Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
File: BT0E5yuySceesRaM8dQ6PKVIwgY.mft (raw, json)
Hash identifier: S132ENEfyAMXAk/mEhCA3NyRMDND1/UFUR3MTXe3DGQ=
Subject key identifier: 61:FC:1D:E6:1C:62:F0:F7:20:19:D7:61:58:FD:53:97:2C:92:BD:D6
Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
Certificate issuer: /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Certificate serial: 0199FCC64574E70C2A99DEF355BD33C4CD4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 14:01:16 +0000
Manifest this update: Sun 19 Oct 2025 14:01:16 +0000
Manifest next update: Mon 20 Oct 2025 14:01:16 +0000
Files and hashes: 1: BT0E5yuySceesRaM8dQ6PKVIwgY.crl (hash: SCCLDnUIbIKtKfCv2Lnbszu9YoXutlb/Nf5pbSRJWK4=)
2: G_k9NL-0qSjxQ-N8gyE0UgbOo9M.roa (hash: sfKsed8cbHTfZnhsfNvOSJ3wM7bTV9Orf16wnTecseo=)
3: Rjlay2bsLeiLaIl-NsumYdJm6Mk.roa (hash: Nxxu/I2qHn6XTGTRcNBX012HcDX5qyNV7NJNim7iGOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:45:74:e7:0c:2a:99:de:f3:55:bd:33:c4:cd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Validity
Not Before: Oct 19 14:01:16 2025 GMT
Not After : Oct 20 14:01:16 2025 GMT
Subject: CN=61fc1de61c62f0f72019d76158fd53972c92bdd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7a:97:ac:1c:c5:fe:dc:75:c0:56:3a:3b:89:
45:cb:f8:1a:86:58:23:d8:e2:bd:69:b5:9d:4a:bd:
57:c2:b4:67:6f:09:a8:64:c1:c4:ee:b9:50:2c:b0:
12:74:bc:6c:7e:7e:90:65:11:38:ef:5f:83:97:9b:
9d:00:0e:e2:ac:e6:84:b3:15:cf:7d:44:9c:cb:d7:
e8:b1:36:81:f4:81:46:99:1e:63:e1:5d:37:b1:1d:
dc:87:4a:ea:9e:c7:53:33:4e:78:d3:08:80:f6:73:
84:3d:b4:06:d7:ee:f0:28:37:f7:56:dd:71:81:9b:
29:45:0e:83:bb:a8:79:1c:07:fd:eb:5e:a1:80:9f:
64:76:78:c8:dc:37:87:b4:24:d0:c2:30:7a:6c:68:
44:91:89:56:05:fa:5b:fa:1a:9f:e7:62:08:00:25:
c9:f7:03:8f:46:0c:39:cb:aa:6e:94:92:f6:9d:26:
99:7a:75:7a:7b:5a:c6:02:50:0b:74:9d:73:c5:17:
f5:e8:38:55:97:61:59:97:97:bc:b9:8d:7c:6a:a1:
23:4b:ed:c0:01:59:b6:5c:7b:b1:5c:e5:5c:ea:53:
0d:1f:f5:53:c7:1f:cc:72:df:a6:82:ed:b1:ce:6f:
f1:5c:c4:eb:da:a9:7f:0f:be:2b:81:ac:64:d5:f1:
d7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FC:1D:E6:1C:62:F0:F7:20:19:D7:61:58:FD:53:97:2C:92:BD:D6
X509v3 Authority Key Identifier:
keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:91:17:f7:49:06:db:c7:d0:7d:27:75:f2:18:72:e3:71:21:
9e:5a:29:b7:56:de:13:77:5f:3d:06:f0:2a:0c:c5:7a:ee:06:
d4:a4:2d:56:e8:76:ec:6e:85:65:70:d0:37:40:d9:f2:c7:41:
3b:39:34:c8:db:17:47:f5:6b:3a:59:e7:b1:8e:df:3f:b8:48:
ff:6d:f3:37:ff:e5:5c:3a:64:d8:b7:c8:21:e1:f2:19:55:80:
b5:4c:62:80:aa:3b:85:66:9e:7e:ed:35:8d:f5:5b:0e:d1:3a:
93:62:d7:7f:27:91:c3:25:c8:72:3e:79:c9:9e:3d:d6:fa:65:
c6:19:de:05:20:25:3e:1d:1e:d7:e6:8a:2a:1e:b1:fa:99:7f:
87:7e:ea:c9:97:20:d4:ad:b3:7f:b8:d3:28:e0:a2:9f:bd:05:
e7:7b:6d:1e:71:a6:de:2e:7f:e4:a2:dd:86:44:f2:bd:bb:10:
98:5c:9d:f2:6e:b9:3d:9a:27:d3:73:47:98:30:42:d2:71:27:
47:81:e7:4d:56:b3:ba:76:3f:cb:00:ac:05:ab:bf:03:ea:60:
80:ab:44:72:2b:d0:97:11:d4:9d:92:44:36:d4:d7:a6:1e:41:
88:24:b0:6b:b1:dd:84:84:38:74:cb:3d:00:76:dd:c9:61:59:
25:74:9e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:49 2025 by rpki-client