
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier: dy76ZN7F6IcJGfhKXzZwd/hQzPvOTkXRUicMniYLvSM=
Subject key identifier: 37:42:48:29:CE:DD:F2:2C:AD:36:46:7C:14:DF:DF:D2:91:1A:8C:04
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 019A85E3C15FAE7E77D59BA80D0EFAE0043E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number: 172A
Signing time: Sat 15 Nov 2025 05:01:27 +0000
Manifest this update: Sat 15 Nov 2025 05:01:27 +0000
Manifest next update: Sun 16 Nov 2025 05:01:27 +0000
Files and hashes: 1: 0pJ-rwxVG5S_Uu-XF3E61P1dlA8.roa (hash: dUKNac33kPa6HT3Uru5uUtqJz9KxFM++FuLr8tWIwQw=)
2: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: S/TrLhfnU4fXSQpS+ERqoQEZlGs4C5/IT6vs3/Fdo5A=)
3: C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa (hash: py0bRoLaWPaWD7mBA8fr/sS/KCotH7gRuFvSUFDN9Vk=)
4: H0pXo5dsrJce4F8oF2aIhMCPMVs.roa (hash: ZGDB62uG+S6SJD7pxCgAYxf3KDMdMuMZc4Ygah4Ns68=)
5: NUPQRS0ooRsar2f147MR7z_4vbA.roa (hash: CmMZuOujUXhdqhz27/qbC9mkinQYp7izfWsg278vT1s=)
6: SY-0R9mhRAOxVSEqgVexZv7lI7M.roa (hash: 6QqgZClw2wSt67aU88jN6fAOVu+vkIOWukLNHCc1CkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Nov 2025 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:85:e3:c1:5f:ae:7e:77:d5:9b:a8:0d:0e:fa:e0:04:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Nov 15 05:01:27 2025 GMT
Not After : Nov 16 05:01:27 2025 GMT
Subject: CN=37424829ceddf22cad36467c14dfdfd2911a8c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a7:2e:fb:0a:5a:5c:89:17:0d:90:e2:c3:3f:
0d:41:c5:97:83:79:d0:91:76:c0:50:41:09:95:6f:
d2:fc:fd:79:78:ab:e7:a2:b3:af:6a:f4:e2:85:b0:
e6:04:4a:c0:f2:b6:c3:4d:c4:45:b4:23:98:06:3e:
c6:c5:d9:7c:52:f8:92:f5:07:70:41:fc:20:b3:6e:
78:f7:e0:88:36:94:9d:15:fa:94:6f:8e:a8:e5:51:
c1:83:1a:eb:bd:42:d2:98:28:cb:04:7c:20:c3:9f:
8a:b5:f5:c2:ba:1a:81:7f:0b:62:0e:89:90:09:42:
8f:f3:22:35:a4:b3:64:06:32:2c:af:2c:5f:4d:38:
b5:91:f7:f9:77:c7:1f:17:5c:a1:2e:f2:19:9f:39:
df:42:cc:f8:33:15:17:f6:84:5f:ca:88:52:9b:6e:
6c:13:50:dd:af:89:07:cb:04:aa:5b:0c:1e:ed:c6:
9a:31:9a:2f:1d:3f:37:57:6b:d9:c0:64:05:88:ef:
94:87:e7:85:39:83:3f:cb:51:cd:46:0c:97:7c:29:
d3:3b:fe:3d:b8:76:4c:4e:93:f4:19:24:11:8d:de:
02:f0:44:28:ef:e1:a3:4e:98:4f:f1:a0:67:0e:3a:
ef:1c:db:f5:89:7b:1f:b4:23:6f:44:54:5b:20:34:
65:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:42:48:29:CE:DD:F2:2C:AD:36:46:7C:14:DF:DF:D2:91:1A:8C:04
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b4:a0:27:98:f5:ed:99:0a:7b:fe:c6:ec:17:41:4e:ee:37:
21:73:6e:b9:6e:e9:61:1c:72:02:8c:b6:d1:8e:4b:f9:b5:82:
78:38:9c:41:e1:06:87:07:e1:ae:17:da:9a:20:96:39:97:33:
bd:68:75:1e:56:b1:c7:1e:bb:40:dd:13:33:bf:3d:79:98:c6:
2f:41:1c:a1:1a:80:78:de:2b:1c:80:c8:9f:d9:60:2a:d1:ba:
32:97:4d:c5:8a:a4:e3:84:c4:40:85:6c:93:25:77:11:6a:d5:
30:42:c8:3c:a5:90:f1:3b:48:4d:dd:a9:22:e8:81:c8:59:6a:
e1:f2:e3:6b:39:43:e1:f1:35:58:4a:a5:2f:86:14:57:6f:1c:
87:e0:d5:11:25:d7:d7:cf:f4:e9:d2:14:81:d8:59:6b:b3:95:
9e:4e:9f:dc:88:e7:4c:90:cd:39:01:2d:9e:4c:ec:ba:3a:d9:
27:4e:36:40:cc:7f:5b:3e:96:82:b0:0b:85:26:cc:df:8f:d7:
b8:96:c6:07:b5:a5:e3:8a:29:9a:ab:b1:36:32:04:db:e6:ce:
ea:ec:40:cc:8b:df:28:75:a5:53:73:30:7d:17:46:7a:ab:30:
05:9d:73:6d:82:89:34:7b:e3:49:25:36:70:61:49:7a:2d:96:
d9:51:91:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZqF48Ffrn531ZuoDQ764AQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz
MGFlMzkwHhcNMjUxMTE1MDUwMTI3WhcNMjUxMTE2MDUwMTI3WjAzMTEwLwYDVQQD
EygzNzQyNDgyOWNlZGRmMjJjYWQzNjQ2N2MxNGRmZGZkMjkxMWE4YzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1acu+wpaXIkXDZDiwz8NQcWXg3nQ
kXbAUEEJlW/S/P15eKvnorOvavTihbDmBErA8rbDTcRFtCOYBj7Gxdl8UviS9Qdw
Qfwgs2549+CINpSdFfqUb46o5VHBgxrrvULSmCjLBHwgw5+KtfXCuhqBfwtiDomQ
CUKP8yI1pLNkBjIsryxfTTi1kff5d8cfF1yhLvIZnznfQsz4MxUX9oRfyohSm25s
E1Ddr4kHywSqWwwe7caaMZovHT83V2vZwGQFiO+Uh+eFOYM/y1HNRgyXfCnTO/49
uHZMTpP0GSQRjd4C8EQo7+GjTphP8aBnDjrvHNv1iXsftCNvRFRbIDRl1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdCSCnO3fIsrTZGfBTf39KRGowEMB8GA1UdIwQY
MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt
YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw
LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrSgJ5j1
7ZkKe/7G7BdBTu43IXNuuW7pYRxyAoy20Y5L+bWCeDicQeEGhwfhrhfamiCWOZcz
vWh1Hlaxxx67QN0TM789eZjGL0EcoRqAeN4rHIDIn9lgKtG6MpdNxYqk44TEQIVs
kyV3EWrVMELIPKWQ8TtITd2pIuiByFlq4fLjazlD4fE1WEqlL4YUV28ch+DVESXX
18/06dIUgdhZa7OVnk6f3IjnTJDNOQEtnkzsujrZJ042QMx/Wz6WgrALhSbM34/X
uJbGB7Wl44opmquxNjIE2+bO6uxAzIvfKHWlU3MwfRdGeqswBZ1zbYKJNHvjSSU2
cGFJei2W2VGRSw==
-----END CERTIFICATE-----
Generated at Sat Nov 15 09:14:17 2025 by rpki-client