Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
File: BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft (raw, json)
Hash identifier: pRFK4zTKh2cRWSDds3fItZxpznXdvVGgdeQsfOEuY8U=
Subject key identifier: 36:05:0C:9D:BF:31:EC:B7:04:EB:D9:D5:A6:4F:E6:C0:74:DA:DF:CA
Authority key identifier: 06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
Certificate issuer: /CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Certificate serial: 019A71EE69F41453850F4E8880FAB26F46BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
Manifest number: 03E2
Signing time: Tue 11 Nov 2025 08:00:41 +0000
Manifest this update: Tue 11 Nov 2025 08:00:41 +0000
Manifest next update: Wed 12 Nov 2025 08:00:41 +0000
Files and hashes: 1: BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl (hash: UTMSsM3PG+Bp757jaO0d5Q9NQLrsoaSqdBZns6yOSdg=)
2: IBb1HqZFTHsm_sCmjR2ccm8RUCA.roa (hash: KJ8NP0RBTfkNOG7Be7nzu7TlYeYPrpFzbgBEOJgWVgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:69:f4:14:53:85:0f:4e:88:80:fa:b2:6f:46:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Validity
Not Before: Nov 11 08:00:41 2025 GMT
Not After : Nov 12 08:00:41 2025 GMT
Subject: CN=36050c9dbf31ecb704ebd9d5a64fe6c074dadfca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:2f:1f:77:8e:35:fe:d1:e4:c8:c6:ca:73:
15:d2:2b:12:97:af:dd:7a:0f:f5:7c:d9:95:6a:43:
50:20:41:60:87:97:c8:69:f4:46:30:2b:a1:5c:bf:
f7:1f:46:16:36:4c:32:9e:55:78:d7:fb:a8:ce:96:
49:79:58:ce:4f:33:38:f7:7a:51:11:75:1c:d0:9f:
10:cf:57:a3:ea:48:21:f5:c9:fa:55:65:cb:d1:8b:
1f:7f:e9:c9:c6:8e:e8:cf:1f:ca:20:1b:32:47:f0:
49:10:b8:fc:a9:8f:9d:c0:d8:c3:30:61:1a:cb:cd:
c2:c6:2b:77:88:0b:f4:a9:72:8c:4c:01:7f:5b:53:
d5:cb:54:da:13:3a:65:ca:08:97:78:9c:55:dd:4d:
15:c0:79:b5:b1:bb:aa:73:63:a5:d4:6e:a4:0b:51:
59:f2:2e:2e:56:67:9a:a7:11:9a:f5:e0:62:d6:fc:
eb:58:b7:e5:36:a7:90:66:3e:f6:66:07:5e:23:b7:
96:5a:ac:a5:46:fa:c1:89:c9:a2:08:71:7e:06:26:
1c:6f:10:b9:2f:ed:73:cf:a5:26:a9:8d:1f:88:a8:
51:c1:ee:2a:8b:ec:ee:8d:b0:87:01:af:fc:1b:e5:
6b:f2:34:35:95:00:68:b6:cd:02:4e:83:52:a5:7f:
19:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:05:0C:9D:BF:31:EC:B7:04:EB:D9:D5:A6:4F:E6:C0:74:DA:DF:CA
X509v3 Authority Key Identifier:
keyid:06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:61:a7:63:c4:52:1d:b7:98:0f:5c:4e:87:99:8d:88:d2:6b:
96:9d:17:61:29:7b:57:3a:8f:03:ba:7b:b9:6d:a3:b4:c4:a1:
