Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
File: btSqOMC1kdSms-WFaFxtQ4gNrHg.mft (raw, json)
Hash identifier: GPCMZB4grsBsk2OapVJgZYNF7WUXgtDnA6Ql4bfyPY0=
Subject key identifier: F5:8B:95:65:A4:B5:83:A2:40:42:C5:C8:B7:E5:0D:A5:4F:EE:27:0D
Authority key identifier: 6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
Certificate issuer: /CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Certificate serial: 0197B8213C8D804E7D2135335FFBFAB3F199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
Manifest number: 0289
Signing time: Sat 28 Jun 2025 20:01:15 +0000
Manifest this update: Sat 28 Jun 2025 20:01:15 +0000
Manifest next update: Sun 29 Jun 2025 20:01:15 +0000
Files and hashes: 1: ZkPBKtmtCeMiCdYBf2wfRvrO9YI.roa (hash: LuN9s57PZoZuxYZxd6mXt4JH7Ba+GwQQeoNwNSpbFME=)
2: btSqOMC1kdSms-WFaFxtQ4gNrHg.crl (hash: hU7QQHS3DPOazDsjlaLo0DWxGPxy9bVMq2yAjLqnEc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:3c:8d:80:4e:7d:21:35:33:5f:fb:fa:b3:f1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Validity
Not Before: Jun 28 20:01:15 2025 GMT
Not After : Jun 29 20:01:15 2025 GMT
Subject: CN=f58b9565a4b583a24042c5c8b7e50da54fee270d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:e5:33:83:62:93:09:28:88:02:05:cd:a0:
82:78:73:16:1b:ba:33:66:ae:d3:c2:8b:8f:df:74:
df:0e:bf:c2:83:0a:e2:7b:20:82:57:56:13:b0:2a:
5b:7e:c9:51:d1:98:e4:b8:4a:41:01:63:65:bd:84:
f7:22:0f:5f:6a:db:92:67:57:d4:1a:33:4c:65:3d:
46:20:17:9f:17:a6:aa:3a:f4:90:c9:b6:2f:ff:79:
e4:07:56:31:ac:32:8a:93:f7:9c:6c:a0:81:e4:bb:
59:a3:af:73:9d:6a:74:07:cf:0d:f6:e1:0f:f5:67:
04:25:51:15:d8:94:56:52:95:14:60:68:04:ad:6e:
a8:aa:1d:4f:1b:88:ae:13:07:02:36:b9:18:1f:41:
7c:96:a2:87:cf:b5:ea:48:4b:27:b6:5f:f3:68:6f:
87:5c:d5:cb:7a:31:32:29:6c:bd:d9:3e:89:f0:7d:
a4:0f:f1:c6:45:33:9f:f5:f5:4c:2d:93:e8:2b:f0:
79:c9:23:d0:9d:55:72:de:f3:dd:fc:f5:b2:4f:a5:
d1:05:42:f7:f8:9b:08:d7:28:44:a1:ed:4c:a5:f6:
7d:18:5d:00:ee:9f:7e:92:c9:0a:d5:79:78:a1:d6:
71:d7:98:3f:b5:f4:b6:5f:01:59:0d:a8:37:39:b0:
fa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8B:95:65:A4:B5:83:A2:40:42:C5:C8:B7:E5:0D:A5:4F:EE:27:0D
X509v3 Authority Key Identifier:
keyid:6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d6:87:2b:85:a5:e5:67:a6:18:00:d4:62:dc:94:c4:2b:8c:
d5:2f:bf:08:a9:39:5a:c6:a5:0a:5d:a6:1b:28:00:7c:8c:b6:
51:c3:ea:dd:f3:5d:83:48:bc:3d:02:24:e6:92:9c:f2:63:a2:
14:c5:ae:90:87:2a:78:29:3e:53:7d:b7:ac:bb:37:f0:21:a6:
b0:e6:4a:a7:35:7b:cd:df:c0:2c:98:88:2c:4c:a2:d8:80:9d:
6a:0f:56:bb:18:3e:27:ec:e5:db:2e:dc:c9:f3:a2:62:be:0b:
bc:db:22:de:08:24:40:e4:c8:63:1d:69:fd:c2:fd:9f:72:42:
f3:b3:c6:4b:09:15:f5:d9:be:a5:5b:2e:0b:0f:cc:21:4d:5c:
f6:dc:a5:4f:a1:2c:20:89:98:1b:5a:65:2a:1b:e1:6c:08:42:
76:e4:83:e7:20:9d:44:93:5f:7e:39:92:e1:aa:a7:f9:b7:68:
b7:f0:99:e3:f5:a0:3a:5b:f2:a7:df:92:08:08:9e:55:ef:09:
31:92:67:36:c6:f2:f8:27:e9:66:bb:03:54:74:7e:c9:83:24:
3c:7d:64:f3:6d:4e:50:47:fa:86:ce:ba:d5:18:4b:aa:8a:1c:
79:e5:aa:26:72:7f:82:84:55:e0:dc:49:a5:f9:f4:c8:de:78:
a0:fa:a8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:23 2025 by rpki-client