Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
File: BT6UUB8P0s3qPC57RjGObn9RX3M.mft (raw, json)
Hash identifier: j17iKepaE/kcDPBfMe/L3gRGHAiEDEFomhQ5ExqK3c4=
Subject key identifier: DE:1C:DF:9B:AB:A8:D4:03:5E:56:9D:62:D5:7A:0D:7E:EC:88:D5:7A
Authority key identifier: 05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
Certificate issuer: /CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Certificate serial: 019A4F2B3C4C0BE63B270E543155B354589A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 14:00:24 +0000
Manifest this update: Tue 04 Nov 2025 14:00:24 +0000
Manifest next update: Wed 05 Nov 2025 14:00:24 +0000
Files and hashes: 1: BT6UUB8P0s3qPC57RjGObn9RX3M.crl (hash: RC18349FyBoDioYLuiMKAXVJGXSbI69JX1Mc+q7hdlc=)
2: PW26W-VSuEOhQv0UYQiviWvM3PQ.roa (hash: amtlrhmVHqku8l89qlGVcPiKPSCbAqVjZC9kdgQdMxM=)
3: QczbEnEasBPtVeB0j7ed4Z5MN4U.roa (hash: sUqwVjOZmcM++cyXTD0/dLISqQO4KRPxQz8w/SRG0nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:3c:4c:0b:e6:3b:27:0e:54:31:55:b3:54:58:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Validity
Not Before: Nov 4 14:00:24 2025 GMT
Not After : Nov 5 14:00:24 2025 GMT
Subject: CN=de1cdf9baba8d4035e569d62d57a0d7eec88d57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d3:1c:fe:02:83:a7:07:be:87:ad:7e:b9:1b:
10:08:41:71:a7:4b:39:83:a5:ac:6c:8c:b3:21:4e:
76:b0:c2:04:e8:b1:97:af:cd:67:6d:b2:6c:e3:16:
fb:0f:54:e0:8d:a9:9a:1e:01:bb:93:82:65:bc:17:
68:ba:89:72:25:fa:af:51:52:8b:72:4c:02:aa:2e:
3b:fb:8d:1d:b5:a2:f8:1e:1d:d4:3c:e7:a5:01:d6:
3a:34:2a:35:ea:ce:49:22:19:19:0f:48:9d:39:c1:
23:32:0f:b2:bb:cd:d3:00:46:23:de:23:f1:08:38:
96:03:77:aa:d0:cd:52:9c:6f:30:aa:84:be:8b:91:
79:9a:a5:8d:2b:67:06:aa:61:f2:ee:e7:13:d6:30:
40:e5:11:3c:77:f3:f9:0c:7b:e2:73:b3:c3:b0:c4:
b0:a7:2d:25:cd:d4:9e:98:a5:96:b0:40:d9:44:47:
66:bc:91:5f:93:30:17:63:b8:13:84:f9:6e:91:b6:
25:35:95:89:1b:12:61:69:9f:ec:45:d0:0e:a2:49:
b0:38:77:c6:4e:35:9b:ac:37:4e:52:f2:d7:1c:af:
e4:90:c1:cf:fb:ba:51:fd:2c:14:98:36:1c:b5:40:
98:42:4b:ef:2e:31:8a:19:03:cc:12:b0:a9:b0:ef:
fb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1C:DF:9B:AB:A8:D4:03:5E:56:9D:62:D5:7A:0D:7E:EC:88:D5:7A
X509v3 Authority Key Identifier:
keyid:05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f3:5f:b9:c8:fc:15:2e:65:3b:c8:ab:60:ed:61:ea:c3:48:
a9:dd:55:f8:42:75:de:ec:50:1c:7d:32:06:ee:fe:93:b7:39:
