Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
File: bmvNHuBBUxK6utqWpbTHNRu8pr8.mft (raw, json)
Hash identifier: JCRyZpfoqdjlF/Q0Eh9Q34uXhlgu1FiCXs27jJ2d1Vw=
Subject key identifier: 6E:69:C6:35:2F:FE:22:06:B7:4E:B8:BF:7A:07:74:B5:DD:22:D1:70
Authority key identifier: 6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
Certificate issuer: /CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Certificate serial: 019A725C6FB95D6325D749FCAEE6687B12E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:00:51 +0000
Manifest this update: Tue 11 Nov 2025 10:00:51 +0000
Manifest next update: Wed 12 Nov 2025 10:00:51 +0000
Files and hashes: 1: GI-i99kB9ZZSVKD8l02CbLd6aSk.roa (hash: MonsukLiwzJG84LeZGYkMxgIaza5E2jt6G/wnGkzXY8=)
2: bmvNHuBBUxK6utqWpbTHNRu8pr8.crl (hash: HTY4bmdApHdtrjAGuZWSIIvcI2qgHKr9NkCeA2SkIfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:6f:b9:5d:63:25:d7:49:fc:ae:e6:68:7b:12:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Validity
Not Before: Nov 11 10:00:51 2025 GMT
Not After : Nov 12 10:00:51 2025 GMT
Subject: CN=6e69c6352ffe2206b74eb8bf7a0774b5dd22d170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a5:47:0f:e1:5a:ae:aa:25:0e:78:5c:8f:2e:
94:00:21:ba:33:1b:07:7a:0e:9e:79:12:bb:0f:e1:
f0:11:ef:cc:82:8b:21:7b:69:8a:96:73:4b:31:b2:
dd:b5:56:fe:e1:1d:0e:f8:4b:30:17:95:0e:83:c0:
92:44:59:6f:fc:2c:43:16:82:21:1a:77:6f:cc:62:
ee:6a:f6:ab:78:5b:d1:96:22:d3:6f:5b:27:5e:88:
b1:9a:5b:af:05:b5:5f:da:65:e0:59:90:b6:d3:af:
50:07:0d:15:a5:4b:53:1f:7d:71:00:9f:c4:7b:41:
f0:fb:a4:25:aa:8a:29:d7:5c:71:11:35:91:d1:00:
3c:51:ff:a3:8a:a3:0e:da:7c:a7:78:7b:d1:19:4f:
13:f2:b4:46:58:95:6e:c4:40:ae:7a:9c:88:68:ab:
36:59:38:ab:88:5b:61:95:45:7c:08:c0:c2:c9:7f:
f3:49:9c:b4:71:b3:73:6d:de:d8:4d:ef:ff:80:47:
7e:c3:a8:d9:e0:a6:53:0a:13:a0:e7:60:62:ce:df:
97:59:0e:49:65:ba:ef:33:9b:f5:3a:cf:de:52:9d:
30:a9:44:e3:7f:04:6f:29:05:69:a3:6a:3e:1c:3b:
a3:5b:d3:0d:ba:28:b3:b2:a8:8d:d8:0e:c0:14:c6:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:69:C6:35:2F:FE:22:06:B7:4E:B8:BF:7A:07:74:B5:DD:22:D1:70
X509v3 Authority Key Identifier:
keyid:6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f5:1c:e2:9a:13:d9:7d:c9:ff:ca:b5:34:ce:d2:d8:e8:fd:
b1:91:98:7f:6c:a5:e0:b7:08:41:1c:48:23:5a:2d:c2:45:4a:
9a:06:6c:f5:de:01:32:c1:d2:39:13:59:b7:03:5e:ea:55:68:
