Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: gKFIeU2TZLJ50+GenjdukppvxXgN5HzLsVDWpcftJ/k=
Subject key identifier: 3C:7C:E1:26:DE:B8:84:E2:F4:0F:17:DF:BC:64:11:A7:EC:64:94:55
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 019A0523C64131209858C890168DDDB665C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0BAB
Signing time: Tue 21 Oct 2025 05:00:21 +0000
Manifest this update: Tue 21 Oct 2025 05:00:21 +0000
Manifest next update: Wed 22 Oct 2025 05:00:21 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: Dg+NyNRBjwljI+PW8PR4860RYEi65C+6re0JisKjySI=)
2: UiH643w1GrSMb8MdWOXuMKoflu8.roa (hash: Ox1u3sls+4F8aVo0Ns4HTUNM65vIvg8OdP6tILBOlsE=)
3: rLCMQEvNZKScfiZ6xzabxSP9S3Q.roa (hash: pzK0hpbuvro5D5X8t6Q8snrn8GpjD/ysREOxL+vWCA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:23:c6:41:31:20:98:58:c8:90:16:8d:dd:b6:65:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Oct 21 05:00:21 2025 GMT
Not After : Oct 22 05:00:21 2025 GMT
Subject: CN=3c7ce126deb884e2f40f17dfbc6411a7ec649455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:23:6b:75:8f:39:85:b3:40:6c:18:f6:e7:10:
a9:4d:5c:75:63:98:e3:8b:fd:31:82:ac:53:09:7c:
ff:9f:9a:f5:4b:d8:0a:fe:14:b1:8d:aa:3f:f8:91:
d3:9a:db:dd:e3:b6:e7:2e:4e:a8:8d:c4:19:28:b3:
eb:2f:2e:5e:72:71:f7:ad:4c:80:5e:eb:1c:ad:5d:
60:5a:8a:a2:d7:1f:da:ca:21:2b:e8:d2:f6:82:63:
db:15:29:a9:7d:79:ea:25:fa:73:e6:f0:b5:a5:4f:
71:8e:6c:ed:9c:f3:7e:a4:a6:88:02:b5:bf:49:fa:
6e:98:36:16:9d:4b:0d:53:91:e4:8e:fc:f9:11:8d:
9f:a1:b4:27:ed:c1:05:15:8d:cd:20:39:05:a2:e8:
3d:bc:c5:77:24:47:3e:11:fe:77:d2:13:34:c6:be:
a7:dd:66:f9:e4:28:d2:47:2b:4b:9f:3f:bc:72:7c:
1e:4a:a5:7a:f2:a7:12:5c:af:74:4b:41:62:7b:0e:
fd:31:0f:17:d3:2d:01:9a:34:aa:06:fd:82:1c:c2:
88:1d:8d:c3:88:87:26:30:d0:da:ba:de:5d:e9:a9:
cb:5e:cd:3d:a0:96:f1:5c:96:18:4d:ad:6f:25:d4:
00:27:c8:a4:8d:55:8c:55:49:f9:7d:99:0c:ae:2f:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7C:E1:26:DE:B8:84:E2:F4:0F:17:DF:BC:64:11:A7:EC:64:94:55
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:af:a6:d1:ff:04:1b:7a:bd:ee:bb:1a:16:a3:fc:d6:3f:72:
01:4e:2f:44:2c:93:ad:8f:c4:dd:2e:cc:57:e2:95:20:0e:1e:
c6:c4:f2:26:cc:0d:90:f6:6f:68:f3:ae:5e:26:fd:b4:63:23:
0e:4e:4b:27:b9:f7:2d:de:ed:d8:d6:db:d4:b8:65:a7:7f:27:
f5:be:ee:70:b0:2e:12:fb:a5:7a:99:0b:40:b3:54:ad:06:71:
23:04:93:dc:cf:6e:0a:52:45:31:3e:b7:5c:57:f6:b2:28:cb:
aa:5c:2f:28:08:e3:43:9b:f0:09:22:c6:1c:54:55:8c:ba:fc:
f2:64:26:20:48:40:35:ea:ef:5e:fd:b0:2a:1a:44:d6:fd:a5:
e6:5d:a9:ea:5b:00:95:e1:66:9f:3a:e8:e1:6b:1a:79:87:cb:
5e:a3:1c:d9:f7:c6:d5:0c:16:8b:3b:0f:29:d8:b9:af:09:7f:
3c:e2:ab:20:f5:49:f8:ed:af:24:e2:76:e8:d6:5f:9d:ea:b0:
7e:bc:7c:03:8e:37:5d:2a:c2:98:a6:8c:1f:c5:8d:57:1b:e7:
9f:2a:22:43:4c:f6:f2:c3:0a:5f:a9:26:bc:d9:d0:d3:36:eb:
68:bc:76:cc:85:0f:24:a1:31:e8:6b:ec:52:31:b8:ba:b5:e0:
a5:ec:28:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoFI8ZBMSCYWMiQFo3dtmXHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YzVmMWQxNzc5ZWI3MDkwOTAzNjVkYjk4MjkxN2FkZmQw
ZjgwNDkwHhcNMjUxMDIxMDUwMDIxWhcNMjUxMDIyMDUwMDIxWjAzMTEwLwYDVQQD
EygzYzdjZTEyNmRlYjg4NGUyZjQwZjE3ZGZiYzY0MTFhN2VjNjQ5NDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SNrdY85hbNAbBj25xCpTVx1Y5jj
i/0xgqxTCXz/n5r1S9gK/hSxjao/+JHTmtvd47bnLk6ojcQZKLPrLy5ecnH3rUyA
XuscrV1gWoqi1x/ayiEr6NL2gmPbFSmpfXnqJfpz5vC1pU9xjmztnPN+pKaIArW/
SfpumDYWnUsNU5Hkjvz5EY2fobQn7cEFFY3NIDkFoug9vMV3JEc+Ef530hM0xr6n
3Wb55CjSRytLnz+8cnweSqV68qcSXK90S0Fiew79MQ8X0y0BmjSqBv2CHMKIHY3D
iIcmMNDaut5d6anLXs09oJbxXJYYTa1vJdQAJ8ikjVWMVUn5fZkMri/3IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDx84SbeuITi9A8X37xkEafsZJRVMB8GA1UdIwQY
MBaAFATF8dF3nrcJCQNl25gpF639D4BJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYt
MDU5MjQ1M2RmN2QyLzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYtMDU5MjQ1M2RmN2Qy
LzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtq+m0f8E
G3q97rsaFqP81j9yAU4vRCyTrY/E3S7MV+KVIA4exsTyJswNkPZvaPOuXib9tGMj
Dk5LJ7n3Ld7t2Nbb1Lhlp38n9b7ucLAuEvulepkLQLNUrQZxIwST3M9uClJFMT63
XFf2sijLqlwvKAjjQ5vwCSLGHFRVjLr88mQmIEhANervXv2wKhpE1v2l5l2p6lsA
leFmnzro4WsaeYfLXqMc2ffG1QwWizsPKdi5rwl/POKrIPVJ+O2vJOJ26NZfneqw
frx8A443XSrCmKaMH8WNVxvnnyoiQ0z28sMKX6kmvNnQ0zbraLx2zIUPJKEx6Gvs
UjG4urXgpewoXw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 14:13:06 2025 by rpki-client