Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
File: bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft (raw, json)
Hash identifier: KP6fTLSU6Z0P9Ws1HMEP3eOoM59hudh8lX9OosJbz2w=
Subject key identifier: 54:51:B1:3F:69:33:5F:D8:E7:30:7F:8C:0A:10:A0:72:7C:91:61:38
Authority key identifier: 6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
Certificate issuer: /CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Certificate serial: 019855A0D67A21F67120580CD1074BDBE098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
Manifest number: 05C0
Signing time: Tue 29 Jul 2025 10:01:00 +0000
Manifest this update: Tue 29 Jul 2025 10:01:00 +0000
Manifest next update: Wed 30 Jul 2025 10:01:00 +0000
Files and hashes: 1: bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl (hash: h1pogTUvuj0gLPZVpC2SSeP7x4Y7ZcbFBFTGHdUxkWE=)
2: kepUhm0anFry8RwMMkqJayre0fg.roa (hash: HEBHciDc0e+f+TYCTKlbfrh1hJ9IXR8LLwkK0vX0JYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a0:d6:7a:21:f6:71:20:58:0c:d1:07:4b:db:e0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Validity
Not Before: Jul 29 10:01:00 2025 GMT
Not After : Jul 30 10:01:00 2025 GMT
Subject: CN=5451b13f69335fd8e7307f8c0a10a0727c916138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:03:67:af:8f:09:c3:88:eb:b2:a3:b9:b6:0d:
e8:8f:b9:63:fb:5b:e8:77:48:30:3a:a0:f8:1c:e4:
fe:86:c4:d2:29:04:8a:1a:6c:fd:54:27:05:f0:02:
fb:b1:80:34:2d:41:69:8f:bb:50:16:29:df:bb:22:
c5:2c:8f:8e:3f:98:95:b7:cc:16:f4:a2:56:8e:19:
a5:b1:be:a3:89:9d:bb:0d:88:a8:95:6a:dd:c6:a6:
8e:a1:8f:b4:3a:a5:37:be:79:e2:33:46:08:eb:bc:
85:e1:b6:18:82:9b:96:05:9f:d7:38:40:6f:1f:d5:
96:f7:b6:1f:75:33:e8:79:c0:e2:76:ac:03:c9:a6:
27:53:a1:3d:19:54:3d:1a:0a:40:52:37:c8:08:b4:
4a:b7:f8:18:b1:60:18:a4:c8:b9:e8:b6:1a:11:d3:
43:bd:f8:28:63:08:c6:45:c4:72:44:d6:5f:dc:f7:
09:02:be:00:00:5f:42:ff:ed:c1:a1:48:7d:4e:b2:
de:e9:37:7d:9c:c2:5c:5d:d2:ac:c7:20:72:c2:d8:
71:a8:e1:81:f6:21:bb:0f:36:7a:c6:73:ce:6c:cc:
93:23:51:4c:02:11:47:2d:75:a6:9c:c5:b4:6d:fb:
aa:ef:95:0b:ca:f2:76:0e:44:d8:f1:95:a5:4f:85:
43:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:51:B1:3F:69:33:5F:D8:E7:30:7F:8C:0A:10:A0:72:7C:91:61:38
X509v3 Authority Key Identifier:
keyid:6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:06:f0:50:f5:11:95:07:eb:41:ba:1d:9e:ff:86:0a:00:11:
f3:33:0f:e6:cc:9c:0b:6b:aa:96:2f:84:9e:17:41:05:37:8f:
2b:58:20:2b:e5:b9:f9:24:9c:01:a4:de:06:99:33:cd:ce:27:
f1:9b:64:49:36:e8:b1:14:d9:51:f1:89:93:22:ea:d7:bb:19:
1d:09:97:fb:fe:e0:68:8b:59:f6:38:a5:c6:7f:ca:85:08:65:
11:69:6c:1c:32:e0:10:0d:7f:93:39:c6:40:8f:19:da:68:86:
7b:e2:12:e4:75:c9:71:3c:7f:8c:81:1c:d5:18:e0:7f:c8:5a:
33:fe:74:26:24:b7:38:0f:74:54:cc:69:f1:19:db:34:b6:23:
3e:6c:c8:e9:0f:27:b5:ab:d4:59:b1:1a:a1:c9:66:04:d0:87:
b8:b3:5b:97:56:67:d9:56:b2:2e:58:91:81:5e:1f:c6:b3:c8:
c9:31:71:7b:79:fa:5b:34:1f:91:c7:62:b3:8b:32:29:ff:88:
81:4d:1b:11:c8:0d:97:f2:ad:9d:90:ec:7f:f6:89:cb:1d:74:
10:30:79:71:e1:8a:43:5a:f3:b3:f0:c3:6a:25:33:f1:b3:b1:
8f:1b:a4:ce:d0:b4:5b:0f:f5:80:7d:17:a9:d7:2c:d8:4f:0c:
bb:2e:11:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:37:09 2025 by rpki-client