Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
File: BT-EaexiUgmHiW2JJsFyKKe8-z0.mft (raw, json)
Hash identifier: 5neyKwN+AZzavJXD/XpHKiI+G8cXW8Iv47VcjsRR1Dk=
Subject key identifier: 5B:89:50:34:C0:11:78:BE:DF:19:52:EB:33:6E:73:14:84:8D:8C:D3
Authority key identifier: 05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
Certificate issuer: /CN=053f8469ec62520987896d8926c17228a7bcfb3d
Certificate serial: 019A4EF467BFBFFABB2299E8ECE18AA8B8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
Manifest number: 11BA
Signing time: Tue 04 Nov 2025 13:00:31 +0000
Manifest this update: Tue 04 Nov 2025 13:00:31 +0000
Manifest next update: Wed 05 Nov 2025 13:00:31 +0000
Files and hashes: 1: BT-EaexiUgmHiW2JJsFyKKe8-z0.crl (hash: nuyuiICg5w8p0xgQLHa8MxwppujBfytUFsrnySZcd3w=)
2: HpFnJRgfsAOyrTqeLs8eo-g69ro.roa (hash: J1KtXJzzKcy+lZa+G0mBDKjPPemff/M6vpOlwWEgP+4=)
3: lLdmQa0LkR3Co21uBQYZ1e5FhDg.roa (hash: vtgIAMazUzVSJC7ln2bJgxtzKzngIXSl74Jinz+5lNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:67:bf:bf:fa:bb:22:99:e8:ec:e1:8a:a8:b8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053f8469ec62520987896d8926c17228a7bcfb3d
Validity
Not Before: Nov 4 13:00:31 2025 GMT
Not After : Nov 5 13:00:31 2025 GMT
Subject: CN=5b895034c01178bedf1952eb336e7314848d8cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f8:26:91:f3:e4:3a:b1:0e:f9:1d:63:55:27:
7a:a6:71:11:81:8a:79:df:74:7f:93:e3:81:1b:e4:
a4:40:23:78:1e:2c:d2:ee:dd:87:78:4f:26:9c:58:
90:d2:11:19:6e:45:5b:ed:89:10:e5:ac:fb:61:70:
a1:cd:63:73:bf:31:5f:14:c1:eb:26:2d:ac:d8:04:
9c:21:bf:79:db:9b:6d:cd:84:9a:ab:3e:27:d0:8a:
27:95:84:6b:54:6d:72:26:45:d2:bb:55:a1:52:70:
c5:cf:30:88:53:d0:0d:48:6c:38:77:73:40:50:71:
ba:00:44:53:53:c8:2b:d0:e1:4d:76:75:57:86:ca:
fd:57:6d:d0:86:22:39:02:05:74:ee:d1:f3:9a:2b:
d7:ac:e4:81:a3:0e:07:e1:28:26:28:83:14:28:85:
95:fa:cf:18:a3:62:97:2f:a3:9a:a7:b1:cf:54:bd:
73:d9:cc:2d:b0:72:16:d1:0b:dc:f3:4f:aa:aa:9e:
78:e7:cb:58:32:b3:eb:87:a8:9c:99:da:61:2c:20:
49:39:36:b0:a3:69:f5:56:f4:5a:13:55:09:d4:7a:
0f:98:97:ba:42:52:66:5c:84:5e:6f:06:c3:58:30:
e5:2b:f7:e1:19:5f:02:50:f1:a7:63:db:7a:41:c6:
0f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:89:50:34:C0:11:78:BE:DF:19:52:EB:33:6E:73:14:84:8D:8C:D3
X509v3 Authority Key Identifier:
keyid:05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d7:84:c5:e2:0b:26:92:d4:0a:0c:53:e8:6a:be:e0:bc:33:
