Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
File: bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft (raw, json)
Hash identifier: 4Yim+dArEgfu7o0sblHXBZUOUiNjV3mbaNXObqq5+Yg=
Subject key identifier: 98:73:2D:AE:44:56:FF:F4:DC:ED:9C:98:F6:B3:76:D7:AB:B5:84:3A
Authority key identifier: 6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
Certificate issuer: /CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Certificate serial: 0199FC8F63FBA8F5B46AABA069ADAE87EC88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
Manifest number: 069B
Signing time: Sun 19 Oct 2025 13:01:19 +0000
Manifest this update: Sun 19 Oct 2025 13:01:19 +0000
Manifest next update: Mon 20 Oct 2025 13:01:19 +0000
Files and hashes: 1: bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl (hash: ZDv1ocsl1+APzmQRWJCB8R6m6wsdKEPFFJh2k6m9Rlc=)
2: kepUhm0anFry8RwMMkqJayre0fg.roa (hash: HEBHciDc0e+f+TYCTKlbfrh1hJ9IXR8LLwkK0vX0JYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:63:fb:a8:f5:b4:6a:ab:a0:69:ad:ae:87:ec:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Validity
Not Before: Oct 19 13:01:19 2025 GMT
Not After : Oct 20 13:01:19 2025 GMT
Subject: CN=98732dae4456fff4dced9c98f6b376d7abb5843a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6c:50:aa:50:d9:d0:06:ef:9d:4e:50:be:10:
ad:9c:96:29:1a:ee:ab:e8:ec:b6:6d:f6:a6:57:e2:
dd:c7:44:ab:14:48:d9:e6:1c:c8:60:d1:74:cd:90:
b8:0f:a7:5f:8d:06:95:3c:04:6f:9f:40:e8:5d:ef:
41:0c:f0:ff:7a:1d:e5:90:a1:a4:47:c5:58:65:3c:
bc:35:56:f9:ed:d0:d6:71:10:39:5a:86:b2:45:70:
71:99:9e:d9:76:f6:51:d5:fc:55:1a:07:07:04:ac:
14:2c:d1:93:91:19:b3:18:a7:b9:b7:f9:b9:2a:f7:
0e:33:1e:25:a7:39:b6:c3:74:b0:32:8a:cd:e3:f3:
38:6e:c3:4e:42:41:90:f0:22:82:d8:b7:46:e3:e6:
e9:93:19:55:04:6d:2b:5a:ed:dc:4e:16:5e:99:33:
17:82:80:f0:a9:dd:62:3b:2f:85:55:d4:3b:8c:4a:
cd:36:f0:37:71:6d:04:3f:26:42:e0:4e:12:27:7d:
a3:72:19:6f:e3:7e:36:b0:46:dc:6a:c7:4f:74:bb:
1f:20:a6:d1:09:f2:5c:d1:93:02:fc:95:1c:54:8f:
f9:93:cc:a6:0f:d7:e4:44:a0:24:cb:83:2c:4d:ee:
46:92:b8:74:59:59:21:0d:78:e7:be:89:27:de:41:
ce:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:73:2D:AE:44:56:FF:F4:DC:ED:9C:98:F6:B3:76:D7:AB:B5:84:3A
X509v3 Authority Key Identifier:
keyid:6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:7c:fa:c5:a3:fd:b8:ec:d9:1d:f7:ce:a2:b0:e9:ed:0f:5a:
0f:02:1c:41:cf:99:0d:01:d9:eb:56:23:58:1d:b4:9c:59:75:
