Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
File: BTPwgeV70J2rsG4334Vp61JCD3Y.mft (raw, json)
Hash identifier: eLAoPF++D+s0t8vieV2z1fRcGn2d6fCG0Iaxn/DD5mk=
Subject key identifier: 48:E2:DA:48:F0:16:41:A1:1B:C6:EC:70:C0:76:93:2B:DA:4C:99:2D
Authority key identifier: 05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76
Certificate issuer: /CN=0533f081e57bd09dabb06e37df8569eb52420f76
Certificate serial: 0199FFC883E67FA45430319B4339EE28ACA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
Manifest number: 1594
Signing time: Mon 20 Oct 2025 04:02:35 +0000
Manifest this update: Mon 20 Oct 2025 04:02:35 +0000
Manifest next update: Tue 21 Oct 2025 04:02:35 +0000
Files and hashes: 1: BTPwgeV70J2rsG4334Vp61JCD3Y.crl (hash: DRQ9afKgz+5SrbBKEtAOygyvVWNNE5dapPpEY5YUPoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:83:e6:7f:a4:54:30:31:9b:43:39:ee:28:ac:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0533f081e57bd09dabb06e37df8569eb52420f76
Validity
Not Before: Oct 20 04:02:35 2025 GMT
Not After : Oct 21 04:02:35 2025 GMT
Subject: CN=48e2da48f01641a11bc6ec70c076932bda4c992d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6c:39:37:03:3e:d0:57:14:df:73:2d:d6:cf:
19:ac:7b:25:bf:5a:42:e8:e1:ca:8e:44:51:b2:ec:
dd:0e:d3:bc:f1:7c:8b:d6:3a:01:ed:55:41:b4:92:
21:fb:5e:85:cb:44:bd:bb:b8:a5:9b:c9:4a:ea:c3:
43:0b:4d:77:cb:28:c0:20:23:9f:5d:46:3b:c5:0f:
d9:c8:12:5d:cd:ec:31:9f:e5:f4:f5:87:81:81:e9:
51:0b:6e:7c:4e:15:d8:0e:cd:38:2a:f8:34:3f:40:
be:55:a7:97:2a:25:c7:13:5d:9b:ce:50:65:3e:aa:
e8:e6:d4:4f:53:ad:34:6e:f8:65:39:1c:06:a7:77:
59:8a:3b:0b:f5:f4:c2:f8:b6:a3:01:fe:6c:f3:9a:
ca:84:66:09:fb:4a:0c:27:5e:f4:65:ef:c3:91:43:
53:d1:20:ef:57:e2:45:e0:7f:f4:16:bf:10:31:57:
73:65:ad:b1:19:2e:ac:71:96:0b:ef:b1:6f:0f:88:
15:50:67:cb:ac:01:c1:a1:1c:87:01:b7:0e:09:af:
c7:f5:ec:e2:d4:fb:c4:7b:02:dc:51:d0:a0:e6:c1:
88:97:eb:70:3a:f3:4f:a7:db:96:ce:50:3f:6d:30:
7c:2f:8f:95:a3:54:0c:13:1a:29:5a:1a:7c:63:fc:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E2:DA:48:F0:16:41:A1:1B:C6:EC:70:C0:76:93:2B:DA:4C:99:2D
X509v3 Authority Key Identifier:
keyid:05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c0:70:3b:15:89:45:54:e4:fe:34:7c:c2:53:51:10:99:78:
df:5d:be:d8:ae:ef:91:a3:9f:72:6b:77:03:b1:a2:5d:bb:ef:
87:d6:0f:57:3d:f5:7a:f2:0a:49:31:bf:5f:b9:ac:9b:99:c3:
d6:de:73:8c:7c:a2:e8:16:87:09:9f:c6:67:f1:e0:cd:8d:85:
60:8e:8d:a7:37:29:f6:ca:81:38:76:ab:3d:ed:fc:c8:cb:06:
0c:43:ae:e9:89:e9:c8:97:35:ac:21:53:09:54:fa:f7:a1:93:
b0:cb:9b:58:f6:49:43:88:e4:62:71:52:de:e6:11:7a:dd:ac:
52:fb:cf:50:ce:e3:9b:77:c5:77:19:65:eb:c9:ef:88:f1:a6:
dd:02:d0:ae:e4:51:c8:a0:b5:a1:9a:a5:cf:01:74:8a:c8:f5:
cd:44:a2:9d:b8:ff:8e:80:d6:cd:08:2d:43:4d:24:07:7a:02:
44:94:6f:71:8a:6b:1a:17:19:6f:42:ee:29:09:27:6b:c0:25:
39:38:69:88:f8:c8:4f:a0:d2:d6:1b:03:19:b9:21:e6:14:72:
36:84:2a:40:70:d4:42:27:80:2d:92:66:5d:2e:69:5f:ec:fd:
0f:9f:80:35:84:e1:96:3a:84:7f:18:fd:58:a9:6a:ff:48:8a:
cc:c2:90:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:24:16 2025 by rpki-client