Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
File: Bt76ExH1P2xEFGPaj6s0A61ogBE.mft (raw, json)
Hash identifier: Jumpt83BFIGP7hsM7uTwubqH3l+V/9tcsx5TYEGUXi0=
Subject key identifier: DD:56:C7:71:4F:A3:BE:97:3F:4C:16:F4:06:C5:75:A1:1B:3E:25:73
Authority key identifier: 06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
Certificate issuer: /CN=06defa1311f53f6c441463da8fab3403ad688011
Certificate serial: 019A7149E6F1A409FCE31544EA79D317FFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 05:00:59 +0000
Manifest this update: Tue 11 Nov 2025 05:00:59 +0000
Manifest next update: Wed 12 Nov 2025 05:00:59 +0000
Files and hashes: 1: Bt76ExH1P2xEFGPaj6s0A61ogBE.crl (hash: vJkZepLALHmHrBDjZ9K+0NJmHVIMr0VEXk0AlGbfyVw=)
2: psfbhPGIR9OS3HR7S3qur-oF2Wg.roa (hash: FlkCUGKA6sKM5xnwOPU8XOcnUGbtF79h6pPDmcgLJm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e6:f1:a4:09:fc:e3:15:44:ea:79:d3:17:ff:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06defa1311f53f6c441463da8fab3403ad688011
Validity
Not Before: Nov 11 05:00:59 2025 GMT
Not After : Nov 12 05:00:59 2025 GMT
Subject: CN=dd56c7714fa3be973f4c16f406c575a11b3e2573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9b:6a:7e:d0:69:2d:d6:9e:5b:62:93:27:1f:
0c:71:f6:77:b0:4d:e7:77:3e:22:39:12:ff:1f:0f:
17:fa:52:72:9b:a0:a4:5b:d6:fc:a9:8f:1d:97:14:
e9:d5:f7:96:f2:92:95:ed:f3:98:0f:1a:73:f4:c7:
f4:e6:a0:1e:a9:e7:72:ad:0d:a6:51:72:0c:ac:49:
85:b0:b2:f1:65:a3:98:08:69:97:d3:d0:a3:3e:c0:
2e:98:23:b8:0f:d8:ed:29:8e:22:e5:37:81:20:10:
7b:25:7a:c4:fa:eb:d4:de:6e:a3:5f:80:03:57:0c:
ac:8b:f4:07:5a:48:c8:08:3a:d6:57:cc:ab:57:33:
89:a9:45:e0:40:b2:5e:21:d8:0a:32:7f:57:dc:d3:
16:32:78:f0:d7:d4:95:de:87:54:fa:48:ab:0f:d3:
08:0b:2f:2d:9f:31:e8:33:8a:50:ed:4d:fe:b6:c7:
fd:f2:b2:44:68:99:28:29:c9:87:bc:7b:a6:00:e3:
c8:57:72:81:a5:07:ea:30:15:53:58:17:4a:34:3f:
4c:87:56:d5:d2:a2:a4:47:64:dd:dc:57:da:95:a2:
f4:85:a3:31:85:a2:7b:83:f5:60:d4:ba:3b:60:e4:
31:b7:03:a4:f3:97:ba:58:3d:1e:31:14:94:5d:3a:
8e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:56:C7:71:4F:A3:BE:97:3F:4C:16:F4:06:C5:75:A1:1B:3E:25:73
X509v3 Authority Key Identifier:
keyid:06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1c:51:a4:8c:f4:ec:b2:f0:fd:e8:c6:2a:23:54:70:b0:fe:
8c:21:0a:a8:83:63:e3:25:9c:9d:d6:6f:65:b7:a3:d9:83:60:
b1:6b:a9:f7:fe:80:34:fb:3a:38:cb:d7:3d:31:26:9e:b6:05:
82:60:3d:f8:6e:95:03:c3:5a:6c:4b:d5:47:5b:11:74:33:fb:
e8:a8:f6:9a:cc:66:94:75:f9:93:c2:76:4a:be:0e:26:38:12:
b8:26:c1:c5:4f:cf:11:b4:19:95:67:e4:fa:4f:63:bb:87:89:
18:aa:4c:f0:dd:da:f7:9d:ba:78:48:0c:7d:69:8f:f3:fb:ef:
f0:05:a6:c0:e3:81:ef:7a:ce:94:45:f5:81:d6:0b:7a:fc:95:
31:b8:42:c9:a2:29:6e:a3:dc:b3:b1:d9:96:84:c8:1a:f7:24:
a3:7e:03:00:76:d3:65:c8:f2:04:c2:e5:26:a8:44:f8:83:75:
69:ba:4b:7c:cb:60:92:b9:b8:ad:df:bd:f2:a7:a0:3a:96:7a:
f6:0d:44:93:7d:d0:29:f3:79:21:35:91:a1:51:79:ff:78:8d:
00:c7:45:6b:f5:9f:d2:2f:67:da:52:f7:c6:85:50:dd:66:1b:
22:39:4e:03:28:b9:eb:8a:db:16:66:55:63:d5:77:af:a9:f0:
a4:36:24:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:55 2025 by rpki-client