Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
File: bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft (raw, json)
Hash identifier: hP0SqSq3CmOsTVV37CddDXr5mdPOmTzuSI/ejTVqzTA=
Subject key identifier: 2B:D7:C1:FD:71:90:72:5C:7F:54:ED:CB:00:B8:68:74:AE:95:DE:9F
Authority key identifier: 6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
Certificate issuer: /CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Certificate serial: 0198D705F2396F07E00194FBA3AB2C534277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
Manifest number: 0603
Signing time: Sat 23 Aug 2025 13:02:27 +0000
Manifest this update: Sat 23 Aug 2025 13:02:27 +0000
Manifest next update: Sun 24 Aug 2025 13:02:27 +0000
Files and hashes: 1: bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl (hash: zptvVs+CtjVhaggrmvWnooDv7lgT5LDNiF2MwxeNmtQ=)
2: kepUhm0anFry8RwMMkqJayre0fg.roa (hash: HEBHciDc0e+f+TYCTKlbfrh1hJ9IXR8LLwkK0vX0JYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:f2:39:6f:07:e0:01:94:fb:a3:ab:2c:53:42:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Validity
Not Before: Aug 23 13:02:27 2025 GMT
Not After : Aug 24 13:02:27 2025 GMT
Subject: CN=2bd7c1fd7190725c7f54edcb00b86874ae95de9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:c1:da:55:36:2d:f6:08:05:99:39:b6:cf:
6c:04:47:89:5e:db:f4:20:bc:1b:be:36:18:eb:9b:
19:33:15:4f:b9:23:65:e8:b8:cf:04:d2:61:76:df:
71:e2:73:4a:88:f3:39:e7:ce:8e:a9:16:4d:71:b9:
2c:b5:a5:ab:5b:b2:95:77:74:51:7e:1c:98:17:d1:
86:d3:56:a2:84:89:eb:8c:02:98:ec:1f:4a:61:4f:
0d:10:35:f9:f7:b8:7e:2e:79:7c:e1:86:20:6e:17:
f3:ed:16:f5:e2:5a:d8:10:7c:55:dd:33:ed:e3:6d:
35:82:6a:d5:f2:99:fa:96:4d:2d:b6:6a:e3:51:c4:
04:09:cb:df:b9:6d:68:8c:e9:74:d9:94:70:04:1f:
d1:37:a6:a9:4f:27:9e:25:44:e9:18:98:6f:8d:be:
07:fe:b0:f4:c8:5d:a6:85:cf:7e:54:3c:8d:d1:a1:
0e:c5:0e:94:72:df:43:06:05:f7:be:21:e5:82:92:
3b:db:b4:84:58:38:4c:b0:e0:7a:89:a0:fe:43:86:
2e:21:b4:ea:76:ec:9c:d2:4a:ac:6d:3e:a2:d1:f2:
6c:42:c0:f8:60:12:c7:82:fb:0c:38:e6:68:20:6a:
c7:d5:17:ab:a0:24:76:4c:9a:eb:ca:b7:c7:44:84:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D7:C1:FD:71:90:72:5C:7F:54:ED:CB:00:B8:68:74:AE:95:DE:9F
X509v3 Authority Key Identifier:
keyid:6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:52:74:6a:8d:78:44:2d:fa:7f:06:ef:e3:b1:26:b6:8f:84:
7f:f8:28:e5:99:63:20:d1:58:c2:7f:16:6c:b8:25:95:8c:89:
43:db:ee:2d:f7:6e:e2:61:cd:7c:f3:5b:96:70:70:ae:54:ef:
e0:ab:c7:8c:b1:e0:67:f7:f6:7d:a9:f8:36:19:ef:66:5d:6c:
63:4b:6b:33:e4:b6:1b:bf:e1:e7:7d:db:70:ba:d8:df:35:1a:
36:b3:9b:7e:0e:ce:0b:71:e1:2d:b5:bb:7a:ce:c9:ac:73:e4:
74:13:45:92:d4:ff:59:33:47:05:4c:e7:ce:0a:ba:32:a9:62:
cc:7a:c8:56:90:4f:b7:45:d5:53:e0:bf:7e:14:65:1d:fb:f2:
6e:9c:e5:b1:7c:9b:7a:b2:2d:7e:b5:17:f7:b3:1d:4c:ae:f4:
8c:91:77:8b:6c:61:b4:5c:30:7e:a1:1b:37:aa:50:bb:a8:bb:
41:de:6e:43:3c:ab:5d:33:41:7d:ab:81:81:36:36:43:00:17:
a4:08:66:26:83:b2:47:77:a4:23:8d:67:2f:78:2b:87:be:62:
65:9b:a2:23:4b:57:97:52:a4:ff:f5:77:22:fc:5b:42:d8:39:
87:52:6e:bb:62:35:18:ee:73:16:41:10:60:9b:11:5f:b1:f8:
b0:14:2b:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBfI5bwfgAZT7o6ssU0J3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMzY1ZjBkOWJlZTQ4NGMwODVjZjNmZTMzOGFkMDM1YzNm
OTg0NzkwHhcNMjUwODIzMTMwMjI3WhcNMjUwODI0MTMwMjI3WjAzMTEwLwYDVQQD
EygyYmQ3YzFmZDcxOTA3MjVjN2Y1NGVkY2IwMGI4Njg3NGFlOTVkZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/3B2lU2LfYIBZk5ts9sBEeJXtv0
ILwbvjYY65sZMxVPuSNl6LjPBNJhdt9x4nNKiPM5586OqRZNcbkstaWrW7KVd3RR
fhyYF9GG01aihInrjAKY7B9KYU8NEDX597h+Lnl84YYgbhfz7Rb14lrYEHxV3TPt
4201gmrV8pn6lk0ttmrjUcQECcvfuW1ojOl02ZRwBB/RN6apTyeeJUTpGJhvjb4H
/rD0yF2mhc9+VDyN0aEOxQ6Uct9DBgX3viHlgpI727SEWDhMsOB6iaD+Q4YuIbTq
duyc0kqsbT6i0fJsQsD4YBLHgvsMOOZoIGrH1ReroCR2TJrryrfHRISkmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvXwf1xkHJcf1TtywC4aHSuld6fMB8GA1UdIwQY
MBaAFG02Xw2b7khMCFzz/jOK0DXD+YR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlRaZkRadnVTRXdJWFBQLU00clFOY1A1aEhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xYjRiZGYtNjdhZC00ZjBlLTgxZWQt
OWU1Yzg1YWY5M2E1LzEvYlRaZkRadnVTRXdJWFBQLU00clFOY1A1aEhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xYjRiZGYtNjdhZC00ZjBlLTgxZWQtOWU1Yzg1YWY5M2E1
LzEvYlRaZkRadnVTRXdJWFBQLU00clFOY1A1aEhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVJ0ao14
RC36fwbv47Emto+Ef/go5ZljINFYwn8WbLgllYyJQ9vuLfdu4mHNfPNblnBwrlTv
4KvHjLHgZ/f2fan4NhnvZl1sY0trM+S2G7/h533bcLrY3zUaNrObfg7OC3HhLbW7
es7JrHPkdBNFktT/WTNHBUznzgq6MqlizHrIVpBPt0XVU+C/fhRlHfvybpzlsXyb
erItfrUX97MdTK70jJF3i2xhtFwwfqEbN6pQu6i7Qd5uQzyrXTNBfauBgTY2QwAX
pAhmJoOyR3ekI41nL3grh75iZZuiI0tXl1Kk//V3IvxbQtg5h1Juu2I1GO5zFkEQ
YJsRX7H4sBQr3g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:48 2025 by rpki-client