Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File: BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier: tuFBY9nCC1vr9IeTGUAJ8DudZewRs+kXtJq82di2Ixw=
Subject key identifier: 1C:56:A5:3A:4F:A8:DD:71:24:84:EC:18:15:04:82:DF:59:AF:8D:BD
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 019A1E07D59C2A9E42A941DD358D6A3936E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 01:00:21 +0000
Manifest this update: Sun 26 Oct 2025 01:00:21 +0000
Manifest next update: Mon 27 Oct 2025 01:00:21 +0000
Files and hashes: 1: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: P+FGO+gYPE/5RnAfx9yH7suOqsHhqpkleAQy+yzCUfc=)
2: CZQw40ubgHVu1Jof03ClaqRzNO0.roa (hash: ryau3A+d+gfpE7i1EIyrHi9oMGq0/6OLOcTA/JPeZzo=)
3: MR_mra2KXDxOhSmirjUVkdnLe2A.roa (hash: XKtS3itRVqfOpu81ikpDBZ+IyS8k+qng+AJNKrqJmHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:07:d5:9c:2a:9e:42:a9:41:dd:35:8d:6a:39:36:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: Oct 26 01:00:21 2025 GMT
Not After : Oct 27 01:00:21 2025 GMT
Subject: CN=1c56a53a4fa8dd712484ec18150482df59af8dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:c5:22:5e:38:05:9a:1a:32:5e:d2:4f:cc:
46:18:c6:23:e1:4e:c4:33:37:2c:a2:ca:ab:1d:d4:
5a:c4:1f:9c:57:d8:e7:d0:2c:b4:fe:38:aa:51:cd:
a1:f6:de:69:bf:29:d6:22:cc:44:66:ba:d1:20:af:
e6:16:8e:a9:4c:35:39:b4:61:b2:99:2d:05:12:9a:
fa:0e:89:d7:ff:27:96:48:01:48:9d:61:bf:d3:d9:
d0:9e:aa:ed:74:8f:80:73:99:0a:38:e2:a4:6a:2c:
bf:91:35:c5:7c:d0:94:92:d6:a4:ad:c7:a7:1f:0d:
b2:e2:46:ee:31:60:86:eb:be:9b:92:11:ee:9c:eb:
1e:7d:b1:b0:df:e8:06:87:e8:44:c0:8d:35:0a:66:
a1:5d:eb:e7:a3:3d:3e:75:9e:c8:31:15:d3:4a:8c:
45:ea:17:46:4c:5a:12:df:5e:5c:52:9d:8e:ac:60:
5c:cf:10:4c:28:6d:7f:0d:aa:93:de:cc:81:cb:4c:
94:4b:2d:c1:16:4e:d5:5f:bf:19:e1:a2:ae:45:f1:
6b:1d:85:51:f2:11:d2:f5:b7:b1:92:07:97:00:88:
18:e0:61:3e:77:9b:c3:89:8e:ba:61:f9:50:41:08:
78:c4:f2:10:40:c9:96:04:d2:9d:71:ac:5d:7c:f6:
a7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:56:A5:3A:4F:A8:DD:71:24:84:EC:18:15:04:82:DF:59:AF:8D:BD
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d9:20:b1:ad:b3:52:10:1f:44:2e:ca:6c:29:97:9f:7e:35:
cb:8a:4d:65:e7:11:69:26:59:17:a5:2e:f9:5e:55:92:cd:0e:
4d:c1:2c:bf:a7:3a:57:8c:8b:89:ba:ff:9c:52:dd:4b:27:39:
e8:87:35:d1:2e:11:08:28:cf:b9:17:cd:9c:e0:a9:d7:72:3c:
65:08:5f:7c:af:c6:7b:2d:ed:10:8f:54:00:f4:cc:6a:93:38:
cc:3d:2c:65:73:f1:c6:cf:e1:0e:bd:d9:e9:e8:dd:b2:7a:5c:
b5:4c:e0:f1:a1:91:51:88:32:c9:e7:4d:32:e2:d6:af:49:f1:
d2:4f:35:c8:30:0e:2d:79:c7:b9:69:a2:5c:57:bd:b7:fe:8e:
10:cc:f0:cf:9b:16:1a:d4:e2:01:46:35:28:88:8c:94:b2:2b:
97:f8:63:36:c9:f8:83:c8:6e:b6:a9:9d:bd:fd:f9:5f:ac:3a:
bf:fc:a9:41:7a:ad:b9:74:23:9d:01:75:4d:72:fb:c1:e5:7d:
c6:24:61:a4:0b:16:9a:02:11:42:ff:a9:40:d7:e9:d7:0a:3c:
57:72:9a:ca:12:97:e3:9a:51:b1:6c:f4:f8:e9:2d:b1:8e:f5:
c1:ae:96:31:72:35:ec:b7:75:47:0d:46:01:c2:38:0b:4a:f6:
87:ea:6b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:49:01 2025 by rpki-client