Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
File: BT6UUB8P0s3qPC57RjGObn9RX3M.mft (raw, json)
Hash identifier: 9Mh6/J0KcvmRp0JXLUHLzeKM8CqCc6lqQqFfGDeYClc=
Subject key identifier: 95:F1:58:84:D6:94:39:70:F2:EC:4E:26:E3:A0:CB:F1:4F:65:27:6B
Authority key identifier: 05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
Certificate issuer: /CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Certificate serial: 019A58D3DE391AF655EC7BDF92CD12F83022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
Manifest number: 1716
Signing time: Thu 06 Nov 2025 11:01:11 +0000
Manifest this update: Thu 06 Nov 2025 11:01:11 +0000
Manifest next update: Fri 07 Nov 2025 11:01:11 +0000
Files and hashes: 1: BT6UUB8P0s3qPC57RjGObn9RX3M.crl (hash: yEdCJj6zhfjAMqVUcdmuGl52TgvVKHExjbQNzRMU3Dg=)
2: PW26W-VSuEOhQv0UYQiviWvM3PQ.roa (hash: amtlrhmVHqku8l89qlGVcPiKPSCbAqVjZC9kdgQdMxM=)
3: QczbEnEasBPtVeB0j7ed4Z5MN4U.roa (hash: sUqwVjOZmcM++cyXTD0/dLISqQO4KRPxQz8w/SRG0nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:58:d3:de:39:1a:f6:55:ec:7b:df:92:cd:12:f8:30:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Validity
Not Before: Nov 6 11:01:11 2025 GMT
Not After : Nov 7 11:01:11 2025 GMT
Subject: CN=95f15884d6943970f2ec4e26e3a0cbf14f65276b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:13:a4:06:f0:f8:5e:03:eb:d2:2b:70:bf:
d8:c9:cb:3b:4b:5c:e3:61:96:1c:71:77:1b:14:44:
3d:fb:3c:2f:12:02:39:83:11:3d:05:f4:d3:47:3d:
a1:96:0e:48:82:b7:1f:57:6d:b4:16:40:45:19:8d:
64:7f:c9:de:bf:4b:9c:55:a2:3e:06:97:54:e6:b2:
8f:b5:9a:10:c9:15:2d:a1:bc:a1:b0:2f:fc:67:05:
a7:e6:d9:7b:13:d7:02:40:50:9f:3c:16:3d:7a:c4:
a1:01:18:07:53:a3:1d:58:62:f4:16:a1:72:e6:b9:
35:f8:9b:c1:56:16:c1:b3:2c:0e:a9:33:c8:0a:33:
3f:ca:65:36:76:55:68:b4:bc:4f:3d:a4:e6:1d:5e:
59:46:76:43:e6:07:e4:80:19:08:8d:e5:63:94:c5:
0b:ba:b3:bd:91:97:55:8f:81:c4:d4:cd:72:20:13:
92:86:59:4c:74:cf:de:b4:cf:28:1c:e2:06:45:7c:
87:bd:36:3d:48:f8:8e:78:01:5d:a1:7a:cf:ba:e9:
41:5c:59:d0:73:14:3b:49:98:3f:92:a9:91:20:63:
4e:57:f9:dd:a7:6a:f0:23:4f:37:06:15:d7:e0:f8:
1f:fc:3e:ee:01:25:1c:ca:93:77:a8:25:67:57:1c:
1a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F1:58:84:D6:94:39:70:F2:EC:4E:26:E3:A0:CB:F1:4F:65:27:6B
X509v3 Authority Key Identifier:
keyid:05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f4:23:54:64:1d:ed:9f:2c:bf:85:1d:5d:15:07:95:16:6a:
eb:90:b9:99:0e:20:12:1c:ea:9b:2d:85:e6:4a:0e:7f:36:2c:
9c:4d:01:8f:df:09:37:b2:1b:48:39:80:d7:5c:cb:5d:13:b4:
60:d7:7c:07:5b:bf:96:15:a5:30:af:cb:82:b7:48:9f:22:9b:
b1:f5:33:8e:81:f3:a9:62:b8:58:f7:f9:c0:8b:f8:3b:ad:a7:
19:ed:cf:0c:0b:6a:56:7c:c2:f4:47:98:da:66:2a:b3:8b:9e:
6b:9d:0c:11:1b:3b:8f:5c:7d:95:6f:6b:65:a9:95:9d:67:6a:
53:4e:8a:eb:1d:e4:46:74:61:07:60:a4:0b:e2:f3:08:26:f7:
4d:17:9b:df:38:f9:1f:a7:1f:ab:cd:70:d9:6c:4e:fa:15:53:
30:46:80:96:7a:be:f1:d4:45:26:2b:83:d1:d3:db:8e:9e:20:
a7:89:3e:b2:2f:a3:21:70:ad:3b:c1:e3:23:a7:3d:7c:45:9f:
f1:2c:84:07:37:93:f1:aa:0e:32:38:24:d8:e8:fa:89:40:e6:
a9:e2:a7:97:41:a7:78:26:e5:a1:fa:fc:af:d9:4d:95:76:90:
dd:9a:b8:23:91:32:0c:c6:82:0e:c8:90:e3:11:c3:0f:73:eb:
47:70:af:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 12:27:10 2025 by rpki-client