Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
File: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json)
Hash identifier: c/RstXfoVIr12dhfehDAHQtbQnI4DB9GmvjDn5UAF0Q=
Subject key identifier: BA:1C:A4:95:05:BF:AF:5B:34:22:3D:26:05:91:B9:C8:40:98:2E:9B
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial: 0198CCBA86D9D0DC0FED0368C7B98CC8E7F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
Manifest number: 0BF2
Signing time: Thu 21 Aug 2025 13:03:52 +0000
Manifest this update: Thu 21 Aug 2025 13:03:52 +0000
Manifest next update: Fri 22 Aug 2025 13:03:52 +0000
Files and hashes: 1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: Y0ZKPACF3lQd0a8kwQALetn+QrE7R4uhJdwAzAg4uPA=)
2: ergYcBtNSn5r4Zi1l42KV0S9mDk.roa (hash: uo/5j8D7Yv+RjgeXCM0+M4CRhoYawB/FduDyyKS00RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:ba:86:d9:d0:dc:0f:ed:03:68:c7:b9:8c:c8:e7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Validity
Not Before: Aug 21 13:03:52 2025 GMT
Not After : Aug 22 13:03:52 2025 GMT
Subject: CN=ba1ca49505bfaf5b34223d260591b9c840982e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4d:d7:44:4f:42:92:d4:70:c3:04:f7:ab:fd:
47:18:48:c5:24:f1:1c:da:d0:bc:4c:f7:be:a9:22:
a9:5f:ac:13:d9:37:86:67:61:f9:02:c0:1d:c6:0a:
3f:f4:af:11:99:45:cd:01:fd:ca:50:17:64:86:82:
fa:3d:fe:86:39:96:38:53:6c:a3:dd:31:0a:40:fe:
99:1d:18:c4:2c:05:6c:2b:e7:99:6b:b1:8a:88:34:
e0:7e:c5:39:81:2a:52:48:dd:43:48:ed:c1:5b:3a:
53:a4:ab:ba:a3:41:4f:fa:aa:7a:24:b8:f0:7b:02:
e8:a3:35:f7:81:61:ca:36:61:d7:76:62:e5:01:2e:
9c:c3:4f:05:82:43:dc:88:e6:f2:83:67:20:76:f1:
7f:b9:31:7c:c1:da:19:fc:1f:e0:4d:bb:2f:21:e0:
42:d6:dd:34:c0:03:50:64:40:e6:84:40:96:05:2c:
63:aa:8b:53:dd:86:f2:81:ee:e5:7a:4f:bf:1c:d8:
1b:05:90:18:d6:50:ea:0a:6c:14:9e:ba:54:4f:2e:
a6:28:36:05:a7:5e:9c:47:b5:b3:63:f1:c4:7e:7b:
c9:0c:8e:44:13:e9:44:ea:8d:0b:b7:57:00:89:79:
69:6d:49:f7:ed:70:1b:b0:73:22:d9:97:56:44:79:
4f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1C:A4:95:05:BF:AF:5B:34:22:3D:26:05:91:B9:C8:40:98:2E:9B
X509v3 Authority Key Identifier:
keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:98:88:39:92:41:9d:b9:7b:00:0a:85:c9:04:2b:9d:cc:62:
e4:86:7b:7f:75:22:9f:ee:18:a1:37:dd:b4:0b:93:91:52:6e:
7d:77:c0:a4:9e:a1:51:06:ab:35:30:ac:ac:eb:6b:34:f0:6d:
cb:a1:15:d7:ef:8c:89:e8:da:88:32:f8:b9:49:59:85:ea:c6:
a3:8c:bc:cf:73:a6:8b:c4:89:5b:7a:74:d7:f2:67:df:2e:1d:
11:9c:59:91:3d:4e:d9:dd:20:4b:2e:eb:c1:a6:24:29:c4:1f:
b4:c9:d9:b3:d0:f0:a4:c0:57:e9:9b:77:9f:e5:87:65:99:e1:
2e:a5:fd:e3:77:55:60:3d:9f:43:fd:7b:b6:9b:22:3d:c2:b3:
c9:af:79:32:08:78:6b:aa:8b:1a:f6:c9:bf:9d:ce:45:91:91:
89:d1:96:e5:94:39:f6:a3:70:52:77:a9:5e:15:8a:4f:76:04:
2b:a0:2d:59:dc:48:43:3c:57:7e:16:e9:be:f7:86:bf:54:35:
f5:2e:fb:e5:b9:2c:a2:f3:39:e4:f9:fc:5e:a3:1b:3b:be:c5:
6e:0e:d3:39:39:a7:65:30:a0:40:3e:31:9c:e8:b1:db:a8:62:
aa:0e:38:04:dc:d1:7a:68:6a:b5:2c:8d:e2:98:81:c0:92:e1:
3a:c8:fd:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjMuobZ0NwP7QNox7mMyOf0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMzAwNmRjZDI4OWM0N2Y5ZjU4ZTEyOGViMjk3NTcyMzkx
NDRiYjYwHhcNMjUwODIxMTMwMzUyWhcNMjUwODIyMTMwMzUyWjAzMTEwLwYDVQQD
EyhiYTFjYTQ5NTA1YmZhZjViMzQyMjNkMjYwNTkxYjljODQwOTgyZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA503XRE9CktRwwwT3q/1HGEjFJPEc
2tC8TPe+qSKpX6wT2TeGZ2H5AsAdxgo/9K8RmUXNAf3KUBdkhoL6Pf6GOZY4U2yj
3TEKQP6ZHRjELAVsK+eZa7GKiDTgfsU5gSpSSN1DSO3BWzpTpKu6o0FP+qp6JLjw
ewLoozX3gWHKNmHXdmLlAS6cw08FgkPciObyg2cgdvF/uTF8wdoZ/B/gTbsvIeBC
1t00wANQZEDmhECWBSxjqotT3Ybyge7lek+/HNgbBZAY1lDqCmwUnrpUTy6mKDYF
p16cR7WzY/HEfnvJDI5EE+lE6o0Lt1cAiXlpbUn37XAbsHMi2ZdWRHlP5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLocpJUFv69bNCI9JgWRuchAmC6bMB8GA1UdIwQY
MBaAFG0wBtzSicR/n1jhKOspdXI5FEu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9iZjllNTEtY2MyYi00ZmY0LTg2YWMt
MmY3ZTUyZmI4YmQzLzEvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9iZjllNTEtY2MyYi00ZmY0LTg2YWMtMmY3ZTUyZmI4YmQz
LzEvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZiIOZJB
nbl7AAqFyQQrncxi5IZ7f3Uin+4YoTfdtAuTkVJufXfApJ6hUQarNTCsrOtrNPBt
y6EV1++MiejaiDL4uUlZherGo4y8z3Omi8SJW3p01/Jn3y4dEZxZkT1O2d0gSy7r
waYkKcQftMnZs9DwpMBX6Zt3n+WHZZnhLqX943dVYD2fQ/17tpsiPcKzya95Mgh4
a6qLGvbJv53ORZGRidGW5ZQ59qNwUnepXhWKT3YEK6AtWdxIQzxXfhbpvveGv1Q1
9S775bksovM55Pn8XqMbO77Fbg7TOTmnZTCgQD4xnOix26hiqg44BNzRemhqtSyN
4piBwJLhOsj9pQ==
-----END CERTIFICATE-----
Generated at Thu Aug 21 15:26:04 2025 by rpki-client