Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
File: bTi1QIMcnNXfSAhRpygGZ-181kc.mft (raw, json)
Hash identifier: +b7GhxfBDTz54IsUUPloxB4Rgh+VcYhkC1HxmZ5IlIc=
Subject key identifier: BC:BA:07:8B:D8:EB:6C:20:15:0B:BD:53:92:92:61:8B:2D:32:D9:ED
Authority key identifier: 6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47
Certificate issuer: /CN=6d38b540831c9cd5df480851a7280667ed7cd647
Certificate serial: 019A4FD0567924F943C72F8EA5F08EA0FC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
Manifest number: 0B2D
Signing time: Tue 04 Nov 2025 17:00:44 +0000
Manifest this update: Tue 04 Nov 2025 17:00:44 +0000
Manifest next update: Wed 05 Nov 2025 17:00:44 +0000
Files and hashes: 1: bTi1QIMcnNXfSAhRpygGZ-181kc.crl (hash: D8yjqOszSagrT8RkGcOB06FRAw17BwyzdqzOTFncikk=)
2: okBQ3HYZQrL6ORKAHfJHyIzTOqU.roa (hash: 8hx35QaymOBGYmgY5QQuJWW8cF+INO74gqLHBnenUT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:56:79:24:f9:43:c7:2f:8e:a5:f0:8e:a0:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d38b540831c9cd5df480851a7280667ed7cd647
Validity
Not Before: Nov 4 17:00:44 2025 GMT
Not After : Nov 5 17:00:44 2025 GMT
Subject: CN=bcba078bd8eb6c20150bbd539292618b2d32d9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c7:6f:2d:b7:6e:42:97:a7:94:fb:18:73:8a:
36:6a:c2:6d:8a:81:6d:0f:53:ce:94:de:40:4f:e8:
77:bd:4b:40:6a:66:44:64:ab:35:6a:7a:94:4b:6c:
3b:03:7f:bc:90:b0:32:86:02:50:d4:cc:13:74:39:
34:da:7c:ac:40:4c:a0:6d:c4:cd:54:95:a0:59:64:
d3:ba:77:47:5c:72:c0:b1:03:f1:25:aa:3d:26:26:
46:21:a6:cb:93:c0:b9:27:4c:2d:f9:ca:71:36:01:
f7:4d:b9:1c:e4:59:c3:b4:74:6f:f3:b6:07:8a:37:
72:1d:aa:de:e8:f1:53:c4:98:37:d8:de:36:77:e8:
3f:7d:a0:47:93:e4:c4:df:8a:58:e9:19:b9:6a:dd:
87:b9:58:69:f9:86:bc:f0:57:64:13:bb:0d:24:ae:
84:93:5c:79:1b:4e:4a:b3:6d:b9:2f:cf:fd:ce:54:
12:26:cf:dc:92:0e:ec:b0:13:62:7b:1f:16:c7:eb:
2a:61:4e:4e:17:f3:20:70:b0:7c:d9:d3:d8:23:be:
e6:c0:c9:f4:b9:00:5d:25:70:74:e6:ac:db:c4:13:
4a:22:c2:3f:bb:7e:ab:42:5a:99:10:2a:e5:12:e5:
14:c0:9c:1d:04:79:81:c3:c6:ad:56:e7:9d:77:d9:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BA:07:8B:D8:EB:6C:20:15:0B:BD:53:92:92:61:8B:2D:32:D9:ED
X509v3 Authority Key Identifier:
keyid:6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0e:6d:c9:db:c0:14:09:b2:be:da:6e:86:08:4b:64:11:88:
f8:cf:a9:22:e7:46:9d:bb:3b:1c:14:ea:65:94:3f:93:af:d3:
51:a9:84:f8:ce:e9:42:e8:a6:c1:1c:0a:fe:f6:fe:4f:16:83:
0b:75:b6:2a:63:f6:06:18:e5:31:cd:51:79:5f:28:60:fc:48:
eb:56:f1:9b:9b:55:40:21:52:fb:d7:36:0b:cf:f9:3e:7d:04:
b4:ad:07:c8:21:d2:04:c8:1d:99:71:1d:a6:b2:c8:01:eb:b3:
c7:cc:d0:90:68:f7:d9:82:0b:17:c6:38:c5:63:77:6b:c7:01:
4e:ba:44:58:c0:a5:66:88:8b:91:81:64:8e:04:99:67:9e:4e:
f4:b8:52:9b:75:4e:7b:62:2a:d6:ee:da:76:d4:95:0d:c2:22:
8d:b4:a7:d9:60:97:46:4b:be:92:ca:be:97:fe:1e:0a:92:ea:
35:fa:94:09:ba:93:be:88:d9:44:c1:fe:ae:9b:87:20:ff:f7:
a4:ac:1a:f1:e4:da:fe:b0:08:dc:6e:04:5b:bd:9d:f1:15:bd:
07:ef:46:96:36:69:9f:29:23:97:a7:d3:a7:d0:a8:80:36:7e:
64:ea:d2:00:4f:27:d8:a1:74:66:3b:08:b0:27:9f:f1:cc:f3:
c5:01:94:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:16:49 2025 by rpki-client