Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
File: BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json)
Hash identifier: Cpm/3SjMh9lHh4mLDowa+OB/FN0LF1y1Y9ykKbO6jjo=
Subject key identifier: AD:C9:A3:5B:D1:75:5E:72:FB:5C:5B:05:3F:3A:95:66:A9:85:C5:C9
Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Certificate issuer: /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Certificate serial: 019A4DE182A49A75C5B6479A06594A77F5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
Manifest number: 165C
Signing time: Tue 04 Nov 2025 08:00:15 +0000
Manifest this update: Tue 04 Nov 2025 08:00:15 +0000
Manifest next update: Wed 05 Nov 2025 08:00:15 +0000
Files and hashes: 1: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: lFYvJ6EeTCpfmCTevEYd7Kr53UXws6vl8Q1zOaSeS6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:82:a4:9a:75:c5:b6:47:9a:06:59:4a:77:f5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Validity
Not Before: Nov 4 08:00:15 2025 GMT
Not After : Nov 5 08:00:15 2025 GMT
Subject: CN=adc9a35bd1755e72fb5c5b053f3a9566a985c5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:88:80:df:cf:72:28:94:00:87:3b:91:14:
9b:b3:f9:87:a9:de:ce:b5:73:85:f3:39:c0:02:fb:
1c:e4:c3:95:91:0f:25:f1:7e:6b:fd:d0:27:2f:b4:
8c:80:44:8c:27:be:3b:45:81:a0:18:fb:94:4f:63:
d9:39:5e:41:36:d5:25:83:1d:8c:ec:5a:6e:63:23:
07:9e:99:7b:e7:b0:50:63:b9:fc:67:6e:eb:72:85:
d4:03:85:bc:0a:4b:7e:fd:04:9e:5c:ed:8e:eb:38:
23:fa:f4:3a:ef:2f:51:c4:1f:1b:c7:a5:a7:12:99:
cd:7d:0e:c0:12:2c:32:d0:7c:d5:9e:f9:e2:08:e4:
cc:ad:47:6e:3c:b1:74:e6:ac:93:29:f3:5d:8d:19:
e7:e2:76:e5:c9:db:f8:1c:06:34:2c:c7:e9:58:70:
b4:d8:6a:50:42:2a:06:2b:b9:e6:5c:f9:9f:a6:c0:
63:8c:50:d5:94:af:fb:24:e4:35:d1:e6:e0:d1:08:
91:c7:c1:fa:b6:9b:d7:38:af:a5:4f:0e:45:36:8d:
c9:f7:ec:7d:bc:4e:ee:78:88:06:0c:ea:af:f2:06:
30:4c:8d:1a:c8:df:a1:e7:e3:6d:38:6b:16:8e:ba:
3e:46:3e:d1:c4:c2:d1:1f:28:bc:97:18:82:0e:37:
52:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C9:A3:5B:D1:75:5E:72:FB:5C:5B:05:3F:3A:95:66:A9:85:C5:C9
X509v3 Authority Key Identifier:
keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a5:b6:a1:fd:12:dd:0c:f9:ed:47:7a:8a:bb:61:91:72:34:
84:be:e2:81:ca:59:42:4f:e1:2a:9d:23:eb:6e:5a:ad:e2:43:
30:1d:17:99:b7:0f:63:b1:f1:78:0e:db:de:3a:70:ff:4b:91:
e0:68:e6:3e:41:63:2f:20:8b:a9:ea:b9:c7:f6:06:48:69:18:
60:a8:99:11:d0:50:fe:0e:00:57:b6:7e:7f:3d:57:c7:fc:5c:
72:45:ef:8b:6c:5d:71:77:9a:16:57:e6:28:b0:56:7b:09:5a:
8f:cb:d0:4c:72:44:99:16:b8:9d:e7:9b:75:a3:43:77:7d:e0:
60:9a:f5:1d:f3:45:58:c6:4d:dd:f3:9e:7d:62:be:97:a5:6b:
d9:eb:99:65:46:8c:c0:1a:48:d3:95:df:d8:6f:fc:32:b8:f4:
a6:db:c7:05:33:18:28:59:de:7f:ca:67:b7:84:dd:5c:77:f6:
00:36:38:0f:6c:7c:a5:63:31:3e:07:04:b7:8a:c2:42:43:0d:
25:57:be:14:6a:cc:c0:9c:17:78:e6:04:27:45:18:b3:06:d3:
b3:cf:71:ec:6a:f0:85:91:b9:9d:1e:1f:0f:51:d8:de:48:5c:
56:46:f5:37:69:01:ec:fb:8c:bf:47:96:49:b6:d2:33:fb:ee:
62:5b:10:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:37 2025 by rpki-client