Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
File: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json)
Hash identifier: s5dmTdci0Oi63x+r+ABsK7HsmdLWtHHbAbJCGYJidCU=
Subject key identifier: 94:25:8E:EC:A7:A1:92:73:43:88:EC:BA:8F:13:1A:3B:F6:28:D5:6F
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial: 0199FDD950551AD78E3F0B93BD9021CDAB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
Manifest number: 0C90
Signing time: Sun 19 Oct 2025 19:01:41 +0000
Manifest this update: Sun 19 Oct 2025 19:01:41 +0000
Manifest next update: Mon 20 Oct 2025 19:01:41 +0000
Files and hashes: 1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: rAftVEO2VogSz4rKJMlcZSJa3P7ikK/UkwLhSZeH6hc=)
2: ergYcBtNSn5r4Zi1l42KV0S9mDk.roa (hash: uo/5j8D7Yv+RjgeXCM0+M4CRhoYawB/FduDyyKS00RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:50:55:1a:d7:8e:3f:0b:93:bd:90:21:cd:ab:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Validity
Not Before: Oct 19 19:01:41 2025 GMT
Not After : Oct 20 19:01:41 2025 GMT
Subject: CN=94258eeca7a192734388ecba8f131a3bf628d56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0b:62:6c:43:d2:90:8d:91:c0:04:ab:7e:6b:
1e:37:c2:00:5f:65:e6:00:d0:38:1f:72:95:2d:0a:
96:c4:86:50:f4:d0:38:40:e8:a2:9e:b9:02:bc:42:
13:1c:9a:5c:33:a5:ad:72:ca:be:76:1f:ed:b2:dd:
1c:f8:ed:fb:8e:ee:fa:8b:2d:75:45:bf:63:b6:54:
89:b3:55:a9:63:73:3f:cd:ba:65:6b:54:47:45:53:
7d:16:e5:63:23:00:44:1c:56:d5:93:55:6c:41:a5:
10:31:c6:1d:31:00:00:b2:7d:5e:7c:52:df:b4:8a:
c7:af:5c:80:5b:54:52:58:d0:9a:a6:2b:07:a4:0f:
1e:fb:1b:99:e5:64:fd:2a:03:3d:39:01:8c:a3:37:
83:68:70:c4:80:11:c3:f5:96:9b:ef:7c:de:3c:bc:
e6:66:83:8f:3d:32:c5:ec:91:d9:45:a8:79:0c:c0:
d4:51:08:43:3f:51:1e:b0:6c:d2:d0:ac:df:13:e4:
8a:46:3c:fe:5d:78:7c:88:ec:dd:07:1a:5a:28:e9:
d9:21:0c:c7:8a:37:00:e5:5d:d5:e5:e2:43:8f:66:
ea:e6:88:c4:e2:e4:5f:e8:2d:0e:9a:8b:d3:60:7e:
8a:62:e2:4b:f8:6a:27:9d:c9:01:7c:5e:a4:7f:06:
f7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:25:8E:EC:A7:A1:92:73:43:88:EC:BA:8F:13:1A:3B:F6:28:D5:6F
X509v3 Authority Key Identifier:
keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:28:98:a7:ff:27:d2:55:e1:b2:8f:d7:16:54:4f:c9:b6:18:
35:b0:08:05:2e:c2:ac:16:73:b1:51:fb:f9:9f:b6:54:de:ad:
f7:84:3f:b7:5e:03:f4:57:b3:62:35:02:8c:32:04:d5:07:77:
cf:ca:cb:a3:56:65:8b:95:12:ea:d6:5f:a8:63:6e:35:9f:b1:
3e:28:ea:3a:01:e1:6a:d7:a6:9d:03:7b:21:5c:93:d0:e0:43:
ea:e9:32:4e:eb:d1:12:cb:24:b5:e6:1f:1a:ad:7e:02:8a:29:
6f:cf:ef:21:62:44:27:14:7a:d2:9e:44:da:90:47:46:57:66:
e3:99:bb:aa:7a:c4:3f:54:80:86:8e:d4:f5:1e:8c:02:ca:0c:
9a:3e:8a:c0:78:de:82:9b:9a:c3:97:2e:56:fd:4b:1d:a6:37:
99:8e:90:68:68:10:b3:e7:33:94:cf:0f:01:76:6b:70:b9:cc:
dc:16:33:b8:8a:cf:e3:41:cf:37:82:42:e8:48:20:f6:65:b3:
76:98:33:1c:12:0f:dd:e7:21:96:2b:86:b1:ba:bb:f9:8a:8b:
1a:b9:f7:c1:45:b6:01:a3:78:9a:59:fe:c3:66:70:b4:b2:76:
c6:70:25:4c:f9:21:7d:11:9f:45:62:c4:01:49:bc:35:3c:50:
5e:7b:48:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:04:37 2025 by rpki-client