
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
File: btSqOMC1kdSms-WFaFxtQ4gNrHg.mft (raw, json)
Hash identifier: S9fmL3J6bize3FJgUVjGjBP/boZGKXlq5kfe7V9SfL0=
Subject key identifier: EE:1F:6F:31:42:04:3B:3B:E0:6A:9F:70:B5:90:3F:90:A1:0C:AD:57
Authority key identifier: 6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
Certificate issuer: /CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Certificate serial: 0198548D6429FB60DDF7CA58795663E28047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
Manifest number: 02DA
Signing time: Tue 29 Jul 2025 05:00:08 +0000
Manifest this update: Tue 29 Jul 2025 05:00:08 +0000
Manifest next update: Wed 30 Jul 2025 05:00:08 +0000
Files and hashes: 1: ZkPBKtmtCeMiCdYBf2wfRvrO9YI.roa (hash: LuN9s57PZoZuxYZxd6mXt4JH7Ba+GwQQeoNwNSpbFME=)
2: btSqOMC1kdSms-WFaFxtQ4gNrHg.crl (hash: BWxLAcc90p5E/NupzkbCAbvLfDQNRm7vkzcOe9m+HP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:64:29:fb:60:dd:f7:ca:58:79:56:63:e2:80:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Validity
Not Before: Jul 29 05:00:08 2025 GMT
Not After : Jul 30 05:00:08 2025 GMT
Subject: CN=ee1f6f3142043b3be06a9f70b5903f90a10cad57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:44:b2:fa:45:9d:3f:cb:f4:79:84:6e:4c:
d1:86:aa:f6:84:f0:cb:d1:be:9f:0e:2d:21:f7:ad:
d3:89:1e:a4:3f:f7:1d:de:c7:20:94:9f:c8:19:31:
d4:8d:c2:58:0a:61:2f:a9:1c:41:cd:e7:78:37:fb:
0c:76:2b:49:38:99:e2:4f:ad:e9:08:a6:d2:66:0f:
62:3e:db:62:63:80:5f:a2:a1:61:21:b1:f0:50:70:
c7:50:1a:0a:95:98:b0:d4:3d:6b:a7:71:0b:8e:8f:
75:b8:6d:7f:23:b5:d1:41:52:5b:ef:4b:73:32:02:
61:f9:48:3c:62:3a:bf:53:62:bb:68:72:1f:07:22:
df:05:d1:7d:12:69:eb:ca:6e:27:8e:52:cd:88:27:
4f:e0:d5:7c:df:c4:28:d6:60:6c:ce:17:42:7e:4c:
da:08:85:28:d9:26:d0:2e:bb:47:00:aa:95:83:8c:
57:ed:fe:35:9e:4c:fd:cb:57:33:cd:e3:46:92:4b:
a2:68:6b:97:17:94:13:35:ea:f5:68:ee:a6:ea:c9:
f0:e3:4a:b8:34:d3:66:13:ef:a3:80:e8:e1:29:18:
95:f9:18:d4:d2:54:de:f0:70:06:1a:f2:d8:d5:dd:
76:35:d8:6d:df:e3:ba:50:0e:18:d8:05:8a:90:8c:
37:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1F:6F:31:42:04:3B:3B:E0:6A:9F:70:B5:90:3F:90:A1:0C:AD:57
X509v3 Authority Key Identifier:
keyid:6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:eb:eb:61:c7:58:b2:75:b3:b7:aa:04:d4:f6:ee:29:9a:89:
d9:88:bf:4b:c2:a0:02:f7:d5:9c:f4:52:c4:dd:21:67:6d:a6:
ed:6e:21:27:82:33:b4:9c:e4:ff:d7:ea:f5:68:c7:f5:96:87:
73:45:38:d9:a1:c0:5e:ba:f8:5c:3f:cd:16:65:8a:4b:f7:e4:
f8:e0:4d:48:a7:26:ab:32:50:44:be:97:d8:9f:90:ef:99:a2:
f0:65:cf:f5:42:71:9f:fd:bb:4c:47:85:db:ca:86:14:9b:8f:
10:70:ed:5c:12:92:a3:22:03:aa:c6:1c:f5:ff:59:50:8b:bc:
88:18:e9:a0:4d:8a:e3:37:52:2c:c8:e0:1f:92:4b:be:a6:bb:
66:47:df:0e:41:95:e8:57:6e:06:6a:f4:cc:91:34:92:e2:6d:
45:02:c0:52:e0:33:8d:f0:b0:17:cc:2f:f6:1f:a2:0a:30:c7:
00:38:8a:44:eb:d5:a8:ba:e6:f3:76:e5:8a:62:aa:9d:f6:37:
d2:5a:71:52:77:8e:f4:eb:6c:5f:f5:a5:d4:27:6c:d4:89:eb:
40:6d:b3:e0:2c:41:7a:e7:78:2f:49:b0:1f:58:3c:59:61:3b:
d0:cd:1d:25:e7:1e:a0:0e:7e:eb:7a:78:5d:20:8d:a7:ed:0a:
b7:51:f0:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUjWQp+2Dd98pYeVZj4oBHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZDRhYTM4YzBiNTkxZDRhNmIzZTU4NTY4NWM2ZDQzODgw
ZGFjNzgwHhcNMjUwNzI5MDUwMDA4WhcNMjUwNzMwMDUwMDA4WjAzMTEwLwYDVQQD
EyhlZTFmNmYzMTQyMDQzYjNiZTA2YTlmNzBiNTkwM2Y5MGExMGNhZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNhEsvpFnT/L9HmEbkzRhqr2hPDL
0b6fDi0h963TiR6kP/cd3scglJ/IGTHUjcJYCmEvqRxBzed4N/sMditJOJniT63p
CKbSZg9iPttiY4BfoqFhIbHwUHDHUBoKlZiw1D1rp3ELjo91uG1/I7XRQVJb70tz
MgJh+Ug8Yjq/U2K7aHIfByLfBdF9Emnrym4njlLNiCdP4NV838Qo1mBszhdCfkza
CIUo2SbQLrtHAKqVg4xX7f41nkz9y1czzeNGkkuiaGuXF5QTNer1aO6m6snw40q4
NNNmE++jgOjhKRiV+RjU0lTe8HAGGvLY1d12Ndht3+O6UA4Y2AWKkIw3qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4fbzFCBDs74GqfcLWQP5ChDK1XMB8GA1UdIwQY
MBaAFG7UqjjAtZHUprPlhWhcbUOIDax4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85YTg3ODYtMDlmNC00YjYwLTg2N2Et
YzhiMmRmMjNkNTE5LzEvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85YTg3ODYtMDlmNC00YjYwLTg2N2EtYzhiMmRmMjNkNTE5
LzEvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuvrYcdY
snWzt6oE1PbuKZqJ2Yi/S8KgAvfVnPRSxN0hZ22m7W4hJ4IztJzk/9fq9WjH9ZaH
c0U42aHAXrr4XD/NFmWKS/fk+OBNSKcmqzJQRL6X2J+Q75mi8GXP9UJxn/27TEeF
28qGFJuPEHDtXBKSoyIDqsYc9f9ZUIu8iBjpoE2K4zdSLMjgH5JLvqa7ZkffDkGV
6FduBmr0zJE0kuJtRQLAUuAzjfCwF8wv9h+iCjDHADiKROvVqLrm83blimKqnfY3
0lpxUneO9OtsX/Wl1Cds1InrQG2z4CxBeud4L0mwH1g8WWE70M0dJeceoA5+63p4
XSCNp+0Kt1Hw9w==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:30:35 2025 by rpki-client