Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
File: btAxXocokhqZ_GNGtM6PELXbhnw.mft (raw, json)
Hash identifier: g7KAGESKFOSDAJAbTD+UPa7jMhFet5tW6C/TvQunDGM=
Subject key identifier: C0:45:89:E5:38:04:FD:AE:FE:E0:91:63:D7:2C:01:3B:B7:FD:A2:9C
Authority key identifier: 6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C
Certificate issuer: /CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c
Certificate serial: 019A71B8FBF221ECDBDCAE110C31B9D884FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
Manifest number: 0D5F
Signing time: Tue 11 Nov 2025 07:02:19 +0000
Manifest this update: Tue 11 Nov 2025 07:02:19 +0000
Manifest next update: Wed 12 Nov 2025 07:02:19 +0000
Files and hashes: 1: btAxXocokhqZ_GNGtM6PELXbhnw.crl (hash: LxnTBRTI9z2WF1RPh5qPIMi94yYeVYheN0+9C3l015g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:fb:f2:21:ec:db:dc:ae:11:0c:31:b9:d8:84:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c
Validity
Not Before: Nov 11 07:02:19 2025 GMT
Not After : Nov 12 07:02:19 2025 GMT
Subject: CN=c04589e53804fdaefee09163d72c013bb7fda29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b4:08:fc:c0:fd:0e:8b:e3:7f:57:9f:e6:4f:
45:09:b0:04:7c:9f:6a:b7:2b:a7:44:ad:2e:c5:64:
aa:a5:b1:f1:13:41:6a:cc:14:05:1e:95:f2:4a:00:
da:f7:51:dd:da:32:ab:83:c3:1d:61:bc:01:b9:ca:
c7:f3:a8:f3:06:17:75:64:6a:ec:b6:63:41:01:a7:
94:6b:60:53:40:35:a5:12:73:2f:9d:d5:fe:1d:fe:
f7:96:79:f6:52:57:77:a9:11:2f:50:0f:f0:db:ac:
45:c2:65:a5:74:c9:0d:ca:eb:21:e3:42:1c:b3:b2:
98:22:dc:c3:84:b7:9d:86:1c:93:a5:30:b9:2f:36:
60:58:81:cf:88:bd:27:fb:a7:13:b8:08:9f:7b:ac:
40:0c:e4:be:0f:ec:ac:61:34:a9:18:3a:4c:05:d7:
94:f6:dd:eb:bd:0e:ab:5f:99:b3:2f:ed:09:b0:d8:
9a:be:2f:b2:c3:16:0a:85:bc:3b:c6:47:be:72:47:
43:69:4d:6c:50:56:61:a6:96:60:21:3e:01:7d:8f:
84:b6:c8:d3:20:1d:87:0e:00:de:f8:f9:82:5c:fb:
e8:14:0d:0b:dd:aa:82:83:5a:dc:28:eb:84:36:18:
13:ed:85:38:c2:00:42:b2:6f:6a:72:56:53:04:aa:
1f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:45:89:E5:38:04:FD:AE:FE:E0:91:63:D7:2C:01:3B:B7:FD:A2:9C
X509v3 Authority Key Identifier:
keyid:6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:eb:18:cf:d7:a6:31:75:ec:f7:76:ef:2a:fe:df:78:b0:da:
d1:f8:33:2b:eb:f1:cc:27:21:6a:16:ad:46:68:fe:f3:fe:fd:
f6:3f:7c:64:68:1a:3e:93:a3:81:14:03:6e:43:5e:50:38:d5:
c4:c1:40:60:5b:0e:8c:92:35:44:4a:b8:55:e5:f6:11:0f:cd:
18:78:9e:b8:e0:7e:29:40:ca:8e:e4:11:13:db:46:ce:73:2d:
ae:8b:3d:60:2e:11:ba:95:12:4c:fe:65:2d:80:32:a4:98:d6:
ae:3b:db:22:56:58:04:55:bb:15:76:40:eb:fc:81:28:1c:8b:
23:09:d3:d2:b2:64:40:fa:94:67:51:54:9f:47:33:75:c4:93:
8f:af:1e:2d:f2:b3:ad:5e:63:a8:b1:6c:a5:df:b8:09:0b:08:
d8:a8:61:c5:52:79:0e:12:9f:63:11:33:fb:63:cf:08:88:c0:
8f:cf:36:08:97:a2:43:e8:e2:7f:d5:70:cb:f5:a7:d5:5a:fe:
38:51:e8:c9:d3:60:33:1d:3b:87:82:7c:8a:ca:7e:0c:fb:27:
1e:8f:73:b3:43:b9:93:f7:ba:8f:7b:53:a8:ad:ff:72:8e:3f:
66:fa:ae:c8:00:dc:71:93:e9:3b:31:cf:1f:b5:7b:6b:58:62:
ea:c7:30:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuPvyIezb3K4RDDG52IT/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZDAzMTVlODcyODkyMWE5OWZjNjM0NmI0Y2U4ZjEwYjVk
Yjg2N2MwHhcNMjUxMTExMDcwMjE5WhcNMjUxMTEyMDcwMjE5WjAzMTEwLwYDVQQD
EyhjMDQ1ODllNTM4MDRmZGFlZmVlMDkxNjNkNzJjMDEzYmI3ZmRhMjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47QI/MD9Dovjf1ef5k9FCbAEfJ9q
tyunRK0uxWSqpbHxE0FqzBQFHpXySgDa91Hd2jKrg8MdYbwBucrH86jzBhd1ZGrs
tmNBAaeUa2BTQDWlEnMvndX+Hf73lnn2Uld3qREvUA/w26xFwmWldMkNyush40Ic
s7KYItzDhLedhhyTpTC5LzZgWIHPiL0n+6cTuAife6xADOS+D+ysYTSpGDpMBdeU
9t3rvQ6rX5mzL+0JsNiavi+ywxYKhbw7xke+ckdDaU1sUFZhppZgIT4BfY+EtsjT
IB2HDgDe+PmCXPvoFA0L3aqCg1rcKOuENhgT7YU4wgBCsm9qclZTBKof4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBFieU4BP2u/uCRY9csATu3/aKcMB8GA1UdIwQY
MBaAFG7QMV6HKJIamfxjRrTOjxC124Z8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yYTYyYzItMTdkNS00NGNkLTkwZWYt
NWIzMzdhYzJlZjc5LzEvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8yYTYyYzItMTdkNS00NGNkLTkwZWYtNWIzMzdhYzJlZjc5
LzEvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPesYz9em
MXXs93bvKv7feLDa0fgzK+vxzCchahatRmj+8/799j98ZGgaPpOjgRQDbkNeUDjV
xMFAYFsOjJI1REq4VeX2EQ/NGHieuOB+KUDKjuQRE9tGznMtros9YC4RupUSTP5l
LYAypJjWrjvbIlZYBFW7FXZA6/yBKByLIwnT0rJkQPqUZ1FUn0czdcSTj68eLfKz
rV5jqLFspd+4CQsI2KhhxVJ5DhKfYxEz+2PPCIjAj882CJeiQ+jif9Vwy/Wn1Vr+
OFHoydNgMx07h4J8isp+DPsnHo9zs0O5k/e6j3tTqK3/co4/ZvquyADccZPpOzHP
H7V7a1hi6scwMQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:14 2025 by rpki-client