Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
File: Bt76ExH1P2xEFGPaj6s0A61ogBE.mft (raw, json)
Hash identifier: vAcyoWtMvkHX6YAZrFcvmMI9rS6nnnOQLXWNbkW8XQk=
Subject key identifier: 1C:75:AC:4C:2C:F0:0C:6B:69:65:CB:2E:6A:F7:35:0A:D8:27:C6:63
Authority key identifier: 06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
Certificate issuer: /CN=06defa1311f53f6c441463da8fab3403ad688011
Certificate serial: 019A4E869A397B036B20E35D52866EBAD135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 11:00:35 +0000
Manifest this update: Tue 04 Nov 2025 11:00:35 +0000
Manifest next update: Wed 05 Nov 2025 11:00:35 +0000
Files and hashes: 1: Bt76ExH1P2xEFGPaj6s0A61ogBE.crl (hash: r+vx/Hwvuy6v+b8tRhbPrv427mMMrN3a2OFAswhL/Uw=)
2: psfbhPGIR9OS3HR7S3qur-oF2Wg.roa (hash: FlkCUGKA6sKM5xnwOPU8XOcnUGbtF79h6pPDmcgLJm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:9a:39:7b:03:6b:20:e3:5d:52:86:6e:ba:d1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06defa1311f53f6c441463da8fab3403ad688011
Validity
Not Before: Nov 4 11:00:35 2025 GMT
Not After : Nov 5 11:00:35 2025 GMT
Subject: CN=1c75ac4c2cf00c6b6965cb2e6af7350ad827c663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:22:e0:ff:dd:8f:45:46:37:75:aa:71:b4:
c4:af:fb:e2:f2:6c:2c:2d:62:46:4f:19:74:a7:cf:
d2:37:00:d4:b7:1c:08:4e:9a:dd:f4:13:4e:91:e5:
d2:7a:cb:5f:64:04:c0:4e:eb:d7:6f:e8:2d:7c:49:
62:81:52:ad:ea:e2:0c:63:b8:3d:5d:f4:2a:2a:7a:
0a:e3:5d:74:00:49:0e:83:56:f2:aa:f6:4f:eb:fd:
79:e7:18:3b:a5:51:c7:e3:0e:ad:6c:05:b4:54:48:
2f:8e:3f:57:81:c3:59:e2:c8:1e:1d:da:84:2c:12:
0f:8d:40:2d:4a:f6:e3:c1:9c:2a:55:f0:89:99:44:
cd:09:92:d1:0e:1d:87:72:83:6e:42:b3:a2:d6:24:
4c:ed:e6:ad:42:a0:ad:07:f3:09:86:06:0a:ac:4c:
af:0c:08:3d:7c:81:73:14:b9:0c:a1:1b:c7:ad:53:
1c:63:78:2e:6b:1f:57:fe:ce:77:62:e8:9d:82:0a:
29:25:34:b1:3e:49:2e:46:0f:98:1f:2b:b5:aa:11:
8b:e8:8d:aa:70:fa:72:62:ea:28:7d:fc:53:da:25:
ca:93:dc:e2:38:0a:74:bf:98:68:fd:cd:34:0a:b6:
d4:a1:2a:e0:0c:bf:dd:16:37:a3:fb:2e:ba:55:84:
e8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:75:AC:4C:2C:F0:0C:6B:69:65:CB:2E:6A:F7:35:0A:D8:27:C6:63
X509v3 Authority Key Identifier:
keyid:06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:2a:64:16:ea:1e:34:fc:5c:c8:2d:4c:df:ae:5c:32:cc:50:
c9:87:c3:0e:89:5e:d3:f1:00:10:30:ec:49:91:bc:4e:d0:21:
57:ab:07:65:6e:b1:df:96:00:78:78:a2:92:91:f9:75:49:fa:
8f:07:23:14:6c:e5:a9:a8:d4:a3:0a:93:43:d9:f6:01:c7:fe:
3d:ec:ec:83:55:d0:56:e3:a9:ba:1b:4c:31:f9:00:b4:e0:0a:
a8:0d:25:82:de:d2:81:6a:e7:ad:e7:b0:93:8d:fe:83:50:81:
1e:62:ae:fd:41:73:1e:c3:76:e5:9d:b0:48:6d:00:21:7e:73:
97:17:d2:ce:07:ce:f7:2e:d6:8a:65:b4:d2:bc:af:8c:f6:94:
05:7e:6b:20:6e:a2:e9:fc:61:5f:5c:98:fc:97:91:63:13:3c:
8f:21:91:5b:cf:df:b9:48:6f:e1:21:9e:83:7f:dc:e9:c3:9c:
37:33:03:1c:12:26:6f:65:88:cb:90:12:da:9e:12:aa:ba:45:
db:c3:4c:52:48:32:cc:1c:c5:88:99:2f:fa:1c:da:fa:22:c9:
89:a7:6a:ae:f7:80:68:0c:9d:b0:d2:35:c8:58:4a:17:57:5b:
ae:5c:20:2a:88:53:67:6b:57:ca:75:7f:e2:ac:b7:97:38:e2:
4d:ae:bf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:08:26 2025 by rpki-client