f9:8b:fd:b7:8f:07:a0:3b:ca:67:c0:39:a8:87:1c:18:79:cd:
16:bb:f2:f1:ca:96:3f:f5:da:f6:f8:66:67:e7:07:95:d2:0e:
3a:6d:a0:3a:1d:64:b1:a9:6e:1f:ed:f8:49:65:09:bc:20:7d:
3e:69:6e:3d:dd:e6:b6:1e:a2:20:86:58:7a:b4:08:54:2d:f5:
b0:f3:73:dd:97:2a:43:19:ef:6e:ed:dc:3c:69:fd:4c:01:03:
c6:8d:fe:f5:24:9e:68:95:a5:d5:15:06:81:e9:21:5d:61:f4:
bc:63:ca:50:f8:9e:7a:ca:bc:13:aa:58:f0:8a:31:1d:bb:4a:
0a:14:c8:d3:67:25:a2:f3:5c:c1:ce:00:aa:0e:2c:45:06:7c:
f2:ba:82:5d:15:86:b5:92:43:8b:fd:eb:13:22:73:a7:f9:04:
c4:ea:30:b3:9e:82:1b:71:0b:db:86:8a:e4:1e:34:83:46:c0:
b1:af:06:aa:6d:3c:aa:8c:fa:d2:ab:ab:b0:08:58:db:20:cb:
8e:f4:f2:ec:12:58:e7:c5:ab:1d:a0:70:18:20:87:3a:d2:60:
40:c1:42:7f:31:55:63:0d:1c:28:f2:a0:18:30:53:5a:3b:34:
a1:b1:b7:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Ge/v/q7Ipno7OGKqLjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1M2Y4NDY5ZWM2MjUyMDk4Nzg5NmQ4OTI2YzE3MjI4YTdi
Y2ZiM2QwHhcNMjUxMTA0MTMwMDMxWhcNMjUxMTA1MTMwMDMxWjAzMTEwLwYDVQQD
Eyg1Yjg5NTAzNGMwMTE3OGJlZGYxOTUyZWIzMzZlNzMxNDg0OGQ4Y2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/gmkfPkOrEO+R1jVSd6pnERgYp5
33R/k+OBG+SkQCN4HizS7t2HeE8mnFiQ0hEZbkVb7YkQ5az7YXChzWNzvzFfFMHr
Ji2s2AScIb9525ttzYSaqz4n0IonlYRrVG1yJkXSu1WhUnDFzzCIU9ANSGw4d3NA
UHG6AERTU8gr0OFNdnVXhsr9V23QhiI5AgV07tHzmivXrOSBow4H4SgmKIMUKIWV
+s8Yo2KXL6Oap7HPVL1z2cwtsHIW0Qvc80+qqp5458tYMrPrh6icmdphLCBJOTaw
o2n1VvRaE1UJ1HoPmJe6QlJmXIRebwbDWDDlK/fhGV8CUPGnY9t6QcYP/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuJUDTAEXi+3xlS6zNucxSEjYzTMB8GA1UdIwQY
MBaAFAU/hGnsYlIJh4ltiSbBciinvPs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlQtRWFleGlVZ21IaVcySkpzRnlLS2U4LXowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mYWQ2NzItZTkzYS00ZGQ1LTg4OTMt
ZWZjMTc1MDI5NzQwLzEvQlQtRWFleGlVZ21IaVcySkpzRnlLS2U4LXowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9mYWQ2NzItZTkzYS00ZGQ1LTg4OTMtZWZjMTc1MDI5NzQw
LzEvQlQtRWFleGlVZ21IaVcySkpzRnlLS2U4LXowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNeExeIL
JpLUCgxT6Gq+4Lwz+Yv9t48HoDvKZ8A5qIccGHnNFrvy8cqWP/Xa9vhmZ+cHldIO
Om2gOh1ksaluH+34SWUJvCB9PmluPd3mth6iIIZYerQIVC31sPNz3ZcqQxnvbu3c
PGn9TAEDxo3+9SSeaJWl1RUGgekhXWH0vGPKUPieesq8E6pY8IoxHbtKChTI02cl
ovNcwc4Aqg4sRQZ88rqCXRWGtZJDi/3rEyJzp/kExOows56CG3EL24aK5B40g0bA
sa8Gqm08qoz60qursAhY2yDLjvTy7BJY58WrHaBwGCCHOtJgQMFCfzFVYw0cKPKg
GDBTWjs0obG3XA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:24:33 2025 by rpki-client