Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
File: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json)
Hash identifier: EeD9sEbloYHIi+1noaMTuEllUm/O2NPOMF5QnLSHDRQ=
Subject key identifier: A5:D8:73:0A:C1:28:DC:4F:5F:C0:10:F5:AF:A6:AD:68:76:31:AB:D7
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial: 019A4D067F4A2F48466C9751143FF2603CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
Manifest number: 0CB9
Signing time: Tue 04 Nov 2025 04:01:02 +0000
Manifest this update: Tue 04 Nov 2025 04:01:02 +0000
Manifest next update: Wed 05 Nov 2025 04:01:02 +0000
Files and hashes: 1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: toOg2mtaY0eqjT3Ev9IafuGl8pO4yU7L3puOyAJjEYY=)
2: ergYcBtNSn5r4Zi1l42KV0S9mDk.roa (hash: uo/5j8D7Yv+RjgeXCM0+M4CRhoYawB/FduDyyKS00RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:7f:4a:2f:48:46:6c:97:51:14:3f:f2:60:3c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Validity
Not Before: Nov 4 04:01:02 2025 GMT
Not After : Nov 5 04:01:02 2025 GMT
Subject: CN=a5d8730ac128dc4f5fc010f5afa6ad687631abd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:30:e1:d8:b7:77:43:e5:79:e0:7e:59:68:
53:af:61:1a:e7:26:6b:19:6d:76:96:a8:2f:ea:fc:
0f:b0:81:f6:3b:13:51:56:b0:7d:9e:a8:c9:6a:66:
14:5c:f7:04:b2:0e:50:5f:a0:36:1c:9e:8e:3d:1b:
3f:80:4d:f3:ae:ea:05:ef:86:4c:81:7e:89:08:26:
4e:2a:cd:85:7f:93:ff:86:37:eb:6f:ca:99:f2:a6:
9e:24:fa:62:60:a4:44:77:57:58:24:40:6e:ef:92:
95:75:45:78:0d:d6:7c:da:7c:b4:86:94:73:77:da:
6b:92:6b:0e:b6:fe:8f:39:3d:e7:8d:2c:c3:e0:2f:
7e:b7:76:6c:32:e0:11:ff:5f:c4:b5:9d:ff:2a:c1:
c3:08:18:60:93:0c:5b:f0:1e:5a:d7:92:26:fb:9a:
74:1f:01:f0:25:48:ca:4d:38:b0:5a:d3:1f:cb:8a:
75:e4:a1:4b:fe:d2:44:f2:e6:21:88:df:4a:3e:d6:
25:c4:cb:c8:08:5d:2b:b8:97:15:69:be:25:7c:f4:
c8:3c:95:96:d8:a1:56:f3:00:ed:ae:1e:c2:2f:e5:
71:dc:3f:19:4c:f3:bb:67:24:05:59:9d:06:a2:d0:
8b:f9:2e:c9:6d:49:5f:d2:61:16:97:df:cd:0e:4c:
29:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D8:73:0A:C1:28:DC:4F:5F:C0:10:F5:AF:A6:AD:68:76:31:AB:D7
X509v3 Authority Key Identifier:
keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:5e:ff:11:6b:43:e0:78:78:34:e4:a7:35:d3:d1:b3:59:db:
71:48:c9:d4:ac:85:e8:25:51:0e:59:44:52:3d:09:29:9c:0d:
2b:53:6c:fe:8d:bc:d2:ed:da:5e:c7:73:34:a4:f2:8d:fb:25:
8d:2d:3e:67:3d:6f:6d:7b:2d:c9:ef:5d:89:12:3e:08:19:b3:
6e:98:b3:11:7a:b2:c0:54:99:be:71:1c:28:e4:54:08:de:cc:
fd:46:ab:6e:57:d8:66:9e:0a:72:fa:6d:06:11:ba:aa:72:5e:
14:03:41:fa:5f:df:a5:e6:87:e6:90:ce:14:c7:da:11:0e:86:
31:4d:38:60:6e:6d:8a:8a:3f:13:db:a3:23:ab:c2:25:2a:cd:
5c:1a:2a:ed:1d:c0:a7:70:c9:68:ac:ff:bd:19:1e:db:45:81:
ac:c9:6a:fa:23:e7:1b:91:d4:8e:cf:e5:2d:5b:4f:df:cd:e3:
4a:b9:5c:8c:14:3f:6e:1d:88:09:a9:9f:fe:cd:30:b4:f5:ef:
df:e2:22:87:81:1a:46:5a:82:13:f2:b4:2e:03:28:f9:7f:ba:
6e:19:74:2d:67:31:31:f4:fa:5e:de:66:c8:49:59:f7:b1:be:
8d:19:90:3f:25:2c:de:b6:7f:e5:82:fb:19:65:28:1d:2c:f8:
90:48:f9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:00:27 2025 by rpki-client