Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
File: bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft (raw, json)
Hash identifier: RwWbY8MsIwblx8r/dZtkmk415JlxYog+6HkHlq6yGbY=
Subject key identifier: 0E:44:BF:63:4B:AB:47:46:4B:97:88:DA:06:8D:E9:6D:44:9E:4D:37
Authority key identifier: 6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
Certificate issuer: /CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Certificate serial: 019A72CAB83E2B96BE7556BCDD72A9B60A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
Manifest number: 03DB
Signing time: Tue 11 Nov 2025 12:01:19 +0000
Manifest this update: Tue 11 Nov 2025 12:01:19 +0000
Manifest next update: Wed 12 Nov 2025 12:01:19 +0000
Files and hashes: 1: MYDLO2vvDKfPNW5B_jde2eQkJYg.roa (hash: wV9kbvDo8W5gfhdwsvfFoAGi3mrp4nPR/cUxhX5vacM=)
2: bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl (hash: 8WAd0Q90AIwKpHs0t5aRFoAn6XeRQlpE0fFOcqWLWL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:b8:3e:2b:96:be:75:56:bc:dd:72:a9:b6:0a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Validity
Not Before: Nov 11 12:01:19 2025 GMT
Not After : Nov 12 12:01:19 2025 GMT
Subject: CN=0e44bf634bab47464b9788da068de96d449e4d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:b6:ef:5d:92:4c:14:d0:71:7e:9f:50:f0:
f2:e4:29:b0:68:47:be:63:d0:27:cd:47:4b:94:68:
af:e1:8e:5f:0f:57:1d:14:20:d5:67:04:28:9a:cb:
7b:2e:6f:d2:fa:2f:ac:cf:86:cd:b4:a8:b2:73:a1:
4a:b7:4d:52:4f:ec:7e:59:ff:05:76:77:d2:a7:54:
62:1b:60:b2:aa:bb:22:fc:99:2e:92:17:be:50:2d:
24:d9:81:f4:bf:f1:8c:1a:5f:2f:d1:32:06:cf:e9:
01:89:f0:de:56:cd:7d:ba:e5:ca:f9:27:11:a1:c6:
9c:a8:66:ee:a3:45:89:3a:6a:8e:aa:7a:bf:e4:f8:
bb:f5:8b:9a:c8:07:8c:ea:6e:55:7c:b3:13:5a:c8:
87:50:26:c3:dc:e3:35:66:ca:22:42:f9:a4:02:8b:
18:b4:71:1b:3a:45:3c:b3:67:e4:76:8b:2b:a5:4d:
4f:a3:0b:75:71:d5:20:9c:e1:d5:a9:8e:94:0b:01:
43:27:65:c4:da:e1:eb:58:35:3d:5f:d9:53:7f:3d:
49:5d:7a:fd:c0:53:26:bf:6b:1a:8f:b8:c4:e8:51:
91:f0:f9:82:3a:06:27:15:0f:44:18:88:b1:80:df:
18:6f:e6:8c:9c:d0:c3:68:11:f9:ee:ba:d5:8d:d0:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:44:BF:63:4B:AB:47:46:4B:97:88:DA:06:8D:E9:6D:44:9E:4D:37
X509v3 Authority Key Identifier:
keyid:6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4e:ec:dc:45:54:84:db:d7:e0:d4:7f:67:08:b5:15:b5:7b:
fd:91:31:3c:66:6f:a6:e0:71:bf:3d:92:8f:ee:df:b8:99:cf:
