Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
File: BT-EaexiUgmHiW2JJsFyKKe8-z0.mft (raw, json)
Hash identifier: gcz++ZHWzy3wpuBSgqpnn+tT95bTSxcVhhXqDyej6ag=
Subject key identifier: 71:25:6B:92:D8:4E:25:42:47:AA:24:2F:F0:F9:A9:0D:DF:CF:D4:CD
Authority key identifier: 05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
Certificate issuer: /CN=053f8469ec62520987896d8926c17228a7bcfb3d
Certificate serial: 0196C314A220E2DF2992207987DB1F1D31A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
Manifest number: 0FE4
Signing time: Mon 12 May 2025 06:00:31 +0000
Manifest this update: Mon 12 May 2025 06:00:31 +0000
Manifest next update: Tue 13 May 2025 06:00:31 +0000
Files and hashes: 1: BT-EaexiUgmHiW2JJsFyKKe8-z0.crl (hash: 2idbhnz+V9q4BLq4ThC7H2aa2GHrIuZ1m4nLFP5TzPE=)
2: HpFnJRgfsAOyrTqeLs8eo-g69ro.roa (hash: J1KtXJzzKcy+lZa+G0mBDKjPPemff/M6vpOlwWEgP+4=)
3: lLdmQa0LkR3Co21uBQYZ1e5FhDg.roa (hash: vtgIAMazUzVSJC7ln2bJgxtzKzngIXSl74Jinz+5lNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:a2:20:e2:df:29:92:20:79:87:db:1f:1d:31:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053f8469ec62520987896d8926c17228a7bcfb3d
Validity
Not Before: May 12 06:00:31 2025 GMT
Not After : May 13 06:00:31 2025 GMT
Subject: CN=71256b92d84e254247aa242ff0f9a90ddfcfd4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:7b:71:fe:e4:53:94:d3:8f:55:68:40:4c:
f5:f8:08:6b:33:92:71:04:25:ab:f6:01:77:1a:46:
8e:f6:b1:a7:ed:af:e2:75:78:ea:15:ec:44:0f:2f:
e9:c1:ef:57:09:16:98:9b:16:a8:20:2b:19:28:ec:
ac:53:6e:da:f4:51:00:00:b1:a3:f8:8c:44:f2:d2:
b0:7c:3e:fd:79:e9:ea:7f:fc:f7:05:19:51:c8:b4:
5f:fa:0f:0f:3b:7d:16:f0:4f:c9:c8:8e:4c:fb:1e:
12:fe:dd:39:cc:13:46:36:3d:49:30:f4:b5:21:74:
62:83:38:72:0c:64:15:eb:ff:1d:43:2d:20:54:43:
1b:e5:e9:f8:e1:d0:2d:e9:2b:13:21:9d:bf:d4:2e:
a2:56:8d:6e:05:6b:aa:f5:89:2d:44:aa:cf:46:84:
d1:c5:33:93:45:4d:8c:01:5c:0e:6a:23:90:81:52:
b9:8d:f2:8d:ce:a6:d9:75:0f:00:61:7f:18:85:51:
41:d0:4f:99:44:8b:77:ac:90:be:6d:90:6e:0b:3e:
0b:6d:76:fc:6a:2b:a0:a8:70:a8:08:38:8d:2a:85:
4c:ad:36:87:b7:77:c0:4a:5f:bd:1a:17:62:2b:ee:
17:79:72:a0:64:82:3d:c3:aa:83:a1:9e:e9:1b:34:
17:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:25:6B:92:D8:4E:25:42:47:AA:24:2F:F0:F9:A9:0D:DF:CF:D4:CD
X509v3 Authority Key Identifier:
keyid:05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a9:98:b9:8c:3b:e6:a5:73:f0:b7:1c:19:b7:a6:ae:e3:bc:
fb:19:77:3b:43:6c:d9:f9:7a:4a:ef:9c:06:ff:c4:21:47:40:
ba:d6:be:5e:fb:99:c1:d8:11:67:b5:08:9f:9b:ad:2a:d5:1f:
6f:a8:1c:12:ee:7e:04:c0:ea:49:0c:ae:9b:a8:25:54:2b:7a:
51:a1:06:20:8f:e8:a1:c3:02:c9:43:e3:e4:9d:6a:87:c0:45:
fc:de:4c:c0:e2:0a:a3:c0:e7:f0:b5:bb:1f:60:15:c7:88:a5:
15:34:16:8e:1a:1e:a9:3d:66:9d:a6:1b:4d:f9:2f:df:e0:71:
76:5b:95:59:10:73:93:fc:3d:10:df:f6:f4:b9:28:a5:61:76:
11:a6:7b:e0:a1:fc:0f:37:59:71:92:20:c9:80:79:9b:5e:68:
d1:d8:ac:02:90:89:d9:89:05:b0:51:23:6a:87:9f:7a:2e:41:
b5:f1:ca:ce:0c:23:d9:bf:46:c6:d0:d4:54:7c:98:ff:43:0e:
78:18:55:a0:8f:f9:7f:52:22:ee:35:96:41:f7:78:be:5f:3c:
f2:72:58:ab:b6:40:2b:c7:65:2e:9c:34:cd:55:a8:40:ff:28:
50:ca:a8:18:e9:61:93:7f:c2:01:b5:95:cb:75:9a:9c:e3:52:
17:aa:c1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:42:11 2025 by rpki-client