Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File: BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier: r+WVEOGbCgC2CnhUo3iPX42bFiZApYQqR1sZYjuVCrU=
Subject key identifier: 4A:1B:0B:39:17:C6:53:39:33:C0:70:33:F2:C0:1C:00:02:C2:2E:45
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial: 019A3233A678A3D6CC9F46E52E0BE2EB0206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number: 16FF
Signing time: Wed 29 Oct 2025 23:00:36 +0000
Manifest this update: Wed 29 Oct 2025 23:00:36 +0000
Manifest next update: Thu 30 Oct 2025 23:00:36 +0000
Files and hashes: 1: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: d/DIPv4aGSRledqj7oTO17Lr6Wi+HHLBzEQ64GajmrE=)
2: IMkMxuP_HIe-8yHaxaZmmkfgrkU.roa (hash: VP/3gFLV/p+/OXdm2saWsfz+k4M/NDwKldgBYB4HtdM=)
3: gePsgMm1SXrgosAl9EBGRbblOJY.roa (hash: oh2vSEtXqPjZczOQ5pTX784c3RYOTBDe5sYQaczr//U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:32:33:a6:78:a3:d6:cc:9f:46:e5:2e:0b:e2:eb:02:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Validity
Not Before: Oct 29 23:00:36 2025 GMT
Not After : Oct 30 23:00:36 2025 GMT
Subject: CN=4a1b0b3917c6533933c07033f2c01c0002c22e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:fa:2d:b7:61:38:a7:08:c6:59:52:55:c7:
eb:e8:4f:8d:ce:6b:6d:d7:8b:9d:a2:33:e3:ea:c7:
34:f2:54:68:48:92:2a:9a:9e:14:e4:cc:a5:97:ec:
a2:c3:f7:44:cf:32:d2:08:50:70:ec:9b:30:14:0e:
98:58:cb:b4:d9:85:92:94:e5:ff:c0:02:ad:72:55:
45:a9:09:a5:af:7b:65:6f:cf:ed:70:1c:e5:24:a6:
0f:3b:3e:7d:47:b1:0c:0e:97:f3:5f:e2:42:a3:2c:
86:e5:16:01:9d:fa:a0:a8:f8:79:0e:f9:10:ed:f5:
fb:0b:51:eb:da:9a:c0:f3:6c:c8:a7:ed:e9:71:b1:
e2:3f:5e:a7:5e:f4:1f:10:47:81:c9:95:e0:2e:9d:
13:16:2d:27:4b:f2:d5:e3:46:96:03:e0:bc:ac:37:
d4:72:97:95:28:bc:05:c9:18:89:28:f0:e7:2e:27:
61:90:3d:ba:51:77:33:5b:dd:6e:64:e1:b2:cf:32:
82:b4:6a:42:66:04:5b:83:be:31:e4:df:3b:85:f9:
5a:89:37:63:27:2a:af:3b:53:2b:90:77:e2:c1:55:
d1:0b:a5:2d:3f:62:8c:e6:be:93:c3:0b:60:53:7c:
31:ab:ef:aa:23:8a:7c:ad:94:bc:fd:58:51:53:3b:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1B:0B:39:17:C6:53:39:33:C0:70:33:F2:C0:1C:00:02:C2:2E:45
X509v3 Authority Key Identifier:
keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:53:19:fc:fa:57:5c:5e:50:df:8f:ec:fa:9d:a9:2a:69:49:
3d:1a:ce:ae:d0:33:67:16:c3:09:00:f9:e7:9b:fc:c4:e4:d3:
0f:d4:6c:4c:6b:eb:64:c7:1f:47:03:38:5d:88:e4:e3:8a:f3:
1f:17:4a:8a:76:87:4d:7b:c0:5d:8d:68:51:0f:1f:47:d3:b7:
51:35:5d:f8:fc:d5:83:a2:d7:a8:a4:3a:ed:88:f9:2d:ef:d6:
d6:2b:85:b2:88:58:6e:cb:97:6c:ce:1e:36:7e:ed:39:39:02:
bd:c2:c8:c8:f7:a7:1f:e6:83:41:f9:3e:60:1a:a6:f7:8c:18:
50:7d:28:ce:a0:8a:d5:88:76:58:94:2b:f0:fa:da:c3:74:2f:
d0:5f:cb:65:a4:4f:12:06:04:d8:1d:e1:96:1d:46:a8:aa:5c:
a5:b1:ed:50:2a:56:42:ac:0f:77:dc:62:19:fb:2a:7c:fd:72:
b3:b0:42:04:45:e7:de:f7:e9:47:3b:d1:e9:62:5c:3b:76:24:
87:e5:8c:b0:1f:e1:72:6c:74:08:cd:a9:61:06:02:5d:75:99:
b1:a7:6c:31:33:2c:76:36:45:67:5e:69:08:97:ae:59:31:cf:
aa:b7:f7:d7:06:9c:ae:9e:67:55:61:03:34:4e:d2:63:9b:d4:
f3:6c:a8:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoyM6Z4o9bMn0blLgvi6wIGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MGUzYjdkZmJkNTk5MTBmZTUyN2NjN2UyOWFmNjRkNTM4
MDZjOTEwHhcNMjUxMDI5MjMwMDM2WhcNMjUxMDMwMjMwMDM2WjAzMTEwLwYDVQQD
Eyg0YTFiMGIzOTE3YzY1MzM5MzNjMDcwMzNmMmMwMWMwMDAyYzIyZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+z6LbdhOKcIxllSVcfr6E+Nzmtt
14udojPj6sc08lRoSJIqmp4U5Myll+yiw/dEzzLSCFBw7JswFA6YWMu02YWSlOX/
wAKtclVFqQmlr3tlb8/tcBzlJKYPOz59R7EMDpfzX+JCoyyG5RYBnfqgqPh5DvkQ
7fX7C1Hr2prA82zIp+3pcbHiP16nXvQfEEeByZXgLp0TFi0nS/LV40aWA+C8rDfU
cpeVKLwFyRiJKPDnLidhkD26UXczW91uZOGyzzKCtGpCZgRbg74x5N87hflaiTdj
JyqvO1MrkHfiwVXRC6UtP2KM5r6TwwtgU3wxq++qI4p8rZS8/VhRUzsg/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEobCzkXxlM5M8BwM/LAHAACwi5FMB8GA1UdIwQY
MBaAFAUOO3371ZkQ/lJ8x+Ka9k1TgGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTIt
NGE4Nzc5ZTQ3OGM2LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTItNGE4Nzc5ZTQ3OGM2
LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFMZ/PpX
XF5Q34/s+p2pKmlJPRrOrtAzZxbDCQD555v8xOTTD9RsTGvrZMcfRwM4XYjk44rz
HxdKinaHTXvAXY1oUQ8fR9O3UTVd+PzVg6LXqKQ67Yj5Le/W1iuFsohYbsuXbM4e
Nn7tOTkCvcLIyPenH+aDQfk+YBqm94wYUH0ozqCK1Yh2WJQr8Praw3Qv0F/LZaRP
EgYE2B3hlh1GqKpcpbHtUCpWQqwPd9xiGfsqfP1ys7BCBEXn3vfpRzvR6WJcO3Yk
h+WMsB/hcmx0CM2pYQYCXXWZsadsMTMsdjZFZ15pCJeuWTHPqrf31wacrp5nVWED
NE7SY5vU82yoiA==
-----END CERTIFICATE-----
Generated at Thu Oct 30 06:39:32 2025 by rpki-client