Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
File: BT-EaexiUgmHiW2JJsFyKKe8-z0.mft (raw, json)
Hash identifier: qWpsIZohi6w0W/bPYEkZwkhFLAvZRnfz3SyQDukca1E=
Subject key identifier: E2:C9:92:0A:17:03:31:72:84:32:24:07:CB:E3:C0:48:11:D2:F4:F0
Authority key identifier: 05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
Certificate issuer: /CN=053f8469ec62520987896d8926c17228a7bcfb3d
Certificate serial: 0198D4731E971E0245CD45A0AA813F25EB0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
Manifest number: 10F6
Signing time: Sat 23 Aug 2025 01:02:50 +0000
Manifest this update: Sat 23 Aug 2025 01:02:50 +0000
Manifest next update: Sun 24 Aug 2025 01:02:50 +0000
Files and hashes: 1: BT-EaexiUgmHiW2JJsFyKKe8-z0.crl (hash: QJVH14iTp17/lYaV9vYkEznNAUshHWoLQc4JdQCO9ug=)
2: HpFnJRgfsAOyrTqeLs8eo-g69ro.roa (hash: J1KtXJzzKcy+lZa+G0mBDKjPPemff/M6vpOlwWEgP+4=)
3: lLdmQa0LkR3Co21uBQYZ1e5FhDg.roa (hash: vtgIAMazUzVSJC7ln2bJgxtzKzngIXSl74Jinz+5lNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:1e:97:1e:02:45:cd:45:a0:aa:81:3f:25:eb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053f8469ec62520987896d8926c17228a7bcfb3d
Validity
Not Before: Aug 23 01:02:50 2025 GMT
Not After : Aug 24 01:02:50 2025 GMT
Subject: CN=e2c9920a1703317284322407cbe3c04811d2f4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:16:a7:21:47:b6:db:ee:44:c0:c6:04:74:
8b:b4:21:10:d3:34:f5:84:4c:82:5e:3c:6b:db:5d:
21:87:8f:55:7e:66:4d:14:a1:77:1b:b8:a0:58:39:
7a:18:c6:e4:5d:d2:05:52:06:2f:5d:cc:bf:2f:80:
06:de:eb:03:1f:d5:6d:05:24:40:c5:f8:d3:93:83:
c2:c4:4f:db:8c:1d:93:e5:47:a6:97:26:94:d8:69:
b9:7f:01:a1:f3:fe:08:1f:c3:32:a3:fe:f3:0d:4b:
8f:6b:43:51:66:7f:b2:05:e1:08:84:67:da:ea:42:
08:31:89:a6:f5:44:a7:e4:3b:fa:5f:6c:64:68:e3:
b9:50:3b:72:ba:f1:1a:1c:9b:61:0b:da:23:70:ac:
6b:08:46:f0:88:97:71:f7:48:4a:0d:6b:03:c5:e1:
e7:d0:81:44:90:9a:5e:dd:e9:ad:9a:19:15:b6:7e:
20:6c:18:ed:d6:21:bf:a1:78:8c:bc:7a:05:0c:81:
e5:6f:d0:bd:13:36:0f:ab:19:90:5c:db:c1:1c:a1:
a8:f6:57:13:dc:a9:9e:ce:a0:54:88:17:6b:fa:35:
57:ee:ed:14:19:94:66:cf:39:07:2e:79:25:3b:3e:
32:9a:40:60:0f:f5:75:03:cf:f8:6c:2c:a9:81:7c:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C9:92:0A:17:03:31:72:84:32:24:07:CB:E3:C0:48:11:D2:F4:F0
X509v3 Authority Key Identifier:
keyid:05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:44:09:1c:d5:64:46:84:1c:b2:a9:a4:1e:53:2b:49:4c:e9:
ad:2c:34:af:42:53:de:e6:78:47:4f:1c:1f:3c:ff:2f:ce:7e:
15:9a:c2:58:e5:4b:77:14:a8:37:47:7a:70:23:20:d1:50:14:
2a:21:b4:00:45:63:6c:86:18:2b:aa:f5:44:d1:fa:2f:85:c7:
15:36:d5:ae:08:3b:62:db:83:62:ee:bd:fc:09:7d:12:85:64:
3c:38:2e:69:40:e1:51:7b:b2:54:ad:73:75:95:a8:ce:14:1f:
ee:3e:45:4a:11:5e:a6:2e:0b:26:09:d6:a2:f6:ab:0b:cd:d3:
d4:aa:3a:6b:c1:97:6b:f3:a1:0a:9c:82:d7:bd:0a:ec:05:c5:
64:58:47:fe:b8:84:a0:f8:63:eb:df:a6:60:02:11:a9:2f:f1:
1f:c1:16:00:4e:0c:56:02:10:45:fb:38:47:cd:95:e5:46:c4:
77:f7:bc:1f:ca:3b:98:d1:5e:25:fd:3b:35:6a:63:2d:a7:f9:
ce:af:6e:c6:1c:4d:cd:08:3a:6a:f8:50:56:d5:a3:d7:c3:a9:
18:40:5d:f8:c5:d7:42:08:c9:d2:fb:68:37:a4:fd:98:a8:26:
0b:cf:cd:03:9d:9a:9f:c5:14:14:aa:ec:f1:9b:4d:d1:79:7e:
ea:e3:d4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:08 2025 by rpki-client