Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
File: bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft (raw, json)
Hash identifier: 7Id+wTlYoJrhpIymr8nqJXOkc+pQ0bsl26zk2OpsMAg=
Subject key identifier: DC:44:B8:BF:C3:34:DF:7A:84:EB:E9:F6:43:35:3C:83:10:C2:D8:9C
Authority key identifier: 6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
Certificate issuer: /CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Certificate serial: 019A71B7D1315B329BFC9115F92CE159A147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
Manifest number: 157E
Signing time: Tue 11 Nov 2025 07:01:03 +0000
Manifest this update: Tue 11 Nov 2025 07:01:03 +0000
Manifest next update: Wed 12 Nov 2025 07:01:03 +0000
Files and hashes: 1: 1-w5DNPlIhExlDG3JJ8YehKY8B2s.roa (hash: 2oDdXXuxPyseKyeUOGZKSwRrTeZuxQlLGL5+bIlribY=)
2: bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl (hash: pcXSdrbyMolEadqxeYk6oXHFfRl52FjPm+zKNTbL4gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d1:31:5b:32:9b:fc:91:15:f9:2c:e1:59:a1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Validity
Not Before: Nov 11 07:01:03 2025 GMT
Not After : Nov 12 07:01:03 2025 GMT
Subject: CN=dc44b8bfc334df7a84ebe9f643353c8310c2d89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:89:96:6f:4a:82:c2:8a:13:d6:ea:f7:96:f5:
31:61:92:0d:98:74:bc:22:e6:10:00:0e:fe:f6:13:
25:9a:c6:99:5d:55:38:6e:e9:45:57:97:7a:1b:fb:
e0:09:77:c7:ce:ec:26:82:fe:cb:e1:7b:ca:1f:7b:
70:d2:5f:cf:c2:01:fa:00:4b:0e:07:db:5d:60:dd:
e1:67:31:0c:50:83:8f:34:fd:f4:ab:fc:c5:07:75:
f5:5a:37:b8:a1:bd:ae:00:50:91:7f:5f:51:4a:3f:
08:fa:69:ed:a8:33:a5:47:ca:50:38:47:f0:47:2c:
08:48:a5:af:e8:ae:9a:2f:9b:f8:45:97:55:48:2e:
51:a4:db:ad:d0:96:3b:34:9b:8a:80:85:3d:6a:6e:
44:30:9d:91:bb:81:b3:56:d5:04:e7:83:78:6e:5e:
6e:81:6c:75:f6:a7:46:3e:8a:49:6b:93:ed:16:7a:
e8:88:75:91:93:12:77:fd:e9:c4:ea:34:65:16:8b:
59:4a:45:c2:2f:7a:49:3a:f3:86:7e:84:d0:04:75:
59:22:c7:0c:38:7b:a7:99:4d:f6:2b:07:db:9d:8c:
0c:08:b1:f9:af:59:9f:1c:76:de:a2:9b:32:f9:31:
ad:ad:1b:4d:1b:4c:45:db:f8:1a:27:18:ba:bf:b2:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:44:B8:BF:C3:34:DF:7A:84:EB:E9:F6:43:35:3C:83:10:C2:D8:9C
X509v3 Authority Key Identifier:
keyid:6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c3:e0:c7:88:d1:ae:90:69:b6:2e:2b:e1:99:56:81:11:cc:
ae:71:bf:0a:15:4e:5b:34:fb:b4:8a:90:12:3d:31:66:ef:5c:
64:35:33:d2:6a:3a:f6:2c:b6:da:5b:92:f5:51:dd:c5:8a:c8:
71:7b:ed:4b:22:ff:f2:ef:e8:b6:61:b1:0c:ad:09:ec:11:3b:
5f:74:96:ec:78:7d:5e:11:11:de:19:c2:c4:d1:f0:db:23:31:
56:b4:f2:44:14:ce:0a:08:d0:8b:66:06:d1:9e:49:74:df:18:
cf:92:45:bf:0b:be:77:05:e3:f6:79:cf:eb:7c:a7:10:05:ca:
85:c2:d5:15:2f:f4:7b:ea:53:8e:af:89:a8:88:fc:b5:14:c6:
66:e0:19:90:fd:56:34:f8:00:a4:05:7b:b2:76:81:6a:3c:8f:
4f:47:a0:06:fa:d4:89:f0:ca:9d:3e:29:b1:6b:3e:94:43:13:
ae:0e:6d:4e:33:fb:ef:df:83:5f:03:9a:b2:3c:fa:13:76:65:
d6:71:30:41:c8:fa:7d:fa:fc:a5:97:7c:d1:ea:a9:db:06:df:
22:c5:63:a7:ed:3d:26:e7:59:3a:99:25:12:9c:29:41:a7:92:
a0:e6:8c:da:35:cf:53:0a:e6:f3:5d:ff:fc:06:f7:51:dc:cd:
e1:32:dd:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt9ExWzKb/JEV+SzhWaFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMGM4MDMxODE3N2JjMTZiNzIzODNmOGUwOTJkNTJhM2Fl
MTMzYjQwHhcNMjUxMTExMDcwMTAzWhcNMjUxMTEyMDcwMTAzWjAzMTEwLwYDVQQD
EyhkYzQ0YjhiZmMzMzRkZjdhODRlYmU5ZjY0MzM1M2M4MzEwYzJkODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8omWb0qCwooT1ur3lvUxYZINmHS8
IuYQAA7+9hMlmsaZXVU4bulFV5d6G/vgCXfHzuwmgv7L4XvKH3tw0l/PwgH6AEsO
B9tdYN3hZzEMUIOPNP30q/zFB3X1Wje4ob2uAFCRf19RSj8I+mntqDOlR8pQOEfw
RywISKWv6K6aL5v4RZdVSC5RpNut0JY7NJuKgIU9am5EMJ2Ru4GzVtUE54N4bl5u
gWx19qdGPopJa5PtFnroiHWRkxJ3/enE6jRlFotZSkXCL3pJOvOGfoTQBHVZIscM
OHunmU32KwfbnYwMCLH5r1mfHHbeopsy+TGtrRtNG0xF2/gaJxi6v7LnzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxEuL/DNN96hOvp9kM1PIMQwticMB8GA1UdIwQY
MBaAFG0MgDGBd7wWtyOD+OCS1So64TO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zMWJkMDctOWExZi00MzQ1LWE2NmIt
Nzk0MjQwNDAxNmYzLzEvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8zMWJkMDctOWExZi00MzQ1LWE2NmItNzk0MjQwNDAxNmYz
LzEvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsPgx4jR
rpBpti4r4ZlWgRHMrnG/ChVOWzT7tIqQEj0xZu9cZDUz0mo69iy22luS9VHdxYrI
cXvtSyL/8u/otmGxDK0J7BE7X3SW7Hh9XhER3hnCxNHw2yMxVrTyRBTOCgjQi2YG
0Z5JdN8Yz5JFvwu+dwXj9nnP63ynEAXKhcLVFS/0e+pTjq+JqIj8tRTGZuAZkP1W
NPgApAV7snaBajyPT0egBvrUifDKnT4psWs+lEMTrg5tTjP779+DXwOasjz6E3Zl
1nEwQcj6ffr8pZd80eqp2wbfIsVjp+09JudZOpklEpwpQaeSoOaM2jXPUwrm813/
/Ab3UdzN4TLdkQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:05 2025 by rpki-client