Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
File: bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft (raw, json)
Hash identifier: gWg0t++MNvalsvxUIN4fptqbynW0F0sB3CGHKaMz+yE=
Subject key identifier: 2D:5C:96:5F:6C:4D:57:C2:E5:55:90:C8:E2:64:1E:07:99:CA:07:05
Authority key identifier: 6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
Certificate issuer: /CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Certificate serial: 019A4F9902ACF91150F4D52D29183C443C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
Manifest number: 06C6
Signing time: Tue 04 Nov 2025 16:00:19 +0000
Manifest this update: Tue 04 Nov 2025 16:00:19 +0000
Manifest next update: Wed 05 Nov 2025 16:00:19 +0000
Files and hashes: 1: bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl (hash: RtY4cDfwjLqpZ2tLPyni8aGxOx8orZBtjPxVzGAVZ0Q=)
2: kepUhm0anFry8RwMMkqJayre0fg.roa (hash: HEBHciDc0e+f+TYCTKlbfrh1hJ9IXR8LLwkK0vX0JYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:02:ac:f9:11:50:f4:d5:2d:29:18:3c:44:3c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Validity
Not Before: Nov 4 16:00:19 2025 GMT
Not After : Nov 5 16:00:19 2025 GMT
Subject: CN=2d5c965f6c4d57c2e55590c8e2641e0799ca0705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:85:ed:63:e7:b0:48:75:67:ba:02:d7:6a:
54:14:14:d9:aa:2c:23:77:93:fd:b7:45:71:a8:ca:
a2:3f:76:f9:b4:3c:92:00:ad:6d:9d:87:61:7e:2b:
10:41:d5:ab:be:04:01:10:fb:f2:32:7d:9e:4b:d8:
e2:a4:06:36:91:5a:a8:a4:13:5d:9b:9d:23:52:4e:
91:37:a4:5d:53:c8:16:27:d2:b5:6c:f3:18:cb:25:
31:e1:7b:52:13:be:a4:b3:9d:24:db:52:96:28:5e:
be:aa:4d:65:67:38:db:9f:8b:3a:d4:5f:0c:f9:c8:
89:29:32:18:34:b8:75:50:e3:c0:09:55:a1:bd:bd:
63:24:74:43:24:0c:82:64:16:be:13:72:b0:c1:e9:
fa:57:1f:20:b7:4c:ce:3d:b8:02:ca:27:16:4c:18:
06:14:e4:df:1c:f9:8c:83:9c:e4:b6:5c:88:d0:d3:
b5:37:e5:f1:b1:1f:7d:03:4c:86:d0:05:51:3b:9c:
77:c1:a4:c7:51:ee:0e:89:b1:70:de:a9:39:ce:3d:
ab:61:79:35:ef:7d:bd:06:9b:e9:17:70:b8:65:5f:
10:5a:0e:7a:f2:e4:a3:dc:0c:ad:cc:10:5f:32:3c:
8d:90:91:d2:2f:82:ef:4b:17:ee:bc:c6:89:98:33:
e5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5C:96:5F:6C:4D:57:C2:E5:55:90:C8:E2:64:1E:07:99:CA:07:05
X509v3 Authority Key Identifier:
keyid:6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:57:fb:26:fb:e0:e5:cb:a4:8d:98:18:3d:66:3c:ae:df:34:
1e:b0:bf:cb:4d:63:11:79:07:47:38:43:ff:d0:4d:2d:a0:b7:
69:78:84:6a:5f:99:c7:84:2f:94:49:51:83:46:c0:10:80:b7:
f9:6f:6b:b8:24:ea:06:88:bc:d3:1f:89:7a:24:95:39:4a:c6:
c4:36:c9:23:2c:e4:62:a0:44:f0:f8:d4:ba:48:ed:7f:ad:4e:
81:00:e2:ab:5e:ca:26:26:3a:04:7b:3d:50:5d:a7:01:34:cc:
86:03:a3:03:73:e3:8b:39:bc:14:57:16:46:38:bb:cf:53:e9:
e5:08:59:ba:62:1d:c7:5d:26:d1:6d:d5:e2:7b:d4:22:e9:cf:
d8:a0:25:64:24:32:ed:d8:0e:66:22:67:2b:d4:35:9e:6c:40:
f7:58:a4:27:3f:5a:a2:02:cd:a5:ff:1f:00:78:c6:d5:a2:34:
3e:42:de:35:ea:07:78:de:b9:0f:27:5c:90:64:31:3c:50:50:
e6:b4:61:fe:ff:91:69:de:aa:07:0d:30:4b:b5:d1:7b:98:67:
7a:9b:11:56:e2:75:07:96:b9:d3:1b:74:c9:29:bc:bc:35:de:
ea:c0:bb:b1:db:08:f8:08:b7:8c:ac:b6:90:3c:2f:a9:63:87:
f5:5b:c1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:47 2025 by rpki-client