Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
File: bcXjzvXaXn_fw2TF1aBALTpnhtw.mft (raw, json)
Hash identifier: FGVuOO/zQkP8WFZMK1OxlDA16V+d/T/e+YBPUs+RQ8M=
Subject key identifier: 6E:39:FF:AF:2D:CE:48:4F:F2:4E:2D:87:29:E1:DC:FD:4A:C9:85:A5
Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
Certificate issuer: /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Certificate serial: 019A7149A5B3D38F27D52865729B56065B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
Manifest number: 0FB9
Signing time: Tue 11 Nov 2025 05:00:43 +0000
Manifest this update: Tue 11 Nov 2025 05:00:43 +0000
Manifest next update: Wed 12 Nov 2025 05:00:43 +0000
Files and hashes: 1: DoUsi8lBp24xgpF7Cj5k0M8Xf1k.roa (hash: 8DoQ+UjZ0y3DouoJyhRBNdxsuMKM8IPBGox8SgTwz/M=)
2: bcXjzvXaXn_fw2TF1aBALTpnhtw.crl (hash: bMlNWI9+xo7lCbuq5u7HpivnK6N1s4XnBzOcGVRz2A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a5:b3:d3:8f:27:d5:28:65:72:9b:56:06:5b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Validity
Not Before: Nov 11 05:00:43 2025 GMT
Not After : Nov 12 05:00:43 2025 GMT
Subject: CN=6e39ffaf2dce484ff24e2d8729e1dcfd4ac985a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:31:1b:82:63:c6:fb:89:e3:63:1d:e4:01:
52:d0:6d:4d:71:20:83:7a:1b:c7:b7:2e:30:6f:ca:
9a:17:85:6b:71:94:41:30:ee:97:33:d6:54:6b:ae:
3d:27:67:44:b8:c8:fe:ad:97:c1:4b:98:3a:fd:8d:
12:a8:cf:fe:3d:04:ae:9d:4e:74:e9:ce:82:83:24:
63:b1:5a:c6:08:e1:f3:be:11:a5:45:69:0a:27:78:
94:0d:0c:ba:b5:54:e1:49:2e:94:22:85:d2:60:61:
6f:a1:9b:01:4d:72:da:29:f5:ab:f9:ed:04:d4:09:
24:50:33:45:84:b2:4c:f7:f0:01:86:e9:c0:ed:d7:
bc:0c:fc:02:10:77:25:53:00:d5:bf:c5:81:30:77:
6f:66:0e:a7:40:3e:9d:a6:88:79:72:c8:05:0f:f9:
54:84:90:4f:ef:38:3c:8b:81:79:7e:36:3f:c7:e4:
73:22:84:bb:c9:d7:97:4c:5a:21:16:03:a3:7b:fa:
4b:c3:09:1e:16:2a:2c:13:35:e7:96:68:10:59:6d:
93:f0:42:09:81:04:a2:b1:3a:47:96:ef:32:d6:53:
7a:ff:5d:76:ab:ff:8c:e0:c3:5a:ee:4f:4f:d9:a0:
ad:93:2e:71:c5:eb:95:bc:7e:67:f9:18:7b:8d:45:
bb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:39:FF:AF:2D:CE:48:4F:F2:4E:2D:87:29:E1:DC:FD:4A:C9:85:A5
X509v3 Authority Key Identifier:
keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3b:bb:f2:5a:45:10:d5:28:95:60:f6:75:aa:f2:c9:2a:a0:
92:9d:fe:2b:16:17:84:4a:37:37:f7:4f:86:30:d2:e7:82:6c:
70:c3:c8:fd:51:b7:e7:27:4d:f0:72:e4:2c:ec:b7:25:d5:7b:
7f:f6:24:0f:42:56:e2:ac:95:6a:a2:7d:f2:9b:39:19:76:ec:
72:18:76:ce:68:6c:0a:db:c2:d8:57:c3:69:aa:1d:3c:a1:76:
c7:4e:41:56:54:c5:22:ff:80:96:e2:6c:b7:2a:a1:fc:43:d9:
db:0f:cd:63:5a:19:c8:00:c9:c9:5e:45:f7:d7:ec:4c:b2:ba:
d4:d3:9c:8c:e8:0f:67:c3:03:19:4d:1f:39:16:bb:ed:5f:f8:
5d:db:af:bb:d4:ca:76:15:93:9f:a6:66:5c:12:83:da:e4:76:
c3:c6:99:46:45:d5:14:57:bc:af:fe:eb:4a:37:de:7a:4a:81:
89:c8:db:79:43:78:30:1c:ae:1b:65:71:59:1f:d3:bc:ca:1d:
db:44:2b:eb:b3:dd:5a:99:4b:c4:86:de:f0:dd:5b:12:80:f1:
4f:db:b7:7e:c6:fa:2d:4f:47:d0:dc:b2:44:93:ed:a7:b5:34:
28:47:f1:04:36:4d:18:b5:a8:f1:27:d9:c4:45:48:05:8a:8d:
98:b1:28:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSaWz048n1ShlcptWBlsTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYzVlM2NlZjVkYTVlN2ZkZmMzNjRjNWQ1YTA0MDJkM2E2
Nzg2ZGMwHhcNMjUxMTExMDUwMDQzWhcNMjUxMTEyMDUwMDQzWjAzMTEwLwYDVQQD
Eyg2ZTM5ZmZhZjJkY2U0ODRmZjI0ZTJkODcyOWUxZGNmZDRhYzk4NWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMMxG4JjxvuJ42Md5AFS0G1NcSCD
ehvHty4wb8qaF4VrcZRBMO6XM9ZUa649J2dEuMj+rZfBS5g6/Y0SqM/+PQSunU50
6c6CgyRjsVrGCOHzvhGlRWkKJ3iUDQy6tVThSS6UIoXSYGFvoZsBTXLaKfWr+e0E
1AkkUDNFhLJM9/ABhunA7de8DPwCEHclUwDVv8WBMHdvZg6nQD6dpoh5csgFD/lU
hJBP7zg8i4F5fjY/x+RzIoS7ydeXTFohFgOje/pLwwkeFiosEzXnlmgQWW2T8EIJ
gQSisTpHlu8y1lN6/112q/+M4MNa7k9P2aCtky5xxeuVvH5n+Rh7jUW7bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG45/68tzkhP8k4thynh3P1KyYWlMB8GA1UdIwQY
MBaAFG3F48712l5/38NkxdWgQC06Z4bcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYt
Y2RjYzk2NjA3YjlhLzEvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYtY2RjYzk2NjA3Yjlh
LzEvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzu78lpF
ENUolWD2daryySqgkp3+KxYXhEo3N/dPhjDS54JscMPI/VG35ydN8HLkLOy3JdV7
f/YkD0JW4qyVaqJ98ps5GXbschh2zmhsCtvC2FfDaaodPKF2x05BVlTFIv+AluJs
tyqh/EPZ2w/NY1oZyADJyV5F99fsTLK61NOcjOgPZ8MDGU0fORa77V/4Xduvu9TK
dhWTn6ZmXBKD2uR2w8aZRkXVFFe8r/7rSjfeekqBicjbeUN4MByuG2VxWR/TvMod
20Qr67PdWplLxIbe8N1bEoDxT9u3fsb6LU9H0NyyRJPtp7U0KEfxBDZNGLWo8SfZ
xEVIBYqNmLEoRQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:41 2025 by rpki-client