Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
File: bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft (raw, json)
Hash identifier: ICxD5zNS2EkxwbJ30LpVyZi0B8cBZHk4nLkqA0Hst5s=
Subject key identifier: DB:8A:69:05:2D:BB:0B:08:98:D4:52:B6:A3:8B:96:EF:AF:E2:98:CF
Authority key identifier: 6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
Certificate issuer: /CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Certificate serial: 019A725C5F99CED5E7F89DBE4AC63A0EF254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
Manifest number: 06D8
Signing time: Tue 11 Nov 2025 10:00:47 +0000
Manifest this update: Tue 11 Nov 2025 10:00:47 +0000
Manifest next update: Wed 12 Nov 2025 10:00:47 +0000
Files and hashes: 1: bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl (hash: e1CMrNCZOZRM21oIQ+M9z7NUoAov9eMZEP+kr2g9Dv8=)
2: kepUhm0anFry8RwMMkqJayre0fg.roa (hash: HEBHciDc0e+f+TYCTKlbfrh1hJ9IXR8LLwkK0vX0JYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:5f:99:ce:d5:e7:f8:9d:be:4a:c6:3a:0e:f2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Validity
Not Before: Nov 11 10:00:47 2025 GMT
Not After : Nov 12 10:00:47 2025 GMT
Subject: CN=db8a69052dbb0b0898d452b6a38b96efafe298cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:55:ed:76:be:8b:a4:6b:1e:87:36:86:a6:82:
20:43:b7:96:42:9e:63:7c:cb:c3:57:5e:ad:48:9f:
0d:9e:33:72:3b:c6:74:5a:16:2d:14:c4:22:de:b0:
da:4a:9c:d8:35:3b:68:70:ca:90:ac:15:40:43:48:
59:7f:96:2d:21:ba:bf:58:94:01:94:df:6f:e9:2e:
34:22:ef:c7:ff:c9:81:54:7f:28:49:32:53:df:b0:
63:3f:b0:06:72:65:93:22:8d:03:97:bb:da:81:4f:
75:2c:c3:24:de:1b:55:1b:c9:da:f8:18:36:f9:b0:
49:71:73:42:49:c0:94:f5:fb:a0:4d:3e:b8:74:33:
e4:30:c3:e6:60:66:a9:0e:2e:e0:b5:fd:f3:db:5c:
b6:c8:c2:03:62:9e:f6:5a:ca:c8:c3:c0:bc:4d:9f:
f0:f3:0a:3b:9f:55:ca:74:c4:0f:24:f9:e1:0c:d1:
0e:f7:36:57:7e:38:55:1c:ee:f6:7a:6b:e9:e4:a5:
26:41:01:b0:4a:98:43:23:89:80:95:5e:c4:94:e9:
87:8d:a0:ac:b6:8a:df:a3:ca:6b:ea:c6:02:a4:dd:
87:a8:e2:25:8d:70:d9:f5:f2:ff:ce:9a:7a:e4:b8:
2e:8d:cf:3d:a0:88:64:d4:c4:22:0d:6e:cb:dd:f3:
73:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8A:69:05:2D:BB:0B:08:98:D4:52:B6:A3:8B:96:EF:AF:E2:98:CF
X509v3 Authority Key Identifier:
keyid:6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4e:0d:a4:d6:b1:09:ec:29:3d:35:6f:5f:2f:7c:cf:84:c5:
cc:35:9b:06:98:09:ca:a3:72:85:89:ed:a3:b3:e2:72:e1:1b:
2a:2d:ab:cd:93:cd:ea:98:5c:8e:e8:6a:2a:cf:e1:e0:50:bd:
0e:cf:a6:6c:4d:be:4f:e1:82:ab:00:42:36:e0:e3:bc:b1:b9:
ae:6a:bf:bd:57:75:fa:71:6f:eb:2d:30:54:c6:3d:b6:69:70:
9f:88:f8:31:0a:38:65:93:f5:f2:f3:ff:04:2d:ed:84:2d:43:
b6:45:04:75:51:00:a3:cb:7c:66:cf:c4:64:d0:ac:0f:e9:e5:
e6:f2:a5:63:f2:e2:33:33:d6:18:5d:a6:0e:26:d9:ba:6c:76:
db:47:52:8a:0f:c9:31:3f:ba:85:93:91:a7:9e:90:22:0e:2b:
81:e4:8b:e5:3b:af:39:bf:c8:fd:02:ab:c6:c3:3c:30:5e:ae:
5d:fe:1a:49:b7:90:f3:ec:2c:ef:be:1b:ec:16:46:fe:cc:0b:
f4:c6:ed:ed:ee:1f:93:06:53:ad:d2:b9:6e:18:4e:42:b3:48:
de:ce:fe:58:be:df:eb:26:1b:1e:86:14:6c:12:a5:64:03:cc:
12:74:ae:59:0d:95:af:d1:d9:a2:b6:00:8c:55:34:e2:32:b7:
f9:e9:46:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:09 2025 by rpki-client