Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
File: btSqOMC1kdSms-WFaFxtQ4gNrHg.mft (raw, json)
Hash identifier: M0S8G13tF73CiST6xCzm9BUbRiKHVhavRB2wisewOsg=
Subject key identifier: D0:97:C9:F0:26:E8:78:84:93:39:03:C1:AA:13:56:96:EE:9E:41:92
Authority key identifier: 6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
Certificate issuer: /CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Certificate serial: 0198D5F13720BD504E26ED609246240A3028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
Manifest number: 031D
Signing time: Sat 23 Aug 2025 08:00:11 +0000
Manifest this update: Sat 23 Aug 2025 08:00:11 +0000
Manifest next update: Sun 24 Aug 2025 08:00:11 +0000
Files and hashes: 1: ZkPBKtmtCeMiCdYBf2wfRvrO9YI.roa (hash: LuN9s57PZoZuxYZxd6mXt4JH7Ba+GwQQeoNwNSpbFME=)
2: btSqOMC1kdSms-WFaFxtQ4gNrHg.crl (hash: YI09QbtGx9t4eiXRdxZm0IEYtex00pmAKp2/rGlymWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:37:20:bd:50:4e:26:ed:60:92:46:24:0a:30:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Validity
Not Before: Aug 23 08:00:11 2025 GMT
Not After : Aug 24 08:00:11 2025 GMT
Subject: CN=d097c9f026e87884933903c1aa135696ee9e4192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:87:2d:08:4b:25:a0:82:da:8e:2a:b0:f9:
4f:8b:ac:e3:09:4c:8f:1d:8d:02:f9:49:e2:97:a0:
3a:e1:18:1a:62:30:c7:72:ac:24:f6:2a:d4:e1:e7:
e6:fa:db:92:05:4c:dd:52:d8:b6:e2:2f:1f:7e:28:
fe:74:50:cf:5b:68:c4:1f:64:09:27:8d:a4:85:07:
8d:fb:98:41:8c:e4:35:64:6b:4a:39:d4:4e:f2:8e:
d8:0a:32:41:40:7e:88:f2:e4:18:a3:22:85:1f:59:
48:af:7e:58:1c:60:9e:61:c1:0b:1c:98:d9:7d:dd:
d1:db:1e:8a:75:f1:da:1a:22:2f:ad:f6:6d:ff:c7:
75:5f:8b:e9:b4:ff:a6:92:63:cf:79:cf:7c:c8:9c:
a8:55:b2:bd:32:80:59:fd:41:17:5e:66:0e:35:2e:
70:4e:db:7f:e9:c0:0a:27:a5:dd:9a:46:0d:4e:78:
52:3e:5e:73:5d:5c:e6:ac:1d:b8:08:d8:d7:7f:e9:
1f:71:fc:41:ea:d5:9f:74:b0:62:c2:ca:45:f7:ff:
72:ee:54:43:03:46:2a:28:35:97:f0:57:58:2e:91:
37:8d:4f:01:e4:a7:b3:10:e1:a5:09:ec:c5:15:c0:
1c:0d:4f:b1:fc:f2:d6:57:2a:d8:cd:d9:38:5e:3a:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:97:C9:F0:26:E8:78:84:93:39:03:C1:AA:13:56:96:EE:9E:41:92
X509v3 Authority Key Identifier:
keyid:6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:0b:73:d4:d1:68:5c:35:a3:e2:6b:9f:51:4b:8e:4e:ef:7a:
c1:22:ef:2e:63:61:ac:31:36:64:b9:0a:4c:76:a6:33:21:8e:
fc:5e:ef:18:bb:bd:3a:63:55:1b:29:35:8c:a6:ff:4a:b1:fb:
f1:2f:da:bd:c0:fc:37:67:6f:ed:a3:ef:9d:92:be:82:20:94:
06:0e:e1:35:92:0f:6f:01:3f:2b:ec:1c:d0:d8:ed:5b:37:bd:
3c:f7:d4:78:0c:3c:38:e2:16:e6:c9:22:3c:a4:42:14:74:b8:
8e:0f:45:fb:4c:24:41:0f:eb:fb:dc:e4:c3:39:2c:56:c7:f0:
0c:41:f3:0f:7a:7d:a3:4f:7e:9a:1a:a9:02:27:13:91:66:e7:
9b:03:8e:89:67:74:5d:bf:50:c8:95:50:bf:ae:ad:7f:cc:5d:
0b:c0:21:f4:6e:84:40:7f:82:bc:9e:e4:42:fa:0c:80:7d:dd:
3a:27:98:21:48:22:ce:3c:61:e7:9f:fc:eb:ad:46:47:d0:a2:
21:2c:51:43:df:99:6a:9d:64:ab:27:96:c1:b3:fb:ff:03:3f:
3f:04:2f:09:88:fb:4f:9d:aa:00:ff:e2:ac:d0:41:f4:46:03:
44:50:43:ea:6f:0e:94:db:59:90:1b:64:0e:c4:d8:82:ba:13:
50:c6:c8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:08 2025 by rpki-client