Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
File: BjtmD1abVGtTDsbeabMIs2k-f3Q.mft (raw, json)
Hash identifier: k3QSjoDplhdqJRRTFaYYnkPaj06y3RQwpAC2p7ypp90=
Subject key identifier: F6:92:1F:2A:9E:03:C4:7C:0A:DF:27:1A:78:6E:62:85:03:F6:A1:78
Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
Certificate issuer: /CN=063b660f569b546b530ec6de69b308b3693e7f74
Certificate serial: 019937CAB9E36FC2C46DCB7E95A6456BD785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
Manifest number: 1612
Signing time: Thu 11 Sep 2025 08:00:56 +0000
Manifest this update: Thu 11 Sep 2025 08:00:56 +0000
Manifest next update: Fri 12 Sep 2025 08:00:56 +0000
Files and hashes: 1: BjtmD1abVGtTDsbeabMIs2k-f3Q.crl (hash: S79DlWgjy5QLlbYwY+aqI57qrKJlzcxbHp4B/+/AVTc=)
2: r96qSxTq9VrHJe-onW3LkjF49Kw.roa (hash: p6sDqHuX82k5Unz8oj5BmB2jdvjyrfcaODzxUCtvtmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:ca:b9:e3:6f:c2:c4:6d:cb:7e:95:a6:45:6b:d7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74
Validity
Not Before: Sep 11 08:00:56 2025 GMT
Not After : Sep 12 08:00:56 2025 GMT
Subject: CN=f6921f2a9e03c47c0adf271a786e628503f6a178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:1c:fe:23:61:87:e4:73:a6:fa:f6:da:1d:
d1:87:75:43:1d:e1:94:90:c3:44:4d:f6:d4:c7:ef:
00:58:3d:23:cd:14:04:80:a5:88:2a:f2:78:1b:37:
59:38:e3:e8:37:d2:82:ee:b4:56:92:7e:28:1d:0f:
d2:f5:92:02:30:45:28:79:e0:de:38:e4:bb:77:26:
f2:fb:00:bf:20:bd:f3:cc:ae:08:29:a9:49:89:c0:
f4:4a:61:f4:ee:34:22:d9:0e:1f:b4:ae:f7:fd:d9:
62:96:2e:8b:9b:52:fe:7c:d4:ef:91:af:56:ff:83:
10:28:b8:75:3c:6b:0d:83:2c:63:8b:50:1e:4f:ce:
31:19:cb:fd:08:49:c5:7f:bf:90:68:9d:d4:f2:16:
06:26:2e:e1:35:6c:6d:22:9b:d2:76:74:e0:f5:77:
e8:a1:79:44:88:ed:09:48:32:0f:9e:74:22:61:ee:
d9:d8:d0:a7:c0:6e:65:60:48:6b:8d:1d:f6:31:6d:
0f:85:a4:5e:57:da:b8:ac:61:85:9e:1d:cc:b7:ac:
3b:92:f3:07:dc:8d:84:2a:1b:7e:47:9d:ca:ef:9a:
29:a1:38:43:43:ed:94:5e:70:0b:3f:b7:23:3e:62:
3d:81:74:13:37:c6:bb:57:95:5e:8c:a4:0a:3d:09:
87:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:92:1F:2A:9E:03:C4:7C:0A:DF:27:1A:78:6E:62:85:03:F6:A1:78
X509v3 Authority Key Identifier:
keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:43:97:3c:b3:6e:76:a0:6d:f8:49:f5:e7:bd:6c:f7:b7:16:
b6:94:4b:2a:f6:c7:98:d1:49:46:99:92:77:bc:72:e8:86:d1:
e2:67:db:8c:a9:bf:cc:64:c1:d3:1f:cb:8f:b5:ea:a8:a4:77:
07:84:9f:8f:85:e9:43:71:f3:91:61:85:b1:2a:de:7b:88:c4:
56:03:68:45:63:14:b2:f8:4d:63:d2:49:55:80:93:53:e4:69:
a3:ea:d4:be:7f:13:dc:96:7c:d2:cb:aa:51:bc:57:84:86:72:
f4:7b:fb:11:29:e2:85:b9:04:eb:c1:8e:37:98:8e:06:cb:af:
e3:20:1a:d7:c0:55:ff:86:73:17:10:c6:66:fa:16:54:61:a1:
e6:5a:86:22:6a:8c:b4:1d:15:5f:05:f0:e1:c7:a6:63:ea:f2:
fc:fe:95:f5:e2:43:ae:a9:70:62:44:a5:04:fc:5c:ac:39:db:
bd:21:54:cd:55:3b:66:1f:87:9c:1b:aa:d8:7e:f0:4b:38:ff:
ea:2e:ac:9d:01:52:7b:86:4b:c8:98:3f:e8:a6:f0:ca:b5:bf:
ef:69:85:65:6b:2d:48:79:ea:86:33:c7:eb:b6:44:fc:f5:21:
56:fb:f7:fc:e7:c5:6b:29:a6:cc:b6:48:c9:1a:b9:b2:d7:ce:
74:d6:da:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk3yrnjb8LEbct+laZFa9eFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2M2I2NjBmNTY5YjU0NmI1MzBlYzZkZTY5YjMwOGIzNjkz
ZTdmNzQwHhcNMjUwOTExMDgwMDU2WhcNMjUwOTEyMDgwMDU2WjAzMTEwLwYDVQQD
EyhmNjkyMWYyYTllMDNjNDdjMGFkZjI3MWE3ODZlNjI4NTAzZjZhMTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWEc/iNhh+Rzpvr22h3Rh3VDHeGU
kMNETfbUx+8AWD0jzRQEgKWIKvJ4GzdZOOPoN9KC7rRWkn4oHQ/S9ZICMEUoeeDe
OOS7dyby+wC/IL3zzK4IKalJicD0SmH07jQi2Q4ftK73/dlili6Lm1L+fNTvka9W
/4MQKLh1PGsNgyxji1AeT84xGcv9CEnFf7+QaJ3U8hYGJi7hNWxtIpvSdnTg9Xfo
oXlEiO0JSDIPnnQiYe7Z2NCnwG5lYEhrjR32MW0PhaReV9q4rGGFnh3Mt6w7kvMH
3I2EKht+R53K75opoThDQ+2UXnALP7cjPmI9gXQTN8a7V5VejKQKPQmHqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaSHyqeA8R8Ct8nGnhuYoUD9qF4MB8GA1UdIwQY
MBaAFAY7Zg9Wm1RrUw7G3mmzCLNpPn90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQt
YmMyNWFlNmViMTNjLzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQtYmMyNWFlNmViMTNj
LzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkOXPLNu
dqBt+En1571s97cWtpRLKvbHmNFJRpmSd7xy6IbR4mfbjKm/zGTB0x/Lj7XqqKR3
B4Sfj4XpQ3HzkWGFsSree4jEVgNoRWMUsvhNY9JJVYCTU+Rpo+rUvn8T3JZ80suq
UbxXhIZy9Hv7ESnihbkE68GON5iOBsuv4yAa18BV/4ZzFxDGZvoWVGGh5lqGImqM
tB0VXwXw4cemY+ry/P6V9eJDrqlwYkSlBPxcrDnbvSFUzVU7Zh+HnBuq2H7wSzj/
6i6snQFSe4ZLyJg/6KbwyrW/72mFZWstSHnqhjPH67ZE/PUhVvv3/OfFaymmzLZI
yRq5stfOdNbaBA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 12:48:38 2025 by rpki-client