Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
File: BG82Rli2TivxUNIPyDjDZCB5deI.mft (raw, json)
Hash identifier: qJhLq1fd3uW+ixAnFW+tdtrHVnUVX1aMpXH6OPJEmRo=
Subject key identifier: AE:02:3E:03:4A:2A:60:9F:E6:49:AE:19:F8:7E:7E:4C:4D:7D:AA:70
Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
Certificate issuer: /CN=046f364658b64e2bf150d20fc838c364207975e2
Certificate serial: 019A725C44913FBA39515CB92529CA7E922D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 10:00:40 +0000
Manifest this update: Tue 11 Nov 2025 10:00:40 +0000
Manifest next update: Wed 12 Nov 2025 10:00:40 +0000
Files and hashes: 1: BG82Rli2TivxUNIPyDjDZCB5deI.crl (hash: zOKbqetzwt8oWkvDdw6nJDv2ZweD5te2TJS9hh8dvSc=)
2: qxAUvip_8lZbKoAfeyu3yfK1MRA.roa (hash: Wv+fjRl0zo+z70zGiW88GBq2MX8dxKNwzn9322Y6qM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:44:91:3f:ba:39:51:5c:b9:25:29:ca:7e:92:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2
Validity
Not Before: Nov 11 10:00:40 2025 GMT
Not After : Nov 12 10:00:40 2025 GMT
Subject: CN=ae023e034a2a609fe649ae19f87e7e4c4d7daa70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:ad:00:32:43:f3:21:1b:40:88:32:16:d6:
e7:7f:fe:5e:c2:b8:44:f4:49:c1:06:d7:4f:62:9b:
bf:12:f7:9d:83:c7:53:1d:7f:de:68:e2:27:04:5a:
67:00:9a:72:14:87:9d:51:83:47:33:14:41:53:4f:
3d:4b:0a:b1:50:b1:e4:4d:60:b2:f1:1a:ce:61:e0:
15:00:06:f8:7a:12:b0:cc:17:f3:f1:7b:e1:8c:2b:
3b:04:e2:2b:e4:f9:aa:b5:f1:67:26:05:31:5e:dd:
d3:93:93:39:68:6d:7e:a5:a3:f1:02:f3:0f:9c:2e:
df:7d:75:84:ca:a3:22:dd:f2:f5:9f:e9:2f:c8:d8:
f9:f0:37:fa:87:50:03:2b:5b:23:d0:a8:70:39:95:
d8:0a:4e:58:7e:6a:41:e1:27:ad:d3:29:fb:f0:c1:
9c:44:6b:6b:43:be:ba:db:db:74:a0:12:66:32:60:
91:4b:e8:99:fa:06:68:9e:00:48:fa:ce:3f:4e:75:
07:e5:c3:6c:d7:29:61:bd:df:51:e8:46:ef:73:ec:
d5:98:9e:37:8f:33:d3:13:96:66:24:6b:87:5c:3f:
76:67:04:9d:2a:e5:59:a8:f6:75:ee:a8:1c:b1:a4:
12:82:8a:e3:b9:e1:e3:6a:0d:5c:78:5b:d0:0a:a3:
20:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:02:3E:03:4A:2A:60:9F:E6:49:AE:19:F8:7E:7E:4C:4D:7D:AA:70
X509v3 Authority Key Identifier:
keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ff:bf:ac:4b:e0:d6:e3:89:8f:ab:3f:3d:16:fa:36:fb:12:
be:fa:82:1a:1d:ff:1b:90:75:3f:05:98:f2:3d:ae:28:ab:ea:
16:36:4c:80:e1:96:5a:b0:32:04:a2:4b:b4:f6:44:62:4f:90:
58:8e:8f:fa:27:7e:b1:66:f8:01:19:f6:9b:78:c5:89:25:0f:
b6:de:34:ab:bc:05:b7:f9:b8:c4:00:5e:a5:20:8e:09:20:70:
ef:ab:1b:c3:b7:38:46:57:1c:fc:43:48:ab:da:b9:39:69:1e:
6d:c0:66:e9:9c:60:e1:6e:8c:ed:b7:c2:e4:52:eb:85:e8:49:
b1:92:b1:8d:7b:10:da:a6:4a:76:53:55:f1:c9:f8:31:dd:7e:
32:f0:a1:d6:d0:37:7c:45:09:48:22:5a:42:b5:34:6d:db:58:
09:e2:2b:63:3a:52:b9:31:e3:99:3c:0d:90:d8:9b:d5:29:bd:
bb:31:06:07:b9:c8:3a:a7:f3:3d:38:74:a5:80:52:f7:7c:2c:
73:58:7a:99:e8:88:93:96:6f:0f:b2:23:a4:06:91:79:85:7e:
ca:0f:8b:61:a4:36:39:c9:4c:5f:4a:1f:8f:df:35:82:5b:e9:
87:f5:47:bf:c0:f2:82:d7:b6:87:dd:fb:ea:be:13:5f:86:59:
46:9b:41:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXESRP7o5UVy5JSnKfpItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NmYzNjQ2NThiNjRlMmJmMTUwZDIwZmM4MzhjMzY0MjA3
OTc1ZTIwHhcNMjUxMTExMTAwMDQwWhcNMjUxMTEyMTAwMDQwWjAzMTEwLwYDVQQD
EyhhZTAyM2UwMzRhMmE2MDlmZTY0OWFlMTlmODdlN2U0YzRkN2RhYTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wqtADJD8yEbQIgyFtbnf/5ewrhE
9EnBBtdPYpu/Evedg8dTHX/eaOInBFpnAJpyFIedUYNHMxRBU089SwqxULHkTWCy
8RrOYeAVAAb4ehKwzBfz8XvhjCs7BOIr5PmqtfFnJgUxXt3Tk5M5aG1+paPxAvMP
nC7ffXWEyqMi3fL1n+kvyNj58Df6h1ADK1sj0KhwOZXYCk5YfmpB4Set0yn78MGc
RGtrQ76629t0oBJmMmCRS+iZ+gZongBI+s4/TnUH5cNs1ylhvd9R6Ebvc+zVmJ43
jzPTE5ZmJGuHXD92ZwSdKuVZqPZ17qgcsaQSgorjueHjag1ceFvQCqMgaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4CPgNKKmCf5kmuGfh+fkxNfapwMB8GA1UdIwQY
MBaAFARvNkZYtk4r8VDSD8g4w2QgeXXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEt
YTI1ZTA3Y2VhMmMwLzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEtYTI1ZTA3Y2VhMmMw
LzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUP+/rEvg
1uOJj6s/PRb6NvsSvvqCGh3/G5B1PwWY8j2uKKvqFjZMgOGWWrAyBKJLtPZEYk+Q
WI6P+id+sWb4ARn2m3jFiSUPtt40q7wFt/m4xABepSCOCSBw76sbw7c4Rlcc/ENI
q9q5OWkebcBm6Zxg4W6M7bfC5FLrhehJsZKxjXsQ2qZKdlNV8cn4Md1+MvCh1tA3
fEUJSCJaQrU0bdtYCeIrYzpSuTHjmTwNkNib1Sm9uzEGB7nIOqfzPTh0pYBS93ws
c1h6meiIk5ZvD7IjpAaReYV+yg+LYaQ2OclMX0ofj981glvph/VHv8Dygte2h937
6r4TX4ZZRptB2w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:59 2025 by rpki-client