e:35:fe:90:6f:bc:ad:53:
15:76:43:95:11:9d:70:35:87:53:63:3e:95:bb:84:
3d:75:85:ed:f8:91:2c:75:3b:b0:9f:b8:ed:dc:7f:
aa:6f:57:ed:21:d0:80:4c:d5:e3:a5:75:35:41:47:
b5:7e:ae:d5:d8:66:03:4e:c4:41:67:6c:17:5b:74:
6e:6e:b4:29:b0:08:46:03:a5:a6:50:7a:f1:ec:b8:
24:92:98:1e:b5:4c:38:ba:05:2b:7b:cd:5a:66:76:
f1:74:75:24:06:0e:74:d5:cd:64:2c:f9:a0:b9:b2:
60:c3:2d:db:be:cd:0b:fc:1c:24:12:5f:2f:ac:04:
6c:aa:6c:81:38:84:ba:61:39:3c:60:5b:00:ff:b0:
91:10:31:9c:38:ef:45:6d:4f:cb:c2:7f:58:3a:5d:
f9:9b:74:f9:39:ab:61:d6:11:94:3d:91:6b:e0:b6:
33:3f:ea:90:98:7c:11:c7:db:34:4a:95:bf:55:df:
98:0c:44:cd:5d:d9:1d:e2:df:cf:0c:70:10:86:a1:
98:d1:c9:b9:de:90:c5:50:c8:22:e3:4b:a6:0a:c9:
4b:9e:21:16:a4:94:f7:a3:26:84:cd:b7:bd:59:f9:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2E:67:9F:FC:48:C7:82:2E:01:13:5D:42:CD:5D:6B:FE:DA:45:33
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:26:da:c3:6b:7b:03:cd:48:fb:22:ae:27:65:4e:68:37:1c:
e2:0b:ac:4c:53:05:dc:00:e6:5a:0d:f7:b6:3e:bc:c6:20:79:
d3:83:69:89:aa:2c:a4:f5:0e:e0:97:10:53:bb:52:85:52:d4:
77:97:d7:05:bd:ff:f2:a1:66:b6:e1:d8:53:b0:65:2f:04:d0:
ee:7b:66:b2:0b:7c:61:c0:75:bf:87:e6:a6:52:4b:ef:5a:dd:
a1:2f:2f:69:2d:1d:db:a2:60:ee:55:1c:a3:6a:51:b9:b6:30:
d6:ff:6c:95:04:e2:9a:a5:6f:46:ed:61:60:7c:05:a8:36:55:
78:ff:97:51:a9:9f:b9:7d:07:09:ef:39:4f:9a:1e:d7:46:00:
7f:75:b2:3c:d3:71:90:88:0a:5d:e7:99:cf:4d:36:9a:bf:bc:
b3:91:a4:9a:63:0d:b9:ec:d9:4d:90:84:3d:9c:77:36:bd:3e:
d6:eb:9c:95:9d:4c:42:41:ae:d4:d1:f5:56:e6:87:84:b7:14:
40:12:58:64:ac:56:fc:24:60:db:42:22:fa:ee:0b:93:a4:46:
0f:d8:7f:94:50:fe:21:38:a5:00:e0:93:03:53:9f:5c:bb:61:
c2:ad:85:c2:76:0b:6d:99:0b:b5:86:c0:d4:ad:92:05:1e:19:
66:11:52:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkP4XeT7jtQTSBJEGr5KjSBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZGE3NTcxYzVlYjEzYjFhZTRmNDQxN2NlZmVjMmJkNzc5
MDJlMmQwHhcNMjUwOTAzMTQwMDU4WhcNMjUwOTA0MTQwMDU4WjAzMTEwLwYDVQQD
Eyg4MDJlNjc5ZmZjNDhjNzgyMmUwMTEzNWQ0MmNkNWQ2YmZlZGE0NTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN5AEmdurATvfhNIaakNKSPrj1M5
TjX+kG+8rVMVdkOVEZ1wNYdTYz6Vu4Q9dYXt+JEsdTuwn7jt3H+qb1ftIdCATNXj
pXU1QUe1fq7V2GYDTsRBZ2wXW3RubrQpsAhGA6WmUHrx7LgkkpgetUw4ugUre81a
ZnbxdHUkBg501c1kLPmgubJgwy3bvs0L/BwkEl8vrARsqmyBOIS6YTk8YFsA/7CR
EDGcOO9FbU/Lwn9YOl35m3T5Oath1hGUPZFr4LYzP+qQmHwRx9s0SpW/Vd+YDETN
Xdkd4t/PDHAQhqGY0cm53pDFUMgi40umCslLniEWpJT3oyaEzbe9WfmOkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAuZ5/8SMeCLgETXULNXWv+2kUzMB8GA1UdIwQY
MBaAFAXadXHF6xOxrk9EF87+wr13kC4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEt
MzY1NTMwMmJmMDA1LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEtMzY1NTMwMmJmMDA1
LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCbaw2t7
A81I+yKuJ2VOaDcc4gusTFMF3ADmWg33tj68xiB504NpiaospPUO4JcQU7tShVLU
d5fXBb3/8qFmtuHYU7BlLwTQ7ntmsgt8YcB1v4fmplJL71rdoS8vaS0d26Jg7lUc
o2pRubYw1v9slQTimqVvRu1hYHwFqDZVeP+XUamfuX0HCe85T5oe10YAf3WyPNNx
kIgKXeeZz002mr+8s5GkmmMNuezZTZCEPZx3Nr0+1uuclZ1MQkGu1NH1VuaHhLcU
QBJYZKxW/CRg20Ii+u4Lk6RGD9h/lFD+ITilAOCTA1OfXLthwq2FwnYLbZkLtYbA
1K2SBR4ZZhFS+w==
-----END CERTIFICATE-----
Generated at Wed Sep 3 16:09:49 2025 by rpki-client