37:5a:c1:f2:d9:35:5f:2a:19:22:dd:15:d5:ae:c5:53:2a:99:
73:21:eb:f5:6a:13:40:c6:4e:4d:28:b1:74:2d:d8:39:d4:65:
0e:aa:ea:86:58:d0:5e:88:34:c4:62:ee:1d:ec:fe:83:40:34:
b2:73:ea:0f:28:bc:71:df:77:37:03:e9:d1:fc:b0:fa:d5:05:
01:b1:aa:07:a7:94:33:30:07:4b:84:94:9d:53:6f:a2:29:1d:
0d:12:b5:22:c8:64:b0:b7:77:82:0d:8a:3c:8d:8e:c1:e1:1d:
c2:a5:81:36:19:1f:c7:23:39:c1:40:a7:9f:db:45:eb:a8:2f:
51:11:aa:ca:35:85:e6:9e:ca:dc:63:91:ea:5c:84:a1:90:c5:
11:0a:75:fa:6e:39:82:63:95:39:1f:61:ae:87:8b:e2:54:d2:
d4:d7:b3:73:10:73:46:0a:eb:4f:12:cb:ff:3c:e8:c0:a2:58:
b3:b3:4a:d1:6d:cb:32:4b:ac:ff:25:30:76:ad:98:67:49:35:
8a:c0:99:aa:b6:7e:68:37:bf:47:e8:e3:16:22:f0:8a:79:a4:
fb:14:2c:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKzxMC+Y7Jw5UMVWzVFiaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1M2U5NDUwMWYwZmQyY2RlYTNjMmU3YjQ2MzE4ZTZlN2Y1
MTVmNzMwHhcNMjUxMTA0MTQwMDI0WhcNMjUxMTA1MTQwMDI0WjAzMTEwLwYDVQQD
EyhkZTFjZGY5YmFiYThkNDAzNWU1NjlkNjJkNTdhMGQ3ZWVjODhkNTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dMc/gKDpwe+h61+uRsQCEFxp0s5
g6WsbIyzIU52sMIE6LGXr81nbbJs4xb7D1TgjamaHgG7k4JlvBdouolyJfqvUVKL
ckwCqi47+40dtaL4Hh3UPOelAdY6NCo16s5JIhkZD0idOcEjMg+yu83TAEYj3iPx
CDiWA3eq0M1SnG8wqoS+i5F5mqWNK2cGqmHy7ucT1jBA5RE8d/P5DHvic7PDsMSw
py0lzdSemKWWsEDZREdmvJFfkzAXY7gThPlukbYlNZWJGxJhaZ/sRdAOokmwOHfG
TjWbrDdOUvLXHK/kkMHP+7pR/SwUmDYctUCYQkvvLjGKGQPMErCpsO/7zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4c35urqNQDXladYtV6DX7siNV6MB8GA1UdIwQY
MBaAFAU+lFAfD9LN6jwue0Yxjm5/UV9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlQ2VVVCOFAwczNxUEM1N1JqR09ibjlSWDNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi81NjQ1MmItNGI5My00MWU1LWE4YTIt
NjFiNTI2Mzc5MjFiLzEvQlQ2VVVCOFAwczNxUEM1N1JqR09ibjlSWDNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi81NjQ1MmItNGI5My00MWU1LWE4YTItNjFiNTI2Mzc5MjFi
LzEvQlQ2VVVCOFAwczNxUEM1N1JqR09ibjlSWDNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafNfucj8
FS5lO8irYO1h6sNIqd1V+EJ13uxQHH0yBu7+k7c5N1rB8tk1XyoZIt0V1a7FUyqZ
cyHr9WoTQMZOTSixdC3YOdRlDqrqhljQXog0xGLuHez+g0A0snPqDyi8cd93NwPp
0fyw+tUFAbGqB6eUMzAHS4SUnVNvoikdDRK1IshksLd3gg2KPI2OweEdwqWBNhkf
xyM5wUCnn9tF66gvURGqyjWF5p7K3GOR6lyEoZDFEQp1+m45gmOVOR9hroeL4lTS
1NezcxBzRgrrTxLL/zzowKJYs7NK0W3LMkus/yUwdq2YZ0k1isCZqrZ+aDe/R+jj
FiLwinmk+xQsdQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:59:45 2025 by rpki-client