b5:26:b7:d6:99:75:7e:0c:a1:f2:f7:4c:f5:29:52:6a:ae:b4:
51:61:ae:74:a6:8c:fe:b6:d8:55:a0:5f:16:f8:43:66:58:96:
ff:82:95:97:44:9b:c6:ea:71:78:ff:ce:0d:a9:a6:c8:0a:3c:
04:8f:3d:13:6d:b1:40:e4:4b:42:c6:78:c0:19:78:c3:16:1b:
44:99:a8:58:eb:aa:f8:aa:cd:ac:bb:6c:c5:f7:2a:5d:fa:f7:
60:2a:13:24:af:d7:65:0c:7a:40:42:ce:28:b0:62:6d:af:8e:
d3:5e:53:05:a5:2c:f8:7d:b6:de:81:03:17:49:88:4b:78:7b:
0f:f0:c9:ce:e7:7c:13:27:d0:0d:c2:cf:27:cd:c8:f9:86:8c:
8a:b3:fd:b3:7d:be:53:ad:6f:60:ea:05:4c:eb:9b:48:92:45:
bc:6f:ac:00:91:1b:4e:93:e3:c1:c4:1e:8d:64:e2:3e:f5:74:
ca:8e:df:96:72:dd:c8:ba:00:48:dc:a9:57:3e:3a:ce:59:7e:
57:d9:f1:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXG+5XWMl10n8ruZoexLlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNmJjZDFlZTA0MTUzMTJiYWJhZGE5NmE1YjRjNzM1MWJi
Y2E2YmYwHhcNMjUxMTExMTAwMDUxWhcNMjUxMTEyMTAwMDUxWjAzMTEwLwYDVQQD
Eyg2ZTY5YzYzNTJmZmUyMjA2Yjc0ZWI4YmY3YTA3NzRiNWRkMjJkMTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqVHD+FarqolDnhcjy6UACG6MxsH
eg6eeRK7D+HwEe/Mgoshe2mKlnNLMbLdtVb+4R0O+EswF5UOg8CSRFlv/CxDFoIh
GndvzGLuavareFvRliLTb1snXoixmluvBbVf2mXgWZC2069QBw0VpUtTH31xAJ/E
e0Hw+6Qlqoop11xxETWR0QA8Uf+jiqMO2nyneHvRGU8T8rRGWJVuxECuepyIaKs2
WTiriFthlUV8CMDCyX/zSZy0cbNzbd7YTe//gEd+w6jZ4KZTChOg52Bizt+XWQ5J
ZbrvM5v1Os/eUp0wqUTjfwRvKQVpo2o+HDujW9MNuiizsqiN2A7AFMZbywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5pxjUv/iIGt064v3oHdLXdItFwMB8GA1UdIwQY
MBaAFG5rzR7gQVMSurralqW0xzUbvKa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm12Tkh1QkJVeEs2dXRxV3BiVEhOUnU4cHI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84MjczMzItMGEwMi00MjNmLWIwN2Yt
MDUyOTBiZWNkYzYxLzEvYm12Tkh1QkJVeEs2dXRxV3BiVEhOUnU4cHI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy84MjczMzItMGEwMi00MjNmLWIwN2YtMDUyOTBiZWNkYzYx
LzEvYm12Tkh1QkJVeEs2dXRxV3BiVEhOUnU4cHI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/Uc4poT
2X3J/8q1NM7S2Oj9sZGYf2yl4LcIQRxII1otwkVKmgZs9d4BMsHSORNZtwNe6lVo
tSa31pl1fgyh8vdM9SlSaq60UWGudKaM/rbYVaBfFvhDZliW/4KVl0SbxupxeP/O
DammyAo8BI89E22xQORLQsZ4wBl4wxYbRJmoWOuq+KrNrLtsxfcqXfr3YCoTJK/X
ZQx6QELOKLBiba+O015TBaUs+H223oEDF0mIS3h7D/DJzud8EyfQDcLPJ83I+YaM
irP9s32+U61vYOoFTOubSJJFvG+sAJEbTpPjwcQejWTiPvV0yo7flnLdyLoASNyp
Vz46zll+V9nxPQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:41 2025 by rpki-client