Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
File: bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json)
Hash identifier: Tixd6LPCQHlqXK2yALPj9/QCwxm1gjAoXn+z0czsvRA=
Subject key identifier: D6:B9:43:5E:1C:AB:F3:AF:CD:75:16:5F:9D:96:47:2F:C3:45:42:4E
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Certificate issuer: /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial: 019A51874622BFA2524DFE88E5380399A114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
Manifest number: 0B1B
Signing time: Wed 05 Nov 2025 01:00:11 +0000
Manifest this update: Wed 05 Nov 2025 01:00:11 +0000
Manifest next update: Thu 06 Nov 2025 01:00:11 +0000
Files and hashes: 1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: qqUPMkOn53S6cOPseIWxNcFvFK7WluDvwJLprySkBXw=)
2: kYlX8uk50adCvLD80f5Fzepy0uA.roa (hash: ha3QcBHkgMvicsrTAgTGPAD+hk2VZnwH2+hSQHLSUdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:46:22:bf:a2:52:4d:fe:88:e5:38:03:99:a1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Validity
Not Before: Nov 5 01:00:11 2025 GMT
Not After : Nov 6 01:00:11 2025 GMT
Subject: CN=d6b9435e1cabf3afcd75165f9d96472fc345424e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1c:d2:e9:21:d5:8f:c2:d6:ef:d5:a3:11:24:
a8:43:6e:11:c9:40:78:db:0b:3a:f4:5c:2b:25:10:
7c:fc:60:c9:fd:cf:89:70:4d:50:0f:52:c9:9d:e5:
62:fd:a0:53:4d:90:81:49:40:b2:7e:0d:ca:de:6a:
26:f0:37:99:36:ce:59:00:c8:26:f2:49:58:81:cd:
6c:f8:53:3b:86:de:81:0e:3e:87:48:7d:52:e0:57:
02:5c:36:6f:85:3c:ce:f4:35:54:ca:f7:2d:3f:33:
82:f5:18:94:f8:6d:c8:d5:38:fb:b2:f1:d3:ff:86:
a4:d5:04:3a:d1:57:a1:db:8a:95:45:c0:b4:e4:bc:
de:45:57:c9:23:43:8a:ad:2e:b8:92:ab:3d:f5:8c:
ed:65:76:bb:34:d3:53:da:cd:62:5e:cf:49:92:92:
a6:63:fc:1f:6e:69:18:d9:71:51:ea:14:8d:89:69:
15:ea:f0:5a:6b:72:48:2a:50:5c:0c:2a:78:83:24:
78:7f:7d:7d:c3:06:f6:6d:0b:2a:8e:2f:95:ec:17:
a3:9f:45:85:90:91:ed:5f:5c:4f:ab:8f:13:48:be:
ef:63:43:eb:23:57:8e:85:4d:45:8a:a2:b5:f8:9c:
09:1d:36:8e:b0:88:9a:46:f6:6f:93:f0:80:5f:60:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B9:43:5E:1C:AB:F3:AF:CD:75:16:5F:9D:96:47:2F:C3:45:42:4E
X509v3 Authority Key Identifier:
keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:70:98:49:66:f3:d6:e1:ba:54:eb:68:9f:9e:0e:a0:5d:68:
73:5e:08:e0:b5:d3:c1:a6:ce:17:20:4c:25:ee:68:cb:ab:31:
d2:7c:1b:66:b0:04:28:c8:25:6b:8e:c8:dd:90:2d:98:7a:f6:
fa:f4:ac:76:f1:3c:c0:24:8f:38:bf:c6:02:c0:6b:e7:f7:a7:
9a:aa:d2:5a:3b:b8:73:78:18:61:9d:4d:43:18:5e:31:4f:d6:
8b:e3:10:26:84:84:c4:a4:c4:90:b7:ab:98:02:45:ac:94:55:
13:cf:5d:0b:94:d6:07:0f:dc:f5:0a:c4:c0:d2:58:19:8f:da:
9e:ce:5a:e5:32:2c:95:63:75:95:22:9a:7f:96:19:a3:07:7f:
f0:de:ca:ad:73:18:4a:19:1b:15:55:86:66:3d:e9:8b:61:d3:
83:5d:35:10:8a:b3:63:42:6b:23:bb:b0:26:36:54:cc:3b:16:
6c:f8:6a:be:99:54:d2:ff:e9:22:3f:bd:1c:23:39:8c:f5:c4:
de:14:21:f9:36:76:d9:86:83:8e:9a:e5:90:01:27:8f:97:65:
c5:29:24:af:4c:c1:94:ff:59:6c:c3:6f:71:af:8f:30:bc:5b:
5e:ff:b3:1e:99:1b:8b:31:4a:91:54:86:3c:2e:67:c5:ca:9a:
13:45:13:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:20:47 2025 by rpki-client