Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
File: btSqOMC1kdSms-WFaFxtQ4gNrHg.mft (raw, json)
Hash identifier: QVAWyLJGdXO5+DwO0ehVLJMd/mIE0hEv27pFPQbSrD4=
Subject key identifier: BE:6B:73:0B:CC:50:F9:29:75:17:99:BE:AA:11:DA:D3:4D:86:BF:72
Authority key identifier: 6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
Certificate issuer: /CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Certificate serial: 019A5074AAF8C077948A87310482186C0507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
Manifest number: 03E1
Signing time: Tue 04 Nov 2025 20:00:14 +0000
Manifest this update: Tue 04 Nov 2025 20:00:14 +0000
Manifest next update: Wed 05 Nov 2025 20:00:14 +0000
Files and hashes: 1: ZkPBKtmtCeMiCdYBf2wfRvrO9YI.roa (hash: LuN9s57PZoZuxYZxd6mXt4JH7Ba+GwQQeoNwNSpbFME=)
2: btSqOMC1kdSms-WFaFxtQ4gNrHg.crl (hash: bhL+Kx+mLkW/8a78RvNGHnABluZMh0S1AFYH0bQwBuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:aa:f8:c0:77:94:8a:87:31:04:82:18:6c:05:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Validity
Not Before: Nov 4 20:00:14 2025 GMT
Not After : Nov 5 20:00:14 2025 GMT
Subject: CN=be6b730bcc50f929751799beaa11dad34d86bf72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a8:d8:8b:89:a6:4b:d3:03:9b:aa:e1:bf:3e:
4d:59:fe:31:77:2b:ab:6e:2c:b5:5c:8b:8c:61:6a:
d5:c7:80:ca:ba:18:b8:b6:d2:50:1a:12:43:24:89:
14:26:5e:46:a7:fa:45:ea:2e:be:a1:38:40:9a:c4:
1c:39:77:02:88:8f:91:ef:73:09:6a:0e:31:11:5f:
e4:87:58:84:6c:c5:ac:be:b5:9b:0f:60:eb:65:8a:
57:d5:ad:5a:80:80:c0:ae:f7:2a:2e:0e:98:1e:3a:
d9:85:4f:e4:76:83:c9:fd:37:65:48:08:23:54:e8:
43:1b:01:06:2f:e0:c7:65:d3:4c:81:91:e8:a0:6d:
c6:20:1a:c1:7f:6e:8f:3a:52:57:a4:c1:a5:55:15:
74:84:e7:75:3b:f9:a5:3a:0f:6d:d7:e1:06:33:7c:
d5:c6:2b:6b:1e:67:79:53:29:0b:3c:9f:01:d6:7b:
04:8b:21:2e:15:6d:80:fb:96:76:9a:c5:c2:4f:08:
25:ed:4e:d0:29:93:87:1f:e6:2a:e6:78:8c:52:da:
e3:21:8d:31:c0:8d:fc:cf:1b:44:61:de:c8:ec:f7:
bd:7d:0f:80:05:95:e2:d3:ca:89:4e:85:df:56:d1:
ef:7f:ee:4e:f0:44:7a:ed:e0:e5:41:d8:d6:bf:a0:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6B:73:0B:CC:50:F9:29:75:17:99:BE:AA:11:DA:D3:4D:86:BF:72
X509v3 Authority Key Identifier:
keyid:6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b4:ba:8d:c9:82:5a:43:74:09:50:33:d7:1a:bf:9b:69:b3:
7c:1a:b2:cf:04:2d:07:5f:b5:ef:c4:0e:db:29:b4:b5:55:d5:
2c:66:da:de:31:d0:89:ad:19:16:cc:53:71:cc:55:78:17:1f:
65:82:66:4a:6e:ad:00:ad:1e:0e:9f:d2:be:83:e1:8c:2f:0d:
c0:60:19:24:57:5e:06:63:08:e3:03:7e:e2:f8:89:89:67:4e:
a8:e0:f3:bc:43:83:71:f0:f6:69:d0:17:53:a9:1e:38:54:84:
b0:4f:3b:01:86:09:90:3f:10:03:a1:c9:8f:80:80:f1:9b:9c:
25:fe:f9:7f:1f:bf:4f:22:bd:e2:f6:47:69:53:55:2f:01:f5:
16:ea:7e:71:1c:ad:8c:0d:7f:5a:f7:86:b1:2f:9e:e8:36:07:
52:f9:f6:14:a1:fc:e9:27:23:1d:88:c2:a7:1c:de:f4:9c:9c:
88:d9:d2:e6:0e:ab:fc:e5:17:a2:11:b7:2e:d0:89:ac:18:e4:
b1:a3:06:1f:f9:01:57:1f:73:c1:92:82:79:f5:f8:02:7b:83:
8a:71:d7:2d:6d:42:c7:bc:07:4c:ca:0d:41:33:3d:d0:9b:e2:
57:d0:e7:4b:8d:27:bd:38:bd:57:48:79:cc:21:ee:de:a6:cf:
93:b8:94:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdKr4wHeUiocxBIIYbAUHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZDRhYTM4YzBiNTkxZDRhNmIzZTU4NTY4NWM2ZDQzODgw
ZGFjNzgwHhcNMjUxMTA0MjAwMDE0WhcNMjUxMTA1MjAwMDE0WjAzMTEwLwYDVQQD
EyhiZTZiNzMwYmNjNTBmOTI5NzUxNzk5YmVhYTExZGFkMzRkODZiZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6jYi4mmS9MDm6rhvz5NWf4xdyur
biy1XIuMYWrVx4DKuhi4ttJQGhJDJIkUJl5Gp/pF6i6+oThAmsQcOXcCiI+R73MJ
ag4xEV/kh1iEbMWsvrWbD2DrZYpX1a1agIDArvcqLg6YHjrZhU/kdoPJ/TdlSAgj
VOhDGwEGL+DHZdNMgZHooG3GIBrBf26POlJXpMGlVRV0hOd1O/mlOg9t1+EGM3zV
xitrHmd5UykLPJ8B1nsEiyEuFW2A+5Z2msXCTwgl7U7QKZOHH+Yq5niMUtrjIY0x
wI38zxtEYd7I7Pe9fQ+ABZXi08qJToXfVtHvf+5O8ER67eDlQdjWv6AezwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5rcwvMUPkpdReZvqoR2tNNhr9yMB8GA1UdIwQY
MBaAFG7UqjjAtZHUprPlhWhcbUOIDax4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85YTg3ODYtMDlmNC00YjYwLTg2N2Et
YzhiMmRmMjNkNTE5LzEvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85YTg3ODYtMDlmNC00YjYwLTg2N2EtYzhiMmRmMjNkNTE5
LzEvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLS6jcmC
WkN0CVAz1xq/m2mzfBqyzwQtB1+178QO2ym0tVXVLGba3jHQia0ZFsxTccxVeBcf
ZYJmSm6tAK0eDp/SvoPhjC8NwGAZJFdeBmMI4wN+4viJiWdOqODzvEODcfD2adAX
U6keOFSEsE87AYYJkD8QA6HJj4CA8ZucJf75fx+/TyK94vZHaVNVLwH1Fup+cRyt
jA1/WveGsS+e6DYHUvn2FKH86ScjHYjCpxze9JyciNnS5g6r/OUXohG3LtCJrBjk
saMGH/kBVx9zwZKCefX4AnuDinHXLW1Cx7wHTMoNQTM90JviV9DnS40nvTi9V0h5
zCHu3qbPk7iUOg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:32:48 2025 by rpki-client