95:70:73:10:98:d1:ad:a4:63:b7:39:20:2d:27:e8:f6:09:ee:
b6:0d:63:3a:3f:52:43:dd:98:3d:9d:c3:e4:a4:f3:04:43:9e:
42:25:57:5c:d3:6a:c4:bb:91:64:68:ba:3b:79:5e:64:15:bc:
da:49:ab:f2:25:4d:54:7f:0d:52:5a:77:f4:08:4b:5f:9e:53:
78:e4:51:dd:a3:06:47:5b:fa:1a:c4:ff:26:d6:9e:8a:c7:46:
ff:b6:fb:8e:10:14:43:52:5a:be:b7:ae:93:61:48:a9:59:a4:
a5:1d:43:23:7f:d9:83:c0:2e:ee:8b:92:8e:ff:9f:be:a2:1b:
dd:50:f0:05:58:08:7d:e9:77:5a:69:5f:3e:00:11:f9:58:80:
07:57:8c:ac:3d:1a:3f:50:5a:b7:9c:9e:3c:1d:95:c3:bf:3e:
ef:1d:1c:ef:32:3f:55:8b:99:eb:cc:3e:f2:c0:81:16:21:90:
07:40:31:08:64:a3:b2:f8:fe:e1:bb:fc:d7:64:28:db:86:58:
75:86:a7:67:4b:b4:79:d2:9d:6f:4a:32:59:16:ea:90:fe:61:
82:41:4b:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7mn0FFOFD06IgPqyb0a6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MTg4YWRmZDE2NDQ1YTJhMDE0ZTAxMmU3MzliYjgxMmZl
OWNkMGUwHhcNMjUxMTExMDgwMDQxWhcNMjUxMTEyMDgwMDQxWjAzMTEwLwYDVQQD
EygzNjA1MGM5ZGJmMzFlY2I3MDRlYmQ5ZDVhNjRmZTZjMDc0ZGFkZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqYvH3eONf7R5MjGynMV0isSl6/d
eg/1fNmVakNQIEFgh5fIafRGMCuhXL/3H0YWNkwynlV41/uozpZJeVjOTzM493pR
EXUc0J8Qz1ej6kgh9cn6VWXL0Ysff+nJxo7ozx/KIBsyR/BJELj8qY+dwNjDMGEa
y83Cxit3iAv0qXKMTAF/W1PVy1TaEzplygiXeJxV3U0VwHm1sbuqc2Ol1G6kC1FZ
8i4uVmeapxGa9eBi1vzrWLflNqeQZj72ZgdeI7eWWqylRvrBicmiCHF+BiYcbxC5
L+1zz6UmqY0fiKhRwe4qi+zujbCHAa/8G+Vr8jQ1lQBots0CToNSpX8ZrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYFDJ2/Mey3BOvZ1aZP5sB02t/KMB8GA1UdIwQY
MBaAFAYYit/RZEWioBTgEuc5u4Ev6c0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmhpSzM5RmtSYUtnRk9BUzV6bTdnU19welE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xY2YwYTgtMWJlMi00OWZhLTgxNTEt
ZGY2Y2FiNGU0NWI0LzEvQmhpSzM5RmtSYUtnRk9BUzV6bTdnU19welE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8xY2YwYTgtMWJlMi00OWZhLTgxNTEtZGY2Y2FiNGU0NWI0
LzEvQmhpSzM5RmtSYUtnRk9BUzV6bTdnU19welE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGGnY8RS
HbeYD1xOh5mNiNJrlp0XYSl7VzqPA7p7uW2jtMShlXBzEJjRraRjtzkgLSfo9gnu
tg1jOj9SQ92YPZ3D5KTzBEOeQiVXXNNqxLuRZGi6O3leZBW82kmr8iVNVH8NUlp3
9AhLX55TeORR3aMGR1v6GsT/JtaeisdG/7b7jhAUQ1Javreuk2FIqVmkpR1DI3/Z
g8Au7ouSjv+fvqIb3VDwBVgIfel3WmlfPgAR+ViAB1eMrD0aP1Bat5yePB2Vw78+
7x0c7zI/VYuZ68w+8sCBFiGQB0AxCGSjsvj+4bv812Qo24ZYdYanZ0u0edKdb0oy
WRbqkP5hgkFL1w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:50 2025 by rpki-client