Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
File: bnED-oWs7FfEZIWRzD5Bzff-45c.mft (raw, json)
Hash identifier: Uswb6f0Daa0AzZzNzlYrtI6f88geEv2dGSOwcV0nGsU=
Subject key identifier: A4:E2:21:BB:27:A0:61:C9:7F:C4:07:88:99:99:F0:7F:DB:4C:30:74
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Certificate issuer: /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial: 019A714A37465A19BEB8B8EFE997EE31F3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
Manifest number: 0ED3
Signing time: Tue 11 Nov 2025 05:01:20 +0000
Manifest this update: Tue 11 Nov 2025 05:01:20 +0000
Manifest next update: Wed 12 Nov 2025 05:01:20 +0000
Files and hashes: 1: Q75VcKpJN1_xp-QM_NM8W4Tp-04.roa (hash: Wt2+g51E+wWSkSdRcanf7BFfmX/qewZOJ77oXxIMQTM=)
2: bnED-oWs7FfEZIWRzD5Bzff-45c.crl (hash: TSLDtlph/u8/aCmhIgCr5GHPytXcV4GVak6Yj3mzoLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:37:46:5a:19:be:b8:b8:ef:e9:97:ee:31:f3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Validity
Not Before: Nov 11 05:01:20 2025 GMT
Not After : Nov 12 05:01:20 2025 GMT
Subject: CN=a4e221bb27a061c97fc407889999f07fdb4c3074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:77:ee:77:7e:f9:4f:cc:46:95:a6:28:36:7a:
2e:6f:7d:86:32:c0:68:00:ec:d6:83:1f:1f:8d:b2:
01:18:fb:b5:3c:a3:a0:9c:f3:72:fe:4a:64:37:0b:
19:4d:59:f8:98:49:c1:07:52:5d:10:66:af:54:05:
5c:76:5c:cb:ab:a7:3e:fc:77:48:bb:2b:b4:9d:e1:
b8:0b:a8:58:fa:4e:c1:8c:21:6a:67:2e:60:ef:c2:
22:f3:3e:84:b9:9b:dc:5d:af:3c:bd:64:80:e5:82:
66:a9:1a:b1:54:5a:14:09:5a:2a:aa:93:6e:b2:82:
e7:ce:dc:31:e0:60:be:64:30:e6:66:2f:56:71:92:
50:b0:6f:cf:db:5a:f4:65:17:f7:d4:e9:41:a2:1e:
de:53:00:eb:6e:a1:90:a1:14:9c:69:73:82:20:a3:
dd:01:56:24:d0:bd:ae:50:29:56:cb:a2:b3:c6:9c:
28:a5:0f:da:e1:43:83:c5:39:01:cd:47:e3:95:75:
86:f8:c6:1c:b6:df:13:eb:48:a2:cf:0c:7b:e0:66:
74:00:5e:7c:1f:95:1d:74:00:8f:87:84:c7:a3:27:
52:b9:c2:f4:ed:c5:9d:34:d4:73:86:f2:ac:c4:75:
10:b3:0e:ed:29:11:95:63:c7:a5:07:11:8d:fb:a8:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E2:21:BB:27:A0:61:C9:7F:C4:07:88:99:99:F0:7F:DB:4C:30:74
X509v3 Authority Key Identifier:
keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a0:a0:20:c9:77:2b:7c:f4:81:c1:cb:9a:42:02:02:48:0d:
7d:dd:b1:d0:0e:0d:36:20:88:4d:96:5d:f6:bb:5c:ea:10:82:
ff:ad:57:a8:58:39:21:7f:c6:e6:75:78:5a:ba:16:7d:18:cd:
a5:a2:e5:65:6e:90:e6:8b:b1:39:f9:3f:58:20:ed:e1:d6:b0:
98:5c:50:a2:c7:c0:13:e5:62:36:0b:90:41:4f:72:37:07:75:
e9:b9:f8:25:86:15:39:3e:63:f3:d8:d1:30:59:f3:7b:91:c1:
f0:73:56:67:e7:e1:61:d6:a5:32:43:58:38:f1:b1:7b:a9:d2:
af:1d:77:5f:a6:9a:cb:a0:01:29:67:64:f0:2a:18:61:4a:1f:
64:42:ed:aa:5d:46:27:03:fe:9d:32:0c:de:83:6d:17:83:e4:
9d:80:d3:c7:e7:6c:1c:d4:d5:e3:0d:c5:b9:e9:0d:e4:32:86:
bd:d5:b5:f7:e4:41:9c:54:7c:18:09:be:00:e6:01:aa:9e:5d:
c9:ef:6c:87:2d:17:11:22:ed:b1:88:06:21:13:40:e5:cf:88:
bc:e2:21:66:16:ac:0b:36:9f:4a:6b:51:0d:1f:9e:18:7c:a9:
61:fa:8e:b4:13:df:06:18:ce:d7:58:1a:f9:ff:9c:b9:a7:d8:
1b:18:8a:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSjdGWhm+uLjv6ZfuMfPwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNzEwM2ZhODVhY2VjNTdjNDY0ODU5MWNjM2U0MWNkZjdm
ZWUzOTcwHhcNMjUxMTExMDUwMTIwWhcNMjUxMTEyMDUwMTIwWjAzMTEwLwYDVQQD
EyhhNGUyMjFiYjI3YTA2MWM5N2ZjNDA3ODg5OTk5ZjA3ZmRiNGMzMDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nfud375T8xGlaYoNnoub32GMsBo
AOzWgx8fjbIBGPu1PKOgnPNy/kpkNwsZTVn4mEnBB1JdEGavVAVcdlzLq6c+/HdI
uyu0neG4C6hY+k7BjCFqZy5g78Ii8z6EuZvcXa88vWSA5YJmqRqxVFoUCVoqqpNu
soLnztwx4GC+ZDDmZi9WcZJQsG/P21r0ZRf31OlBoh7eUwDrbqGQoRScaXOCIKPd
AVYk0L2uUClWy6KzxpwopQ/a4UODxTkBzUfjlXWG+MYctt8T60iizwx74GZ0AF58
H5UddACPh4THoydSucL07cWdNNRzhvKsxHUQsw7tKRGVY8elBxGN+6hhBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTiIbsnoGHJf8QHiJmZ8H/bTDB0MB8GA1UdIwQY
MBaAFG5xA/qFrOxXxGSFkcw+Qc33/uOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wNjgwM2YtZGQyZS00ZmQxLTlhN2Yt
YmJmODI2YWE2N2MwLzEvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wNjgwM2YtZGQyZS00ZmQxLTlhN2YtYmJmODI2YWE2N2Mw
LzEvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKCgIMl3
K3z0gcHLmkICAkgNfd2x0A4NNiCITZZd9rtc6hCC/61XqFg5IX/G5nV4WroWfRjN
paLlZW6Q5ouxOfk/WCDt4dawmFxQosfAE+ViNguQQU9yNwd16bn4JYYVOT5j89jR
MFnze5HB8HNWZ+fhYdalMkNYOPGxe6nSrx13X6aay6ABKWdk8CoYYUofZELtql1G
JwP+nTIM3oNtF4PknYDTx+dsHNTV4w3FuekN5DKGvdW19+RBnFR8GAm+AOYBqp5d
ye9shy0XESLtsYgGIRNA5c+IvOIhZhasCzafSmtRDR+eGHypYfqOtBPfBhjO11ga
+f+cuafYGxiK0A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:41 2025 by rpki-client