Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
File: btSqOMC1kdSms-WFaFxtQ4gNrHg.mft (raw, json)
Hash identifier: i++ETppNMsZZwKQV8L/1CBy0kt+xtBTNqcgXwJYKKbU=
Subject key identifier: B6:51:18:FC:61:31:27:A9:6D:D5:04:F4:81:56:40:3A:63:BA:44:E4
Authority key identifier: 6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
Certificate issuer: /CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Certificate serial: 0199FF59A086836FD9F395E715450A2C4027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
Manifest number: 03B7
Signing time: Mon 20 Oct 2025 02:01:27 +0000
Manifest this update: Mon 20 Oct 2025 02:01:27 +0000
Manifest next update: Tue 21 Oct 2025 02:01:27 +0000
Files and hashes: 1: ZkPBKtmtCeMiCdYBf2wfRvrO9YI.roa (hash: LuN9s57PZoZuxYZxd6mXt4JH7Ba+GwQQeoNwNSpbFME=)
2: btSqOMC1kdSms-WFaFxtQ4gNrHg.crl (hash: N/BDiZ4vZ3hwscMf003A35NhJsGiuaXqX3K7u9jto1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:a0:86:83:6f:d9:f3:95:e7:15:45:0a:2c:40:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Validity
Not Before: Oct 20 02:01:27 2025 GMT
Not After : Oct 21 02:01:27 2025 GMT
Subject: CN=b65118fc613127a96dd504f48156403a63ba44e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b8:22:7a:bb:bf:56:03:54:57:60:2b:95:47:
0d:c5:b2:c7:a6:de:d9:d8:df:54:55:9f:c7:24:d8:
3a:96:9a:dd:c2:c3:26:4e:7c:a8:50:44:2a:20:83:
b8:03:a9:da:07:86:08:ac:82:35:4a:cc:fe:a6:cc:
7d:f2:56:f1:4b:dd:d1:38:dd:0b:46:81:e0:3b:14:
c7:e7:51:73:e6:4d:e1:de:64:40:a2:eb:10:fa:05:
4d:d2:4d:a2:8a:11:b9:98:1f:8d:b2:b2:58:da:29:
b8:a8:88:27:17:b7:b3:5f:12:8c:d3:51:f8:f0:2a:
b8:14:15:07:22:15:a8:b1:2f:19:04:2c:e2:4d:0e:
08:7b:05:1d:22:7c:50:d9:45:cf:6a:21:72:21:2e:
b7:27:08:b3:ef:12:8b:73:96:27:c4:22:e8:8a:6b:
b3:e2:6c:6b:c1:23:c0:19:3e:75:22:74:0d:55:8c:
39:10:ee:f1:07:db:6b:c8:2f:91:58:56:0a:eb:e1:
0c:77:cb:a1:b3:38:a5:7d:52:45:d4:19:86:bf:9d:
1c:3b:49:1f:15:36:6a:7b:3d:06:33:a6:fd:78:cc:
cc:a2:36:66:84:d5:5f:ab:68:27:1d:db:c0:a0:7c:
94:62:99:17:41:ef:c2:a9:8c:9d:cc:aa:e8:8c:8f:
50:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:51:18:FC:61:31:27:A9:6D:D5:04:F4:81:56:40:3A:63:BA:44:E4
X509v3 Authority Key Identifier:
keyid:6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2a:a3:0c:ba:44:09:4f:5d:04:77:fa:7e:f2:87:57:12:f5:
f4:86:b2:ab:3d:29:dd:89:ea:1b:bb:04:23:f8:4d:d1:a3:d5:
9e:ae:4a:1f:33:9f:01:1c:27:f3:d2:48:cb:98:5e:ad:f3:6c:
be:19:cc:63:48:7d:f6:1a:bb:8a:03:16:1f:9f:6f:f9:fb:db:
6a:c4:01:8a:84:85:7d:b3:c0:eb:6a:e0:ef:96:7d:33:f3:1c:
f2:e9:bf:eb:fd:76:78:c6:bb:2f:54:f1:d9:8b:be:3d:f2:6d:
d3:d1:f6:c6:81:3c:12:1f:6f:4d:e9:d8:11:4c:0e:ae:82:b2:
85:c0:df:82:a5:86:8a:46:54:6d:ae:ec:5b:09:d2:c1:a1:06:
87:5e:df:7f:91:24:cf:d6:c1:cb:2b:2c:ac:c4:49:0a:c0:4e:
fc:d0:26:66:29:e4:8e:cd:43:7e:83:c2:fb:be:40:df:db:29:
3f:64:5e:e8:0c:6c:51:ef:b6:af:dd:b0:65:10:7f:db:2a:9e:
a1:26:4d:8f:64:87:c8:3f:34:9a:ca:98:dd:4d:ab:61:67:f2:
b6:d3:23:c1:1d:21:ec:fd:59:cd:14:78:c0:ed:1f:4f:a8:a2:
c0:71:f6:09:c1:93:3a:f4:6a:6d:03:42:cd:2a:f0:f3:5a:cf:
17:03:79:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:00:05 2025 by rpki-client