Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
File: BT6UUB8P0s3qPC57RjGObn9RX3M.mft (raw, json)
Hash identifier: SMVaPP2z4hTjdlP3TioleUx8Q+kg47VYXfMz4Gc4YIs=
Subject key identifier: 2F:10:69:A5:DB:AB:35:C7:D1:C3:12:90:3E:36:F5:A2:07:25:2B:E2
Authority key identifier: 05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
Certificate issuer: /CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Certificate serial: 019874190718EAA4DDC319405EFD1D0BE348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 08:00:53 +0000
Manifest this update: Mon 04 Aug 2025 08:00:53 +0000
Manifest next update: Tue 05 Aug 2025 08:00:53 +0000
Files and hashes: 1: BT6UUB8P0s3qPC57RjGObn9RX3M.crl (hash: auhmY6BR7Oyn4I4nhG4mVpOErmSP1Sg+1OCGVmCEKpQ=)
2: PW26W-VSuEOhQv0UYQiviWvM3PQ.roa (hash: amtlrhmVHqku8l89qlGVcPiKPSCbAqVjZC9kdgQdMxM=)
3: QczbEnEasBPtVeB0j7ed4Z5MN4U.roa (hash: sUqwVjOZmcM++cyXTD0/dLISqQO4KRPxQz8w/SRG0nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:07:18:ea:a4:dd:c3:19:40:5e:fd:1d:0b:e3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Validity
Not Before: Aug 4 08:00:53 2025 GMT
Not After : Aug 5 08:00:53 2025 GMT
Subject: CN=2f1069a5dbab35c7d1c312903e36f5a207252be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:cd:ab:17:98:f9:97:81:c2:9e:5c:89:aa:
77:b0:ad:2d:dc:01:eb:71:72:35:79:87:d6:48:77:
f2:66:23:75:55:33:5d:e6:ea:09:34:67:ed:39:5d:
43:9f:9a:b7:f7:e0:7f:d9:1f:ad:24:75:a3:c7:6e:
81:ce:20:ff:00:66:6f:f9:b0:96:30:82:b6:b5:ff:
bf:cb:b3:06:ce:12:c3:f7:ea:2c:5d:16:9c:d6:f8:
8f:8a:fc:66:13:53:a0:e4:de:7d:62:f0:3a:2a:ba:
7c:40:9e:43:d7:e3:36:e7:e6:26:b1:cd:33:c5:6c:
34:fd:69:e9:ad:08:13:df:17:cc:76:0b:0c:82:89:
47:95:d8:a5:f8:70:3f:89:38:78:58:19:66:be:d3:
66:9d:6a:af:35:0e:c0:2f:b1:67:c7:26:91:68:87:
07:8b:37:cf:6a:77:1b:cb:ac:9a:08:2a:98:fd:e4:
30:2d:08:a0:96:81:6e:0b:bf:14:e4:36:e1:27:44:
5c:39:06:be:8b:c6:41:38:97:41:f6:ff:e6:89:80:
fa:db:5b:83:fe:72:ce:11:c8:11:07:06:7a:a7:8e:
16:c4:ee:48:72:5e:ff:28:0e:39:15:c3:37:b6:32:
08:79:63:5d:ce:81:23:c3:82:00:9b:71:51:12:0f:
1d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:10:69:A5:DB:AB:35:C7:D1:C3:12:90:3E:36:F5:A2:07:25:2B:E2
X509v3 Authority Key Identifier:
keyid:05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1b:a0:70:51:f4:28:89:ed:22:e2:b0:34:a6:24:6c:7a:9c:
6d:2f:01:b8:98:38:40:23:25:9c:fa:91:62:17:c1:bd:e6:30:
4f:28:3d:9a:7a:af:a1:69:08:c5:0b:b4:66:11:26:1e:b9:59:
e4:55:83:b4:a8:b4:91:d0:8a:99:e6:46:eb:15:aa:9c:64:7d:
da:e0:52:87:74:09:cf:28:9c:a3:b0:5d:80:aa:b4:e9:1f:f4:
c3:62:c7:ec:a2:ed:ae:6b:69:9b:2c:ff:e1:7d:b8:ae:b5:f5:
99:37:38:30:a5:b6:2c:fb:40:96:4f:56:05:65:fb:22:e5:c4:
f2:b9:61:dc:d3:ab:a3:6a:3c:20:6c:e9:7a:49:83:23:31:33:
db:02:6b:95:9b:d4:c7:d5:d3:b2:af:ed:17:de:e1:06:e4:d9:
43:78:08:34:aa:54:b4:66:7d:d4:3d:54:a3:b3:21:b7:dd:df:
a0:45:78:e6:47:89:7c:42:cf:03:95:7d:45:96:5d:b3:83:fc:
d8:0d:2e:d0:fb:12:ca:6e:a0:3f:99:57:6d:94:f8:28:4a:2a:
43:82:1d:3c:61:5b:1f:4d:c3:39:aa:98:2d:24:7c:b2:c8:2f:
c0:17:26:9f:12:b1:93:3c:0d:44:19:02:7f:3a:a3:67:a3:e1:
9a:22:fe:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:16 2025 by rpki-client