Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
File: btSqOMC1kdSms-WFaFxtQ4gNrHg.mft (raw, json)
Hash identifier: zrw/G+MHu84UovdVG8D3HY0NIpkdSAYSg0TZryIhmUs=
Subject key identifier: 2F:00:47:FB:C0:AB:4E:3E:2E:F2:5D:C0:85:43:1C:A9:E6:55:6A:7C
Authority key identifier: 6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
Certificate issuer: /CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Certificate serial: 01987373F0B5E549D2DBD1F26E7107DA9578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
Manifest number: 02EA
Signing time: Mon 04 Aug 2025 05:00:34 +0000
Manifest this update: Mon 04 Aug 2025 05:00:34 +0000
Manifest next update: Tue 05 Aug 2025 05:00:34 +0000
Files and hashes: 1: ZkPBKtmtCeMiCdYBf2wfRvrO9YI.roa (hash: LuN9s57PZoZuxYZxd6mXt4JH7Ba+GwQQeoNwNSpbFME=)
2: btSqOMC1kdSms-WFaFxtQ4gNrHg.crl (hash: oqEu93QOCXGWNFJcXdmQduP7CKYIB/zjCpaJf/ttB2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:f0:b5:e5:49:d2:db:d1:f2:6e:71:07:da:95:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Validity
Not Before: Aug 4 05:00:34 2025 GMT
Not After : Aug 5 05:00:34 2025 GMT
Subject: CN=2f0047fbc0ab4e3e2ef25dc085431ca9e6556a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:b3:55:32:98:71:75:1c:27:f4:f4:0e:32:
9f:1a:5c:b9:c4:70:84:25:27:b1:60:76:b2:59:50:
f9:cc:40:8f:53:67:20:28:43:b6:a6:10:8f:7f:b1:
07:ba:94:32:79:f8:26:6b:0f:5b:1f:a4:06:17:aa:
03:2b:6c:cb:9d:2f:39:1b:8e:23:25:75:b9:4d:d1:
8b:0a:36:3d:b9:a8:c9:d4:d0:85:6f:ed:2b:84:c4:
17:e5:17:8e:ff:00:6f:df:5c:c7:89:07:45:3a:61:
a7:6c:16:07:65:31:cb:d8:87:13:92:34:37:8b:5c:
bf:34:51:8a:4b:04:0d:62:93:bf:c0:2e:e4:a3:42:
fe:d3:de:04:01:a8:53:31:29:3d:3e:1a:26:4c:2b:
20:7a:0d:65:d6:60:63:c0:90:dd:d5:fb:60:a5:ab:
e0:6e:fa:bf:a6:f7:84:93:27:17:34:6a:6b:37:ad:
00:91:77:f2:6b:a3:55:98:3c:07:4a:6c:b0:f0:c3:
15:a2:0b:91:76:26:1b:14:24:b3:c1:c0:64:22:12:
fd:b1:d2:e9:c3:53:5a:1c:45:0b:91:99:b0:1b:48:
83:2d:65:45:a5:34:3b:c8:2c:62:bb:68:7b:69:af:
11:05:82:87:d3:6c:01:44:e0:81:5a:78:01:22:4b:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:00:47:FB:C0:AB:4E:3E:2E:F2:5D:C0:85:43:1C:A9:E6:55:6A:7C
X509v3 Authority Key Identifier:
keyid:6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:16:d9:44:5b:21:58:d4:c6:f0:07:e5:b0:11:cf:4c:89:5b:
d0:db:82:14:2e:e8:83:ff:0c:6e:c7:57:a6:2e:df:69:40:80:
5b:d7:b9:5e:64:5f:3b:75:02:ff:83:a9:87:9a:79:78:ca:80:
10:be:43:70:e4:bc:86:01:65:31:8b:dc:5f:20:4f:e2:16:1a:
bb:eb:66:97:e2:8a:ed:ce:72:10:a0:62:83:42:04:c7:9a:42:
23:a5:f3:10:35:82:a5:d2:74:c8:7f:7b:fa:8e:d5:88:f9:32:
01:c5:38:d3:88:ff:6f:23:3d:3e:ed:e1:2a:7d:eb:70:02:9b:
b6:a1:9e:c3:d3:92:8c:b9:55:fb:68:0c:81:f8:5d:67:99:6c:
b5:44:0c:7a:01:be:26:b2:72:ce:47:09:b8:46:54:ed:13:24:
84:14:9c:92:c1:88:2f:04:f6:86:46:c3:7c:b4:57:e6:c0:06:
1b:f8:83:a1:e2:a6:d7:d7:f8:2d:35:e0:2a:ce:ba:58:4d:f5:
ac:36:c6:10:82:c9:03:fc:ae:c6:88:a7:b2:75:e4:65:52:86:
35:43:47:70:f0:2b:19:46:e0:a7:43:6c:3e:44:f4:dd:16:47:
bf:2e:f4:c0:d6:ff:8d:cb:b0:2f:79:ab:89:62:27:5a:e0:b8:
9f:9c:f8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:52:23 2025 by rpki-client