Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
File: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json)
Hash identifier: tpU54DTes8x10GNJ919dzwGLhF/IbN7jZLc9tMnaLAI=
Subject key identifier: 64:6B:28:92:D1:60:DD:7A:8D:49:4F:90:54:2A:36:C6:1C:1E:11:2C
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Certificate issuer: /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial: 019A4F6266C5B996E35171AE2C713C4535DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
Manifest number: 0B44
Signing time: Tue 04 Nov 2025 15:00:40 +0000
Manifest this update: Tue 04 Nov 2025 15:00:40 +0000
Manifest next update: Wed 05 Nov 2025 15:00:40 +0000
Files and hashes: 1: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: C4+hyGvU3LWiSIEqZl7fCxGc1rkduDB4iixfSLCZLt4=)
2: pE_MPWSO2KtGb_d1FHNpKYmtUdU.roa (hash: zv4aepR6TBKlEBTPf/7SbPyiKj3XM1LCzYruoFBSb5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:66:c5:b9:96:e3:51:71:ae:2c:71:3c:45:35:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Validity
Not Before: Nov 4 15:00:40 2025 GMT
Not After : Nov 5 15:00:40 2025 GMT
Subject: CN=646b2892d160dd7a8d494f90542a36c61c1e112c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:78:22:f0:23:90:0e:2a:2c:5b:ba:95:49:
4a:5f:f0:0b:68:e3:04:6d:a4:17:89:85:ba:8e:15:
7f:b6:71:5f:d0:4d:9c:f8:49:92:5e:71:e6:bd:67:
49:63:e2:dc:80:e0:e9:68:bb:3d:19:43:66:b3:0e:
1f:ee:9e:c8:52:4e:38:a7:60:28:f6:fb:fc:01:3a:
21:aa:94:cd:b7:dc:73:92:20:1c:7e:89:fe:79:40:
a3:d8:35:a2:20:b7:c2:3a:b0:da:fa:4a:74:80:cb:
6b:76:8e:57:68:cc:6d:9d:49:81:02:05:5e:d3:ec:
24:32:f5:24:53:c6:61:9a:ec:d1:ff:02:c9:bc:0d:
5e:bd:e6:96:69:b0:23:9d:d6:c0:4a:ce:0b:93:59:
bd:fe:87:ea:cc:3e:98:90:b1:51:99:22:a4:8c:c8:
b3:00:3b:2c:6a:6a:72:23:ff:e2:ad:d9:15:a5:20:
01:29:9e:78:47:a3:58:1b:55:16:29:a3:f2:20:ec:
ca:04:4b:9d:3e:9a:8c:fd:f3:54:98:37:2e:bd:2b:
13:21:bf:64:44:51:d2:03:2b:c9:9f:8a:94:9a:df:
02:b5:cc:48:ab:94:33:2e:74:a6:4c:af:b8:8f:14:
1d:a8:fe:c8:c6:77:72:26:ea:60:1b:63:28:14:56:
99:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6B:28:92:D1:60:DD:7A:8D:49:4F:90:54:2A:36:C6:1C:1E:11:2C
X509v3 Authority Key Identifier:
keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a3:f1:74:48:c3:9b:d5:93:94:3e:9a:81:0f:cd:a4:ce:40:
7f:23:7b:39:3e:c8:6a:c1:35:f0:79:0b:c3:7c:ac:74:61:a2:
68:c9:d3:ee:6e:5b:70:13:d3:8c:3d:50:ef:3f:bb:ca:67:4a:
65:09:33:7b:df:15:c0:f6:f9:47:fc:9f:d9:ae:45:e2:b0:a6:
1d:e2:c9:36:b5:63:32:18:e6:5f:c9:7d:88:8b:df:18:7c:6f:
03:38:84:5f:e0:83:ee:bc:df:5f:f3:86:47:b6:b9:d4:0e:ab:
d8:fb:ab:aa:8f:26:2a:a6:65:3c:f1:34:2d:f0:ba:fd:d7:68:
f0:65:9b:af:fb:87:70:da:eb:ff:3d:d0:5d:f2:9d:ad:f7:5a:
e5:cb:e1:8a:5d:12:fc:a6:99:6d:46:1e:01:f4:bb:82:3b:d0:
f7:47:50:31:15:fb:0c:cf:00:f2:03:54:34:72:91:88:cd:53:
5e:47:98:92:9a:ce:ea:f5:14:40:66:76:29:4a:ea:83:4f:36:
a2:3e:ad:41:25:c5:41:c6:3b:e1:8d:c1:a5:ad:86:32:58:b9:
81:29:f6:9d:8f:45:73:59:53:a2:55:b3:1c:02:ad:6c:51:a6:
bb:4e:50:67:8a:5a:9b:36:7a:8f:dc:1c:5b:eb:53:84:20:89:
66:f0:45:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:34 2025 by rpki-client