Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
File: BT6UUB8P0s3qPC57RjGObn9RX3M.mft (raw, json)
Hash identifier: 25ajt7LA0gFd5eretcG2Yf8CHhTs3KRVj1YNWCmz2TI=
Subject key identifier: 44:D0:38:2F:34:9E:EA:5E:83:71:AD:A7:AA:FD:A8:25:52:E9:E1:1D
Authority key identifier: 05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
Certificate issuer: /CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Certificate serial: 0199541D70E8E09B92B4E675A977A855CD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
Manifest number: 168F
Signing time: Tue 16 Sep 2025 20:00:39 +0000
Manifest this update: Tue 16 Sep 2025 20:00:39 +0000
Manifest next update: Wed 17 Sep 2025 20:00:39 +0000
Files and hashes: 1: BT6UUB8P0s3qPC57RjGObn9RX3M.crl (hash: 9Mxz7p10nB6hBQteWkTEoqnLBdlnmVLCSlr6Wz6eC9M=)
2: PW26W-VSuEOhQv0UYQiviWvM3PQ.roa (hash: amtlrhmVHqku8l89qlGVcPiKPSCbAqVjZC9kdgQdMxM=)
3: QczbEnEasBPtVeB0j7ed4Z5MN4U.roa (hash: sUqwVjOZmcM++cyXTD0/dLISqQO4KRPxQz8w/SRG0nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 18:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:54:1d:70:e8:e0:9b:92:b4:e6:75:a9:77:a8:55:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Validity
Not Before: Sep 16 20:00:39 2025 GMT
Not After : Sep 17 20:00:39 2025 GMT
Subject: CN=44d0382f349eea5e8371ada7aafda82552e9e11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:7a:e9:ca:57:e6:46:62:a5:5d:83:ff:8f:
52:d4:ea:8a:fa:73:35:09:d4:b9:d1:1b:45:68:8a:
87:77:3d:e7:70:2d:79:0b:58:ee:56:bd:c9:df:10:
ea:2c:95:32:a2:42:7c:5e:65:14:84:7e:42:f8:57:
fd:11:83:1c:3a:16:86:fb:30:64:fd:ac:4a:3f:5a:
f4:25:a8:16:1b:07:c2:1a:43:32:2e:0b:1c:81:71:
eb:42:be:f8:f4:de:50:00:1c:d3:34:7e:b3:19:10:
31:04:72:91:d3:7f:a5:9e:7d:74:a4:d8:4f:99:94:
fb:d3:0e:0d:0e:31:ee:25:20:1f:96:19:12:ea:2d:
f6:50:28:7f:65:99:68:b7:c7:e8:f8:3d:ca:82:26:
de:4a:70:06:9f:7d:d2:c6:04:4a:c9:b9:7a:92:5b:
8f:1d:91:ab:11:dc:96:38:da:9e:82:95:e4:a7:c3:
b3:76:cb:58:76:69:22:b2:d1:60:ee:5c:ce:4f:3e:
40:97:b4:ad:23:04:47:91:e5:14:9c:d0:bd:89:23:
cc:78:f3:40:86:66:56:ba:3b:4d:b8:91:4f:d6:10:
18:dd:0c:29:a2:2b:e4:79:c7:44:19:04:9c:ab:d5:
c4:a3:0a:e2:37:21:fb:6d:1d:3f:15:a2:06:db:7b:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D0:38:2F:34:9E:EA:5E:83:71:AD:A7:AA:FD:A8:25:52:E9:E1:1D
X509v3 Authority Key Identifier:
keyid:05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d0:64:86:bd:e0:9e:2f:8b:a5:ac:9e:31:0a:84:ec:38:98:
e6:0c:4d:94:d2:47:4d:c6:22:66:96:11:ba:f2:20:ad:d8:7f:
f7:ad:7a:a8:4d:41:ea:99:5a:2b:f0:60:c3:f2:b9:4c:67:05:
29:91:f8:da:d8:ca:18:02:e8:f8:65:5f:ac:70:93:30:dc:5b:
43:e1:ed:16:db:ca:76:24:0d:0a:7f:f0:4e:54:04:89:09:96:
14:e1:39:ec:dc:fd:71:5a:82:04:47:e2:6b:18:49:a2:5e:cb:
9e:7a:d7:54:ab:b9:25:e7:8b:28:00:d6:5c:34:bd:07:c0:a2:
df:8c:20:41:26:81:19:96:fd:64:5b:6f:5b:e8:13:0a:cc:03:
d5:4c:9b:93:85:8d:c1:9c:11:1f:9e:a1:7c:7c:95:6f:a8:ae:
ad:3d:b1:84:09:32:7b:93:27:b4:20:d9:f3:2a:74:81:a5:6a:
73:c6:cb:e9:42:dc:63:13:79:c7:d8:f2:02:72:07:2b:6c:99:
33:1b:62:8b:7f:61:ce:07:01:a0:11:9d:c7:ad:e6:81:bd:62:
da:ed:06:21:3a:84:46:78:73:fe:42:94:f5:1c:00:0e:f5:53:
4b:ed:26:c3:f8:f4:ba:21:ca:76:aa:0e:d8:04:7d:f8:88:14:
bf:77:cb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 23:29:57 2025 by rpki-client