Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
File: BjtmD1abVGtTDsbeabMIs2k-f3Q.mft (raw, json)
Hash identifier: ZvtPeJ/jmv7myg7SFXQH64AQ7AkOpz7shRGTcuzJKY8=
Subject key identifier: 7E:79:37:30:5D:7E:A6:1A:20:65:1C:9B:61:F7:10:9B:DD:10:3E:0F
Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
Certificate issuer: /CN=063b660f569b546b530ec6de69b308b3693e7f74
Certificate serial: 019A2553782E2AEE1731A3EDA142DB669934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
Manifest number: 168D
Signing time: Mon 27 Oct 2025 11:00:18 +0000
Manifest this update: Mon 27 Oct 2025 11:00:18 +0000
Manifest next update: Tue 28 Oct 2025 11:00:18 +0000
Files and hashes: 1: BjtmD1abVGtTDsbeabMIs2k-f3Q.crl (hash: rEjKSMYdi5cGv68jEJcn8g9DPtBoBDBo78c0S+L9iFQ=)
2: r96qSxTq9VrHJe-onW3LkjF49Kw.roa (hash: p6sDqHuX82k5Unz8oj5BmB2jdvjyrfcaODzxUCtvtmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:78:2e:2a:ee:17:31:a3:ed:a1:42:db:66:99:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74
Validity
Not Before: Oct 27 11:00:18 2025 GMT
Not After : Oct 28 11:00:18 2025 GMT
Subject: CN=7e7937305d7ea61a20651c9b61f7109bdd103e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:f6:aa:85:de:f5:f4:58:db:cc:e3:6f:8d:
0d:1a:d5:c5:73:4b:89:5e:1d:32:02:91:9f:cb:7f:
52:32:54:fd:27:df:d1:46:27:61:b2:ac:ab:fc:e7:
14:b9:44:d6:b9:66:d1:0c:29:eb:82:7b:3e:b4:39:
67:62:e2:74:e6:37:d0:71:08:45:a6:f5:f1:63:b6:
52:86:cf:9c:a6:32:1a:6a:52:0c:6e:68:ac:2b:d3:
37:8a:b9:a8:be:3b:b9:db:9f:f5:f5:44:6a:e4:78:
7c:cb:22:72:39:35:91:7e:68:de:ff:ce:61:73:88:
26:25:ee:28:51:fd:08:7b:9f:2a:ec:28:36:04:44:
92:7e:7a:00:67:b9:b3:a0:3b:7d:98:09:02:47:04:
eb:3d:8c:47:0d:f5:53:14:61:5f:f0:17:c2:22:c9:
3d:29:30:f5:b7:20:28:99:69:01:ec:c1:ff:0a:1b:
4f:c8:80:9f:b5:66:37:22:2f:57:ce:7d:75:6f:81:
21:78:ca:aa:e0:89:0d:55:17:2c:d1:ac:b5:cb:57:
79:65:52:1b:a9:62:d9:bf:fc:43:32:4c:a9:28:a6:
90:a0:62:aa:a0:39:1d:96:f6:aa:98:ef:65:dd:4d:
b5:6e:a7:35:aa:2e:72:d8:dd:e2:a9:12:5f:ac:93:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:79:37:30:5D:7E:A6:1A:20:65:1C:9B:61:F7:10:9B:DD:10:3E:0F
X509v3 Authority Key Identifier:
keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4b:e2:68:dc:f7:87:17:90:50:93:26:3b:ea:fe:a1:29:35:
43:13:d4:21:5d:35:42:c9:a2:39:e9:a5:42:06:60:ae:b1:f5:
80:b6:14:18:7f:69:ab:33:f1:bd:30:41:cd:63:e1:e8:f7:15:
41:11:c5:aa:af:28:15:af:7e:3e:4d:23:7e:c2:a5:be:3f:d0:
5d:f8:e2:31:53:ea:f2:94:ab:52:18:db:86:3c:16:4e:9d:95:
1f:1d:4f:67:9f:ac:47:28:58:d4:bf:fe:4f:2b:da:07:2a:43:
90:65:b5:be:e4:00:a2:2d:b0:a4:a9:02:bf:3f:92:6c:57:de:
a9:1f:3f:14:4f:b3:1a:3d:4c:13:a8:4a:ef:70:88:a9:32:30:
16:4c:d9:a4:1d:6d:f9:ee:29:0e:e6:9d:8b:4b:73:9f:36:3d:
4d:6f:c1:3f:9a:0f:ef:cb:22:52:60:e9:82:3e:d0:04:13:f2:
67:42:2b:79:b3:45:13:2b:ea:dd:4b:88:61:c1:ed:17:de:4b:
91:dd:f2:ba:fc:db:e5:2e:36:c8:52:90:df:a6:99:e1:c4:43:
5f:02:43:e2:01:03:5a:a8:53:02:7e:2f:78:49:75:fc:ad:de:
f8:f6:71:da:43:68:05:10:86:c7:ea:59:2e:83:84:76:2e:33:
59:8a:66:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:28:42 2025 by rpki-client