Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
File: BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json)
Hash identifier: h4/gVQzgzSv2gzFo/Tj8TRqvUab5aJ467yr4yNYWD4s=
Subject key identifier: EF:D1:0A:E9:7D:5B:25:AB:7C:05:59:AC:60:22:B1:8B:8E:09:C7:5D
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial: 019A28F981A4EB69C070C9AD40459365AAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 04:00:31 +0000
Manifest this update: Tue 28 Oct 2025 04:00:31 +0000
Manifest next update: Wed 29 Oct 2025 04:00:31 +0000
Files and hashes: 1: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: Os+tpIp/RkKgchlIIkShWTgOSoLA5q3QOyDeaJAKimk=)
2: ddJdWwJ-x_kxknxp8wqmg5-PURw.roa (hash: /8Ho4F9DZAAaxfNKmXvihlaELQ9Ew+7q5ew0DKDsGRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:81:a4:eb:69:c0:70:c9:ad:40:45:93:65:aa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Validity
Not Before: Oct 28 04:00:31 2025 GMT
Not After : Oct 29 04:00:31 2025 GMT
Subject: CN=efd10ae97d5b25ab7c0559ac6022b18b8e09c75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1e:18:f4:d4:88:31:54:b0:7f:e5:7e:41:a6:
e4:d0:9a:d3:76:76:cb:7a:de:47:68:e8:e4:e0:20:
22:5f:aa:56:e3:6f:e0:bc:8f:c8:4a:0c:3b:c9:78:
4a:dc:b0:06:2a:15:4e:b9:b2:36:78:16:bd:e3:da:
2b:2b:cd:c4:92:8f:8e:c5:59:ef:28:0f:65:91:35:
b4:00:54:31:b5:7a:b8:13:63:a2:b5:a2:fc:3f:28:
bd:79:8c:1c:a9:e6:d1:f6:e9:2e:4d:16:e0:2f:1b:
92:f6:7e:97:76:1f:52:2d:2d:f5:f3:c6:cd:df:ea:
2c:21:9d:a5:dc:0b:4e:b5:71:f1:50:4b:90:40:bc:
5c:39:54:17:71:04:50:53:9a:20:bc:65:b2:4e:56:
91:5f:d8:21:60:4a:d4:00:bd:2a:2e:bd:1e:48:e4:
b9:f5:ff:af:5f:cc:6d:6e:3d:00:ba:1c:d3:4b:4d:
ed:08:a9:05:85:59:2f:87:c2:76:16:5b:8b:dd:b4:
5a:b1:48:3d:bb:66:bc:0a:33:7c:81:32:a2:84:28:
7c:87:21:e1:9e:52:04:70:00:db:89:e5:b2:db:cc:
8d:99:cb:01:10:56:31:0c:85:28:70:11:dd:a2:58:
f3:cc:71:55:90:18:fc:c3:83:b6:cd:32:2e:1a:1d:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D1:0A:E9:7D:5B:25:AB:7C:05:59:AC:60:22:B1:8B:8E:09:C7:5D
X509v3 Authority Key Identifier:
keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:09:81:62:e9:5b:d1:7b:71:79:6b:f3:d2:b8:63:90:a7:8d:
91:70:ce:f9:e2:f3:bf:db:72:6e:96:83:b2:59:11:71:54:a6:
69:eb:0a:f0:8a:be:a9:23:43:3d:7d:b8:f3:4b:3f:44:a7:fd:
4c:02:72:db:96:f5:40:ba:74:f7:19:9f:8a:bb:2a:64:72:27:
08:07:5f:81:29:2e:7c:66:19:19:de:fe:09:40:d4:f2:70:88:
bf:d4:37:29:19:e2:d2:66:f4:e8:4d:6e:c7:87:85:60:6e:a0:
b4:2a:99:36:f0:80:94:6f:1a:1b:86:e3:05:48:3f:bf:ff:1e:
75:37:b5:1f:58:5a:30:c9:7f:3d:00:88:fb:b0:e4:c5:1b:5a:
a6:94:2a:d3:c6:14:5d:22:22:1e:ff:db:5f:7c:e4:49:f7:59:
95:f0:fb:3d:d7:16:43:4d:b6:8f:db:4c:54:c4:aa:aa:92:81:
b3:2c:2a:2b:70:c4:e1:ab:bc:a5:e7:ec:66:c9:e9:eb:47:fc:
f6:f7:a3:52:f4:31:9e:0f:1c:8a:81:0b:56:cf:95:07:5c:4b:
5e:24:90:00:3f:20:cd:41:d3:53:5e:f2:1d:8c:a3:41:3c:48:
51:15:de:fc:16:2c:b4:69:29:ea:d1:b8:c6:5b:76:cd:0c:ff:
20:5f:85:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoo+YGk62nAcMmtQEWTZarwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmY3ZTZjNGQxM2VlYTFlNWJkOWY5NzIxZGM4Y2ZiMzY5
Y2RiZmUwHhcNMjUxMDI4MDQwMDMxWhcNMjUxMDI5MDQwMDMxWjAzMTEwLwYDVQQD
EyhlZmQxMGFlOTdkNWIyNWFiN2MwNTU5YWM2MDIyYjE4YjhlMDljNzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR4Y9NSIMVSwf+V+Qabk0JrTdnbL
et5HaOjk4CAiX6pW42/gvI/ISgw7yXhK3LAGKhVOubI2eBa949orK83Eko+OxVnv
KA9lkTW0AFQxtXq4E2OitaL8Pyi9eYwcqebR9ukuTRbgLxuS9n6Xdh9SLS3188bN
3+osIZ2l3AtOtXHxUEuQQLxcOVQXcQRQU5ogvGWyTlaRX9ghYErUAL0qLr0eSOS5
9f+vX8xtbj0AuhzTS03tCKkFhVkvh8J2FluL3bRasUg9u2a8CjN8gTKihCh8hyHh
nlIEcADbieWy28yNmcsBEFYxDIUocBHdoljzzHFVkBj8w4O2zTIuGh36GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/RCul9WyWrfAVZrGAisYuOCcddMB8GA1UdIwQY
MBaAFAVvfmxNE+6h5b2flyHcjPs2nNv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYt
ODczYzE4OWZjNDlmLzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYtODczYzE4OWZjNDlm
LzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwmBYulb
0XtxeWvz0rhjkKeNkXDO+eLzv9tybpaDslkRcVSmaesK8Iq+qSNDPX2480s/RKf9
TAJy25b1QLp09xmfirsqZHInCAdfgSkufGYZGd7+CUDU8nCIv9Q3KRni0mb06E1u
x4eFYG6gtCqZNvCAlG8aG4bjBUg/v/8edTe1H1haMMl/PQCI+7DkxRtappQq08YU
XSIiHv/bX3zkSfdZlfD7PdcWQ022j9tMVMSqqpKBsywqK3DE4au8pefsZsnp60f8
9vejUvQxng8cioELVs+VB1xLXiSQAD8gzUHTU17yHYyjQTxIURXe/BYstGkp6tG4
xlt2zQz/IF+FDQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 14:09:57 2025 by rpki-client