94:5c:05:f2:45:3e:e7:e4:a1:09:f0:6a:63:65:17:93:01:c6:
e7:84:e7:b7:8e:7c:b5:df:cc:92:9b:d5:24:06:06:42:c3:2f:
21:11:6d:8f:c6:9c:aa:2c:c8:06:6e:3e:16:7e:bc:af:96:b0:
e1:57:89:32:22:8e:e8:99:fd:a1:97:ec:73:9c:86:c9:ff:d4:
34:21:94:25:43:9d:2c:41:46:dd:02:52:d2:64:c6:65:9a:12:
36:7f:6b:07:cb:bb:df:12:a7:05:c2:0a:01:08:0a:d4:2b:96:
e7:fe:4c:08:c0:e0:44:c1:62:92:1e:20:52:56:de:cd:7b:ca:
e5:dc:4e:8a:c5:6f:19:f5:22:34:26:fe:50:28:ca:96:4b:7b:
71:6b:be:8d:8c:01:e4:92:fa:41:75:92:11:e4:54:3a:5e:0c:
01:4e:9a:8e:ef:5e:cf:bd:da:72:76:08:a5:b1:bc:ad:e2:0c:
19:6e:af:8c:c5:f0:93:b4:4f:99:d0:51:0a:9f:11:bb:6c:73:
c9:b5:73:d9:f5:f3:4c:e5:a0:bc:1d:1c:db:24:2f:c1:0b:b9:
35:b7:2c:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j2P7qPW0aqugaa2uh+yIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMzY1ZjBkOWJlZTQ4NGMwODVjZjNmZTMzOGFkMDM1YzNm
OTg0NzkwHhcNMjUxMDE5MTMwMTE5WhcNMjUxMDIwMTMwMTE5WjAzMTEwLwYDVQQD
Eyg5ODczMmRhZTQ0NTZmZmY0ZGNlZDljOThmNmIzNzZkN2FiYjU4NDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GxQqlDZ0AbvnU5QvhCtnJYpGu6r
6Oy2bfamV+Ldx0SrFEjZ5hzIYNF0zZC4D6dfjQaVPARvn0DoXe9BDPD/eh3lkKGk
R8VYZTy8NVb57dDWcRA5WoayRXBxmZ7ZdvZR1fxVGgcHBKwULNGTkRmzGKe5t/m5
KvcOMx4lpzm2w3SwMorN4/M4bsNOQkGQ8CKC2LdG4+bpkxlVBG0rWu3cThZemTMX
goDwqd1iOy+FVdQ7jErNNvA3cW0EPyZC4E4SJ32jchlv4342sEbcasdPdLsfIKbR
CfJc0ZMC/JUcVI/5k8ymD9fkRKAky4MsTe5Gkrh0WVkhDXjnvokn3kHOLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhzLa5EVv/03O2cmPazdtertYQ6MB8GA1UdIwQY
MBaAFG02Xw2b7khMCFzz/jOK0DXD+YR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlRaZkRadnVTRXdJWFBQLU00clFOY1A1aEhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xYjRiZGYtNjdhZC00ZjBlLTgxZWQt
OWU1Yzg1YWY5M2E1LzEvYlRaZkRadnVTRXdJWFBQLU00clFOY1A1aEhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xYjRiZGYtNjdhZC00ZjBlLTgxZWQtOWU1Yzg1YWY5M2E1
LzEvYlRaZkRadnVTRXdJWFBQLU00clFOY1A1aEhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAunz6xaP9
uOzZHffOorDp7Q9aDwIcQc+ZDQHZ61YjWB20nFl1lFwF8kU+5+ShCfBqY2UXkwHG
54Tnt458td/MkpvVJAYGQsMvIRFtj8acqizIBm4+Fn68r5aw4VeJMiKO6Jn9oZfs
c5yGyf/UNCGUJUOdLEFG3QJS0mTGZZoSNn9rB8u73xKnBcIKAQgK1CuW5/5MCMDg
RMFikh4gUlbezXvK5dxOisVvGfUiNCb+UCjKlkt7cWu+jYwB5JL6QXWSEeRUOl4M
AU6aju9ez73acnYIpbG8reIMGW6vjMXwk7RPmdBRCp8Ru2xzybVz2fXzTOWgvB0c
2yQvwQu5NbcsWA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:31 2025 by rpki-client