Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
File: bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft (raw, json)
Hash identifier: bly1iUXFruU4/nq65oE9pe8N2QbJlMZkAZczE9WewvU=
Subject key identifier: DB:3E:70:8E:41:5E:F6:03:82:BA:51:CA:20:93:F3:A7:98:1C:C1:E9
Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Certificate serial: 019A27E688111CDFD3DD77C5F69118D9E99D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
Manifest number: 16FC
Signing time: Mon 27 Oct 2025 23:00:10 +0000
Manifest this update: Mon 27 Oct 2025 23:00:10 +0000
Manifest next update: Tue 28 Oct 2025 23:00:10 +0000
Files and hashes: 1: GGvj9NChg8eWX1toJcMcvoB6snw.roa (hash: G6byTPu5CqswnTX3x2G6lOagD0K04nQHqQ2npvg0QJA=)
2: MhjkAgDs0QfDcSw47owKsNYasoc.roa (hash: /uniHG73LlrpdpREk+1GNcIkLbBqDOzY7tim2Uz2A1Q=)
3: VgSNs6ZOXCkQkr9fpRBVArb2ekk.roa (hash: VfgYT2PHKpcDM5asjw8+E6B2sFoDiGWCDnrrAEt1mAU=)
4: bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl (hash: uvVgJxKamKCrS5uEnpNVOoNJ9ZSBDF2BB6DPT+CtmVw=)
5: eI5OybFO6F3Cte5WRbis39BGYq0.roa (hash: VMECrPDlMwDvEnBV7WpuFgQn71bLIy+17ZYTsOibG74=)
6: iZS0QA1yC9FLBck4FKpodWGaBn8.roa (hash: iTrLDy7AWbv/5JNUdB4E4LLm4ULatVdoRSUk6RJfSwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:e6:88:11:1c:df:d3:dd:77:c5:f6:91:18:d9:e9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Validity
Not Before: Oct 27 23:00:10 2025 GMT
Not After : Oct 28 23:00:10 2025 GMT
Subject: CN=db3e708e415ef60382ba51ca2093f3a7981cc1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:cd:52:45:0f:bb:01:97:ca:15:5b:43:10:
ea:eb:b4:a1:2c:d6:8c:d8:9d:f3:2d:35:42:73:76:
a1:d2:49:b7:fc:a5:8d:d5:a6:9d:f4:ce:98:49:32:
81:c0:aa:93:21:b1:01:71:59:9d:8c:4d:17:31:f2:
0d:b4:0d:8e:bd:c4:cc:87:68:38:68:95:22:d9:f1:
1f:6a:8f:55:ea:2a:83:d7:ba:2c:9f:71:5a:0b:73:
af:3c:d9:ea:a4:7a:b9:c8:60:c7:15:f2:7a:c4:c8:
ad:e4:0a:11:d1:47:d5:b1:42:f0:eb:7e:81:1e:34:
3a:e2:88:2d:80:e6:d3:65:66:bb:04:e3:75:bd:2f:
d5:9f:23:22:95:c7:5b:ab:7f:ac:b6:c8:a0:db:49:
0f:3d:f2:6a:ab:9b:b2:20:00:f6:2b:79:b9:63:6b:
63:d2:db:c1:5c:83:47:95:12:ff:43:e8:8d:15:32:
61:b4:78:84:d6:1d:77:16:47:23:f8:c0:44:09:43:
cd:2e:7c:fb:90:0f:74:3f:54:18:7a:c0:70:8f:a0:
8d:ac:cb:6e:cd:cd:cb:63:40:82:29:ae:79:8b:0b:
33:13:5d:3d:a2:48:0d:67:06:14:39:66:ab:72:1a:
01:c4:44:92:4b:86:c5:80:83:c8:d0:0a:a7:63:d6:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3E:70:8E:41:5E:F6:03:82:BA:51:CA:20:93:F3:A7:98:1C:C1:E9
X509v3 Authority Key Identifier:
keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b8:4a:1f:af:8a:37:9a:d4:14:38:d9:ac:38:8c:8f:b7:be:
cf:81:fe:00:09:f2:60:c3:d8:ea:b4:c7:8f:57:b2:88:f1:7b:
3a:29:93:ff:79:8e:6d:49:43:27:54:03:c4:9f:5e:fc:a6:73:
53:17:3a:30:8c:0d:af:26:9c:4f:79:05:2f:ee:86:cf:a2:85:
de:2e:4b:78:3d:77:db:15:62:2c:23:2b:b3:e5:30:5e:65:c9:
04:b7:e0:2f:c6:4a:0b:db:90:90:89:4c:b8:a7:de:76:de:47:
b0:f4:59:77:d7:e3:20:a7:15:ee:3f:55:46:9e:74:a4:f5:b3:
de:8e:91:af:9f:4c:c4:91:fc:b1:49:c0:bf:24:cf:35:d0:e9:
6c:e6:af:d0:5b:a8:a8:ce:ec:03:50:a2:aa:27:55:10:5d:1e:
a4:29:9e:47:36:6f:7b:81:9a:83:2a:a7:d0:8b:0a:ba:cd:79:
89:c7:65:4a:cb:33:aa:ee:28:a1:83:2b:1f:36:b8:6d:10:e2:
87:56:ef:87:30:08:79:3a:40:14:0c:fc:f2:93:37:d5:cc:77:
7b:df:c5:0e:46:60:84:6d:1d:63:67:ef:07:ea:5c:2f:f7:68:
5c:87:95:c0:8e:95:46:58:c0:94:4a:a1:b4:b9:a7:13:11:20:
94:ff:77:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:28:03 2025 by rpki-client