Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
File: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json)
Hash identifier: 72vY1c+P2RoBLMBiK6FLsSE1ADis3TGqDCLL7s5kDFY=
Subject key identifier: 60:E7:49:D8:83:D1:EA:A1:B5:9E:B4:8F:5E:DD:3B:A1:AE:E7:5C:FC
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial: 0199FFC81381F4DEC0BCE598FD1F663EECBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
Manifest number: 0C91
Signing time: Mon 20 Oct 2025 04:02:05 +0000
Manifest this update: Mon 20 Oct 2025 04:02:05 +0000
Manifest next update: Tue 21 Oct 2025 04:02:05 +0000
Files and hashes: 1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: KbBsTihJLD1eup4dO+03+FIHhwwQEMsDNDxEs8dftko=)
2: ergYcBtNSn5r4Zi1l42KV0S9mDk.roa (hash: uo/5j8D7Yv+RjgeXCM0+M4CRhoYawB/FduDyyKS00RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:13:81:f4:de:c0:bc:e5:98:fd:1f:66:3e:ec:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Validity
Not Before: Oct 20 04:02:05 2025 GMT
Not After : Oct 21 04:02:05 2025 GMT
Subject: CN=60e749d883d1eaa1b59eb48f5edd3ba1aee75cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:45:63:ef:06:16:01:8b:a9:20:8a:69:e7:
13:97:e3:37:09:01:e2:17:59:7a:c3:1e:51:fb:a8:
c8:c4:26:e2:a3:cc:f1:17:c3:13:81:7d:9b:1d:fc:
5f:5e:8b:f0:be:7f:90:cd:c0:a0:70:c0:48:0f:b2:
3b:35:7c:b6:ad:ed:a7:d1:92:d7:6c:45:0a:11:39:
28:7c:26:08:0e:a4:8e:32:a8:07:5a:d7:dd:74:9e:
3b:17:c7:1c:d3:cc:90:db:26:3d:f7:3e:5c:93:07:
d1:c6:a2:07:d3:fe:28:f9:99:0c:cb:22:c2:48:57:
48:ef:35:08:7f:d5:af:90:a1:76:05:96:1d:2c:f5:
c4:3b:9b:ae:42:3a:b6:40:8c:f4:80:65:1e:75:64:
bb:d9:8c:52:4f:ed:e7:c0:73:d9:0d:3e:a7:4a:69:
22:66:c2:87:10:35:4d:b5:09:f3:56:d2:89:cd:16:
29:2b:2f:67:15:13:1e:ac:fb:4e:8e:3b:8c:a7:6f:
9e:5f:68:36:90:48:7f:25:db:ce:26:1c:02:87:2e:
e6:f7:40:7c:38:86:b4:9c:50:b0:e0:56:49:5f:6a:
b5:7d:e6:37:d8:9c:ec:a9:7c:bc:2e:35:f8:47:6b:
1c:9f:8e:88:d6:f1:fd:35:ea:63:26:d2:07:2e:a0:
bb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E7:49:D8:83:D1:EA:A1:B5:9E:B4:8F:5E:DD:3B:A1:AE:E7:5C:FC
X509v3 Authority Key Identifier:
keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7a:d0:2e:58:b6:e8:5f:ca:5a:e1:5a:1e:8a:fa:e9:d0:77:
06:9a:45:e0:02:36:5d:19:dc:1c:e2:36:85:95:8c:5e:bd:4e:
76:9c:f7:45:42:58:d8:7e:5c:14:18:f3:f7:69:21:3d:f8:d8:
d4:3f:6f:b8:df:ed:36:38:ae:6b:ff:fb:b8:6b:e3:5f:64:e4:
ac:43:7c:f1:c6:4d:af:e9:f3:6d:bd:3f:a1:79:c5:8f:bb:f5:
a5:35:d9:ca:51:b8:6a:02:95:a6:59:6b:65:fb:68:77:df:32:
4b:2a:56:ac:7e:5e:c2:c0:9f:80:dc:da:4d:b9:a5:9b:60:0e:
93:89:fe:82:85:44:25:62:ff:e8:c2:24:90:cf:3a:a9:fb:5a:
6a:1f:15:5e:1e:81:17:0e:bd:d7:92:fc:20:f5:9a:ae:6d:ca:
e1:f9:3b:0b:3d:33:f0:f3:5f:1f:77:c8:f8:96:fe:2b:bb:13:
9f:63:00:6d:d2:bb:18:89:7f:d5:c6:18:de:b9:33:33:bc:d5:
f9:32:81:a5:97:d6:ef:83:a2:c9:e2:e1:bc:9b:ad:79:65:4b:
0f:8f:fb:a5:7a:1b:63:82:e2:c7:a3:55:8c:5d:e3:24:72:a7:
c6:d7:24:20:ce:97:b6:2d:a1:4b:32:a4:35:97:71:94:e6:5e:
4e:87:8e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:41:28 2025 by rpki-client