Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
File: BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft (raw, json)
Hash identifier: GAsSoCnGHwBBO6nQHBn67Mb29MWFpFQn1U6b55Wr9Zk=
Subject key identifier: 14:48:F5:1C:35:51:9A:49:36:28:BC:C1:92:9C:5C:AB:56:EB:B2:D7
Authority key identifier: 05:6C:66:D4:5F:E7:E2:F3:55:99:57:2A:77:6B:12:76:4D:C6:9A:01
Certificate issuer: /CN=056c66d45fe7e2f35599572a776b12764dc69a01
Certificate serial: 019A725C9D22219056B67BFB6B172413F276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
Manifest number: 0125
Signing time: Tue 11 Nov 2025 10:01:03 +0000
Manifest this update: Tue 11 Nov 2025 10:01:03 +0000
Manifest next update: Wed 12 Nov 2025 10:01:03 +0000
Files and hashes: 1: BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl (hash: D6GlwsbxJlxDGs8opc18TDYdbow29/daUsUHSllR8Hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:9d:22:21:90:56:b6:7b:fb:6b:17:24:13:f2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056c66d45fe7e2f35599572a776b12764dc69a01
Validity
Not Before: Nov 11 10:01:03 2025 GMT
Not After : Nov 12 10:01:03 2025 GMT
Subject: CN=1448f51c35519a493628bcc1929c5cab56ebb2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:91:d8:13:9f:95:68:f4:ae:a7:5a:1a:7f:
f2:88:cd:4e:3b:27:a7:55:25:03:a9:d2:7c:1e:20:
35:01:29:b3:f3:04:9d:90:69:b0:c1:d1:5c:05:ae:
7c:26:3a:c8:9d:ee:b9:2c:b5:32:16:ef:67:56:83:
25:53:ce:10:8c:42:d0:c0:07:64:db:c0:f1:56:11:
04:ca:46:9e:39:8a:58:ca:46:d2:b6:0c:c7:df:fc:
14:db:36:73:ab:f5:27:dc:cb:25:5b:04:55:07:c9:
99:9a:00:6f:49:c2:97:4f:bf:a9:43:ea:a1:d5:74:
af:0b:8c:d2:2e:e7:d6:0d:8d:66:e2:51:9b:9f:a9:
8a:78:4e:7e:1a:42:e7:b6:87:37:2a:f6:7a:d7:06:
e4:6e:e2:6c:3a:da:f9:6a:3f:ba:ba:5d:14:a3:d4:
4a:4b:d8:5c:2f:27:16:e8:66:c4:78:42:9f:a1:6d:
d2:97:1e:f9:25:9e:3e:f5:af:fd:37:ed:2a:e4:dc:
89:7c:e0:f8:9b:a7:31:f0:e4:1e:70:05:a2:f4:40:
e6:e6:85:9d:5d:63:7a:60:37:21:b4:94:00:ca:ee:
1a:b1:28:b8:42:19:13:9e:0f:46:df:95:30:9e:4c:
bc:01:64:4d:0a:a3:04:f4:40:ad:e8:29:05:cb:41:
73:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:48:F5:1C:35:51:9A:49:36:28:BC:C1:92:9C:5C:AB:56:EB:B2:D7
X509v3 Authority Key Identifier:
keyid:05:6C:66:D4:5F:E7:E2:F3:55:99:57:2A:77:6B:12:76:4D:C6:9A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:49:74:2b:8d:61:c5:06:e2:0b:e8:65:9b:1e:11:a0:ae:17:
ad:77:43:d7:21:e2:b4:5d:c0:6f:69:1b:7e:80:d8:b6:3d:5a:
69:8e:e4:7d:7d:3a:03:74:47:69:17:23:06:bf:e0:71:6e:a1:
dd:a2:b4:08:2a:05:c2:55:9b:ad:d5:ef:3a:ec:18:c2:ee:80:
0b:97:a5:64:c0:39:62:74:d1:e3:c3:db:87:e1:56:7c:14:e3:
1f:71:93:18:0e:0b:5c:96:2a:95:97:a0:be:df:43:52:64:7f:
84:dc:c2:8e:7e:7b:01:b6:4c:df:2f:18:9e:dd:ea:c3:2a:df:
88:a7:8e:d9:6f:fc:84:59:aa:04:6b:da:16:f4:c9:07:cd:84:
05:60:43:19:cf:b3:a0:b0:93:fb:1b:ba:c8:66:3a:01:8e:91:
1a:c8:b2:20:0a:fe:91:e2:7e:ee:86:eb:bb:8f:b9:4e:40:ce:
01:37:48:c6:da:50:fc:ef:6a:4e:d5:fb:7b:55:47:8b:68:e1:
0e:3b:fd:e7:fe:5d:ac:84:59:e4:08:47:0c:e6:27:31:5b:bb:
e3:eb:8a:9a:46:40:b9:28:da:c1:cc:9e:8e:e8:4b:13:ae:5d:
2e:09:c1:e2:81:2b:3a:f1:ee:7a:0a:b6:20:a8:28:60:80:93:
26:04:88:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXJ0iIZBWtnv7axckE/J2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmM2NmQ0NWZlN2UyZjM1NTk5NTcyYTc3NmIxMjc2NGRj
NjlhMDEwHhcNMjUxMTExMTAwMTAzWhcNMjUxMTEyMTAwMTAzWjAzMTEwLwYDVQQD
EygxNDQ4ZjUxYzM1NTE5YTQ5MzYyOGJjYzE5MjljNWNhYjU2ZWJiMmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GaR2BOflWj0rqdaGn/yiM1OOyen
VSUDqdJ8HiA1ASmz8wSdkGmwwdFcBa58JjrIne65LLUyFu9nVoMlU84QjELQwAdk
28DxVhEEykaeOYpYykbStgzH3/wU2zZzq/Un3MslWwRVB8mZmgBvScKXT7+pQ+qh
1XSvC4zSLufWDY1m4lGbn6mKeE5+GkLntoc3KvZ61wbkbuJsOtr5aj+6ul0Uo9RK
S9hcLycW6GbEeEKfoW3Slx75JZ4+9a/9N+0q5NyJfOD4m6cx8OQecAWi9EDm5oWd
XWN6YDchtJQAyu4asSi4QhkTng9G35Uwnky8AWRNCqME9ECt6CkFy0FzfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRI9Rw1UZpJNii8wZKcXKtW67LXMB8GA1UdIwQY
MBaAFAVsZtRf5+LzVZlXKndrEnZNxpoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQld4bTFGX240dk5WbVZjcWQyc1NkazNHbWdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jMDJjNWMtZWExNy00ODkzLTg1ZTAt
MDIwNTQ2MGU4OTkwLzEvQld4bTFGX240dk5WbVZjcWQyc1NkazNHbWdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jMDJjNWMtZWExNy00ODkzLTg1ZTAtMDIwNTQ2MGU4OTkw
LzEvQld4bTFGX240dk5WbVZjcWQyc1NkazNHbWdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0l0K41h
xQbiC+hlmx4RoK4XrXdD1yHitF3Ab2kbfoDYtj1aaY7kfX06A3RHaRcjBr/gcW6h
3aK0CCoFwlWbrdXvOuwYwu6AC5elZMA5YnTR48Pbh+FWfBTjH3GTGA4LXJYqlZeg
vt9DUmR/hNzCjn57AbZM3y8Ynt3qwyrfiKeO2W/8hFmqBGvaFvTJB82EBWBDGc+z
oLCT+xu6yGY6AY6RGsiyIAr+keJ+7obru4+5TkDOATdIxtpQ/O9qTtX7e1VHi2jh
Djv95/5drIRZ5AhHDOYnMVu74+uKmkZAuSjawcyejuhLE65dLgnB4oErOvHuegq2
IKgoYICTJgSI8Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:33 2025 by rpki-client