Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: w0IiF861wEbuZ0/vG2Q/7wrUVU/OY4l+hxx1mIhprvs=
Subject key identifier: B0:C3:9B:5F:CB:4D:F2:D2:D5:22:61:4E:49:0D:C7:67:D0:5A:8A:7E
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 019A71B910472346E97C88D1144AD962F3CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:02:25 +0000
Manifest this update: Tue 11 Nov 2025 07:02:25 +0000
Manifest next update: Wed 12 Nov 2025 07:02:25 +0000
Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: wLZVDRDO3+rbWmdRLuPBqVVJkh9xufK1H7HlJZhEt/c=)
2: NQNN2zI--5W9phAw1FPsrLGEYwA.roa (hash: vTr80Rx2MWq5UoQZbNWzT5PuHgBwID0hr0ao7hRy9dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:10:47:23:46:e9:7c:88:d1:14:4a:d9:62:f3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Nov 11 07:02:25 2025 GMT
Not After : Nov 12 07:02:25 2025 GMT
Subject: CN=b0c39b5fcb4df2d2d522614e490dc767d05a8a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:cd:a6:2c:fa:57:ec:55:e4:65:ad:69:8d:
ea:3b:19:69:5a:d7:eb:df:b5:59:1a:3e:0a:7f:c3:
60:62:52:07:5a:a6:9a:22:6d:d3:d2:f2:90:d7:a3:
c9:58:64:39:a9:97:ae:dd:77:f6:95:c7:c0:29:07:
c0:b2:4c:b2:77:38:5a:30:6f:16:63:60:94:dc:e4:
4b:7c:cb:84:b4:d1:b4:6a:8e:b6:ef:0f:a5:5f:02:
e3:dd:48:17:34:a9:70:27:1e:8e:31:5e:aa:bd:fc:
d3:a4:71:69:14:ad:55:37:54:5f:81:a2:98:26:da:
57:07:d4:07:41:37:62:cb:31:6f:3e:ae:10:39:76:
40:94:af:9f:c3:eb:f8:66:f8:df:82:41:a8:ee:d3:
6f:91:78:37:1e:ac:22:2c:99:e6:82:ed:36:86:f3:
d9:4a:cb:e1:26:f1:fc:75:51:25:7e:4b:11:90:80:
df:fa:56:bf:8c:64:a6:1d:07:92:e4:ed:6d:0b:4f:
53:65:39:64:9c:df:6f:93:23:96:50:3a:93:65:b1:
01:04:f7:e7:e6:69:c7:d3:c3:8e:ce:91:79:fc:cb:
63:29:d1:6a:ac:fe:6a:d8:8a:db:1d:8a:dd:c7:d7:
51:f9:c7:4a:1d:7b:f1:ed:ed:b3:4b:62:b9:fd:39:
88:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C3:9B:5F:CB:4D:F2:D2:D5:22:61:4E:49:0D:C7:67:D0:5A:8A:7E
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:58:97:56:28:38:f6:85:fb:11:ed:5f:b4:98:b5:d7:d3:20:
26:c2:e7:3c:c9:ae:ed:93:25:28:d2:8c:ff:c0:3a:3d:fa:21:
94:06:6f:71:52:ab:4b:54:4d:c3:db:7f:5d:2a:5d:1d:60:72:
c9:56:8d:70:29:28:78:0d:b0:0e:30:a1:a5:a9:88:da:0a:4e:
86:9b:9e:90:b7:37:8b:11:84:72:2e:04:91:03:f9:74:bb:34:
f5:96:62:d1:22:3c:15:ea:b5:28:7a:89:15:dd:b4:86:61:5c:
ed:31:67:84:fb:54:a9:6d:69:25:30:ff:dc:53:30:25:83:2c:
9d:87:99:87:cc:cf:37:85:19:1f:49:e9:03:ae:c8:8b:3b:14:
8c:da:16:bf:01:25:3d:58:ee:79:34:41:6e:11:14:ce:b4:be:
16:ec:2f:cb:ae:f6:75:80:2e:18:81:8d:85:14:1a:9d:a8:16:
02:6b:5f:e4:83:75:34:e4:50:db:f7:c3:e3:be:2f:7b:e4:e9:
37:64:c8:5e:b4:10:f9:1f:b1:a9:a2:e1:61:b1:f0:22:21:39:
66:3f:a1:ae:79:ce:c6:d5:41:43:9a:ec:c8:79:af:7e:85:46:
d4:61:18:86:86:99:21:38:0f:c7:1a:81:0e:80:57:6e:4f:7d:
85:32:5e:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuRBHI0bpfIjRFErZYvPOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDkwZmJhNjYzYjA3MmJiNTRjYzdkNDllODhhMDM4MDM3
NGNiNmUwHhcNMjUxMTExMDcwMjI1WhcNMjUxMTEyMDcwMjI1WjAzMTEwLwYDVQQD
EyhiMGMzOWI1ZmNiNGRmMmQyZDUyMjYxNGU0OTBkYzc2N2QwNWE4YTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGjNpiz6V+xV5GWtaY3qOxlpWtfr
37VZGj4Kf8NgYlIHWqaaIm3T0vKQ16PJWGQ5qZeu3Xf2lcfAKQfAskyydzhaMG8W
Y2CU3ORLfMuEtNG0ao627w+lXwLj3UgXNKlwJx6OMV6qvfzTpHFpFK1VN1RfgaKY
JtpXB9QHQTdiyzFvPq4QOXZAlK+fw+v4ZvjfgkGo7tNvkXg3HqwiLJnmgu02hvPZ
SsvhJvH8dVElfksRkIDf+la/jGSmHQeS5O1tC09TZTlknN9vkyOWUDqTZbEBBPfn
5mnH08OOzpF5/MtjKdFqrP5q2IrbHYrdx9dR+cdKHXvx7e2zS2K5/TmI5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDDm1/LTfLS1SJhTkkNx2fQWop+MB8GA1UdIwQY
MBaAFAcJD7pmOwcrtUzH1J6IoDgDdMtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzct
MDFhMjhhNzZjY2Y0LzEvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzctMDFhMjhhNzZjY2Y0
LzEvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbliXVig4
9oX7Ee1ftJi119MgJsLnPMmu7ZMlKNKM/8A6PfohlAZvcVKrS1RNw9t/XSpdHWBy
yVaNcCkoeA2wDjChpamI2gpOhpuekLc3ixGEci4EkQP5dLs09ZZi0SI8Feq1KHqJ
Fd20hmFc7TFnhPtUqW1pJTD/3FMwJYMsnYeZh8zPN4UZH0npA67IizsUjNoWvwEl
PVjueTRBbhEUzrS+Fuwvy672dYAuGIGNhRQanagWAmtf5IN1NORQ2/fD474ve+Tp
N2TIXrQQ+R+xqaLhYbHwIiE5Zj+hrnnOxtVBQ5rsyHmvfoVG1GEYhoaZITgPxxqB
DoBXbk99hTJePQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:57:09 2025 by rpki-client