6a:07:8d:2a:36:56:91:74:f1:b6:a7:4f:46:fb:07:8f:82:bb:
be:14:ca:07:9e:fc:56:b2:f2:0e:4f:3f:76:8c:43:22:fb:5a:
8a:7f:da:76:b2:31:2a:b1:16:36:cc:5e:81:78:4f:59:02:28:
83:9f:36:8e:e1:b9:b4:37:fe:7a:60:d8:f7:0d:cd:0f:b9:dd:
aa:ad:dc:22:8f:5f:f3:05:e5:fc:3d:3c:f5:84:e3:86:95:26:
4e:db:a3:0f:77:16:a4:fa:88:3d:fe:73:0a:cf:21:3b:d1:2c:
42:cb:06:48:84:41:c3:31:0e:c2:93:02:bb:72:b4:3d:95:9a:
e8:63:11:c4:a5:ff:df:fe:31:c9:a4:1f:1b:1b:82:cb:84:a1:
fa:f8:80:db:21:4f:95:25:7c:43:80:27:d1:fd:94:67:12:75:
1c:59:38:f3:3c:7b:19:b0:86:0a:71:36:fc:9e:11:04:88:45:
5b:f3:f0:cf:13:c3:b2:89:e5:8e:a4:e8:35:83:71:31:c7:b7:
9b:f3:ee:46:15:9f:21:ec:cf:a1:bc:05:2f:76:e5:ca:3c:2b:
30:c2:9b:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyrg+K5a+dVa83XKptgqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYzM4NTNkYTcwY2RlYTBkYmE0NjQxNGI2YjBlNmQxZjE3
MTZlNzQwHhcNMjUxMTExMTIwMTE5WhcNMjUxMTEyMTIwMTE5WjAzMTEwLwYDVQQD
EygwZTQ0YmY2MzRiYWI0NzQ2NGI5Nzg4ZGEwNjhkZTk2ZDQ0OWU0ZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfq2712STBTQcX6fUPDy5CmwaEe+
Y9AnzUdLlGiv4Y5fD1cdFCDVZwQomst7Lm/S+i+sz4bNtKiyc6FKt01ST+x+Wf8F
dnfSp1RiG2Cyqrsi/Jkukhe+UC0k2YH0v/GMGl8v0TIGz+kBifDeVs19uuXK+ScR
ocacqGbuo0WJOmqOqnq/5Pi79YuayAeM6m5VfLMTWsiHUCbD3OM1ZsoiQvmkAosY
tHEbOkU8s2fkdosrpU1Powt1cdUgnOHVqY6UCwFDJ2XE2uHrWDU9X9lTfz1JXXr9
wFMmv2saj7jE6FGR8PmCOgYnFQ9EGIixgN8Yb+aMnNDDaBH57rrVjdA9xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5Ev2NLq0dGS5eI2gaN6W1Enk03MB8GA1UdIwQY
MBaAFGzDhT2nDN6g26RkFLaw5tHxcW50MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk1PRlBhY00zcURicEdRVXRyRG0wZkZ4Ym5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kMTI4ZGUtZDYxZC00ZjAzLTkxMzQt
MDQ2YTY4YWI0YzhkLzEvYk1PRlBhY00zcURicEdRVXRyRG0wZkZ4Ym5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9kMTI4ZGUtZDYxZC00ZjAzLTkxMzQtMDQ2YTY4YWI0Yzhk
LzEvYk1PRlBhY00zcURicEdRVXRyRG0wZkZ4Ym5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMU7s3EVU
hNvX4NR/Zwi1FbV7/ZExPGZvpuBxvz2Sj+7fuJnPageNKjZWkXTxtqdPRvsHj4K7
vhTKB578VrLyDk8/doxDIvtain/adrIxKrEWNsxegXhPWQIog582juG5tDf+emDY
9w3ND7ndqq3cIo9f8wXl/D089YTjhpUmTtujD3cWpPqIPf5zCs8hO9EsQssGSIRB
wzEOwpMCu3K0PZWa6GMRxKX/3/4xyaQfGxuCy4Sh+viA2yFPlSV8Q4An0f2UZxJ1
HFk48zx7GbCGCnE2/J4RBIhFW/PwzxPDsonljqToNYNxMce3m/PuRhWfIezPobwF
L3blyjwrMMKbxQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:09 2025 by rpki-client