
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
File: BT-EaexiUgmHiW2JJsFyKKe8-z0.mft (raw, json)
Hash identifier: DFo335f+f48TYw/teUIHrw36yGYQ97lebUBDTwn7Gb0=
Subject key identifier: 03:CF:68:A4:A7:CB:BC:A1:A0:A9:D0:03:A0:42:19:A4:52:56:7D:A4
Authority key identifier: 05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
Certificate issuer: /CN=053f8469ec62520987896d8926c17228a7bcfb3d
Certificate serial: 01988B0F23B223EF75F7F07031CF9882EAD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
Manifest number: 10D0
Signing time: Fri 08 Aug 2025 19:01:21 +0000
Manifest this update: Fri 08 Aug 2025 19:01:21 +0000
Manifest next update: Sat 09 Aug 2025 19:01:21 +0000
Files and hashes: 1: BT-EaexiUgmHiW2JJsFyKKe8-z0.crl (hash: br14ajJtqTGwGnUtxtn1yzl3HVaOoKTUdrfRYY5Nrcg=)
2: HpFnJRgfsAOyrTqeLs8eo-g69ro.roa (hash: J1KtXJzzKcy+lZa+G0mBDKjPPemff/M6vpOlwWEgP+4=)
3: lLdmQa0LkR3Co21uBQYZ1e5FhDg.roa (hash: vtgIAMazUzVSJC7ln2bJgxtzKzngIXSl74Jinz+5lNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:23:b2:23:ef:75:f7:f0:70:31:cf:98:82:ea:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053f8469ec62520987896d8926c17228a7bcfb3d
Validity
Not Before: Aug 8 19:01:21 2025 GMT
Not After : Aug 9 19:01:21 2025 GMT
Subject: CN=03cf68a4a7cbbca1a0a9d003a04219a452567da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:40:21:c9:e5:40:04:e1:bd:9e:a4:6a:c4:f1:
2a:9a:ce:1e:44:f4:7b:2d:98:51:5e:1d:3e:fa:19:
df:b1:34:e7:6c:18:7b:c6:7e:a1:44:10:b4:9c:09:
f2:03:dd:54:b0:d5:29:a6:16:21:55:cc:e7:20:01:
f8:96:07:ea:34:90:fc:3c:9d:a6:cb:4b:72:c9:fc:
7f:fd:bc:82:c6:b0:19:c2:fc:50:88:4e:4e:7e:56:
cf:ef:6c:e2:80:23:1e:59:ac:76:c6:e6:04:e3:c4:
cf:ea:5d:24:ef:de:0d:fd:de:80:6c:47:21:3d:6b:
36:70:bd:0f:7a:50:57:de:92:90:b5:69:f5:fe:96:
1a:b0:66:54:5a:61:4b:1f:02:92:da:86:1d:aa:d2:
9e:3f:ca:4e:47:fd:5d:80:a2:a5:de:93:8b:b4:55:
eb:fe:be:4a:81:a7:bc:6e:f8:82:91:9a:62:9d:1a:
2f:9d:f1:8a:44:f5:4e:19:5b:e1:9f:94:a7:c5:c9:
96:ad:3d:62:53:5a:da:8c:0b:86:5b:be:04:62:38:
4b:0d:87:73:88:93:a4:d7:00:86:2f:e8:c4:f9:07:
c9:40:ff:3d:14:4f:14:d2:c0:76:60:9f:4b:2e:c1:
52:e7:74:3c:b0:cd:b9:5e:b9:3d:89:e8:2d:fc:25:
cd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CF:68:A4:A7:CB:BC:A1:A0:A9:D0:03:A0:42:19:A4:52:56:7D:A4
X509v3 Authority Key Identifier:
keyid:05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f5:a4:e0:5c:2b:5d:52:cb:4c:bb:d9:16:69:d3:a0:91:e6:
7c:08:0a:3d:6b:a8:ad:66:49:4a:dd:28:53:ba:a7:ba:4e:4b:
e3:22:84:15:2c:11:27:02:6b:52:2d:7f:27:89:a6:03:92:8b:
c6:f4:e3:f7:df:33:af:24:80:c3:8c:b8:94:6c:66:c4:3d:46:
4c:df:92:79:a2:97:d7:82:73:f1:35:07:33:f1:4b:0f:35:3a:
7e:2e:b0:c6:aa:cd:72:e8:1e:6d:d0:58:52:30:f2:d3:96:ac:
9b:ab:b0:42:f8:72:b1:39:59:dc:c8:5d:5f:a4:d8:38:ea:1b:
2f:24:2d:f4:8c:cb:88:54:8c:42:3f:d7:2d:f4:30:99:a6:1e:
2f:15:c8:cf:6e:c2:ac:db:10:94:f9:26:37:29:76:5e:bb:47:
ff:f4:39:e8:a2:dd:1d:c7:31:6c:fe:fd:03:df:cb:22:e5:85:
6e:8c:9d:a1:84:f5:a0:7b:e1:c8:65:78:37:47:18:13:14:58:
dd:3d:a9:75:21:25:5e:ba:79:4e:41:6c:39:b6:c9:15:d0:35:
e3:cb:5d:03:7e:65:33:62:c2:a4:d0:4c:57:04:46:18:57:01:
e4:13:86:65:c2:04:db:05:0c:8c:f7:94:be:4e:8c:89:95:34:
78:bf:18:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:42:27 2025 by rpki-client