Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
File: BT0E5yuySceesRaM8dQ6PKVIwgY.mft (raw, json)
Hash identifier: 5OgBNgrUJmU5xCxeO+AVLryBgAxpf1HE+QW1pCs59Vs=
Subject key identifier: EC:3F:D1:AA:8F:7E:78:FB:C6:EF:A6:CB:1A:23:C1:B9:12:7B:8E:53
Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
Certificate issuer: /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Certificate serial: 019A2741FEB6F1701956F4879ABE94720BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
Manifest number: 16FD
Signing time: Mon 27 Oct 2025 20:00:27 +0000
Manifest this update: Mon 27 Oct 2025 20:00:27 +0000
Manifest next update: Tue 28 Oct 2025 20:00:27 +0000
Files and hashes: 1: BT0E5yuySceesRaM8dQ6PKVIwgY.crl (hash: XrKhsQV1rqGNu/YoM6YDDsUaUHwJZE2t26kn8moJY+o=)
2: G_k9NL-0qSjxQ-N8gyE0UgbOo9M.roa (hash: sfKsed8cbHTfZnhsfNvOSJ3wM7bTV9Orf16wnTecseo=)
3: Rjlay2bsLeiLaIl-NsumYdJm6Mk.roa (hash: Nxxu/I2qHn6XTGTRcNBX012HcDX5qyNV7NJNim7iGOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:41:fe:b6:f1:70:19:56:f4:87:9a:be:94:72:0b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Validity
Not Before: Oct 27 20:00:27 2025 GMT
Not After : Oct 28 20:00:27 2025 GMT
Subject: CN=ec3fd1aa8f7e78fbc6efa6cb1a23c1b9127b8e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ca:9d:cb:90:a7:93:b3:e2:a5:dc:04:4c:46:
98:aa:a1:6c:07:e3:a9:37:f1:37:6e:df:8d:1f:b3:
f9:13:f8:fd:3e:be:ed:e0:02:9b:3f:c2:5b:5f:1e:
48:aa:e3:7e:f7:e4:89:78:a5:55:aa:f3:97:e7:4c:
d7:c6:e5:65:75:3b:cc:5b:ff:89:76:4a:54:cb:4e:
a6:22:bf:48:f6:0a:05:14:06:13:4d:a4:57:a6:03:
2e:5b:a9:12:59:5c:3e:2e:86:1e:51:d4:8f:71:00:
2f:c9:37:47:43:9b:aa:83:46:ce:95:d3:5d:81:ba:
90:71:a1:9e:cf:62:3a:e5:d2:3b:3f:f1:e3:99:88:
31:02:ee:c2:3b:27:d6:8b:a3:f6:5c:29:a3:16:6f:
27:35:3d:d8:3a:6d:b3:8d:1a:4b:31:8b:80:13:87:
7f:50:ad:28:a0:33:08:58:a9:cb:50:da:f1:da:33:
40:b0:bf:f9:08:46:f0:f8:15:29:25:44:67:2e:dc:
ad:08:90:a2:89:1d:ad:47:13:04:5e:7f:af:c2:47:
f0:ff:2a:fd:1f:90:68:07:fd:48:53:b7:48:79:e1:
77:07:62:ae:b4:c4:3c:12:ee:30:71:2e:18:a3:19:
72:25:b4:d4:3d:2d:60:cc:34:28:83:04:05:79:cd:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3F:D1:AA:8F:7E:78:FB:C6:EF:A6:CB:1A:23:C1:B9:12:7B:8E:53
X509v3 Authority Key Identifier:
keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f2:42:0b:8f:18:e3:fc:53:a3:f8:13:6f:02:f4:67:7c:72:
3d:1b:2c:42:4b:63:ca:e8:84:67:b4:fa:e8:b5:81:11:e2:92:
c8:44:ad:ec:3b:08:72:ba:4a:09:54:38:0d:a5:92:3f:28:41:
bb:8d:9f:c0:fa:07:37:fe:4d:7b:71:b0:d5:be:96:90:7e:2b:
c9:fd:2a:37:5d:05:75:bc:62:2f:ab:4d:6c:fc:7e:ef:8a:31:
e3:78:e6:1e:ef:07:6f:1e:6c:51:e6:57:3d:c7:75:08:85:55:
14:2a:de:6b:11:52:95:0c:e2:45:ae:bd:63:3c:02:49:24:da:
c3:d8:17:16:a8:2c:0b:8f:cb:30:96:bb:0c:f4:81:76:8e:bb:
e4:06:fc:3b:6f:f8:43:18:b2:fa:a5:57:c0:4e:6c:5b:5c:94:
3d:46:11:61:76:65:d3:2b:2f:58:91:b9:c1:8f:b8:58:bb:f3:
1e:e1:cf:bb:ed:74:ff:90:21:b7:5f:38:ea:76:79:ed:38:d8:
e3:f6:63:ad:d7:2c:a6:99:88:93:1d:43:02:cc:04:e8:e8:f6:
cf:8e:be:9b:07:e2:74:03:3b:9b:db:e5:3e:c9:a1:ff:70:0a:
3f:64:ff:b6:45:68:09:76:4d:0b:e7:66:43:4c:bb:ca:a2:b6:
9c:74:6d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 05:21:23 2025 by rpki-client