Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
File: btSqOMC1kdSms-WFaFxtQ4gNrHg.mft (raw, json)
Hash identifier: xNDQZyD0A/6mTabemjP17S2yx6CwacpcPzfxLNQEw7I=
Subject key identifier: FE:6A:CA:07:DD:4F:62:C3:6B:06:EC:F6:85:BB:EE:2A:FD:CE:65:C0
Authority key identifier: 6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
Certificate issuer: /CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Certificate serial: 019A7149B965E2B83056EF9A61D0B57447D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
Manifest number: 03F2
Signing time: Tue 11 Nov 2025 05:00:48 +0000
Manifest this update: Tue 11 Nov 2025 05:00:48 +0000
Manifest next update: Wed 12 Nov 2025 05:00:48 +0000
Files and hashes: 1: ZkPBKtmtCeMiCdYBf2wfRvrO9YI.roa (hash: LuN9s57PZoZuxYZxd6mXt4JH7Ba+GwQQeoNwNSpbFME=)
2: btSqOMC1kdSms-WFaFxtQ4gNrHg.crl (hash: KnTaF4ow/hbbrw8f2qWBj+PHY/8YVfzeeBqgP8m4/b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b9:65:e2:b8:30:56:ef:9a:61:d0:b5:74:47:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Validity
Not Before: Nov 11 05:00:48 2025 GMT
Not After : Nov 12 05:00:48 2025 GMT
Subject: CN=fe6aca07dd4f62c36b06ecf685bbee2afdce65c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:c7:f5:d1:a5:3a:7f:27:b3:85:bb:e9:7e:
cb:a7:6f:12:8a:11:95:38:5c:8f:c7:38:be:63:ea:
fc:d7:5d:b3:e1:08:b8:93:8a:6c:97:0f:93:08:eb:
5d:6d:bf:88:70:8a:21:ac:4f:f0:6f:37:fb:af:40:
bb:f8:a2:21:7d:35:6d:c5:e3:51:cc:2d:c2:43:6e:
d1:82:54:78:57:f3:31:29:fc:1b:5b:fe:bd:06:5b:
15:4b:f2:03:83:01:eb:82:f0:f6:24:b0:fc:18:e2:
f8:2b:0f:de:89:cd:66:a3:c8:98:41:e4:fd:f8:a1:
ba:b9:fb:d1:8f:b6:ff:e4:29:5b:93:38:64:98:a7:
7d:ee:a6:41:63:1e:c4:00:27:0c:aa:f5:a4:e4:06:
e0:22:36:78:ec:58:d0:be:6a:7c:f4:27:11:6f:3a:
c3:d9:55:d8:91:d4:a7:dd:86:d6:4b:76:63:64:ea:
d8:9f:4d:a3:06:41:16:cb:c8:bc:c1:c3:62:b1:89:
5d:41:71:d9:48:ed:1d:ae:2e:18:f1:44:f9:f2:fa:
b8:0f:0c:e6:5d:23:3d:40:9a:72:0a:10:c0:8c:ff:
66:45:17:0f:c7:07:dd:54:ec:a8:ff:d8:7c:0f:23:
b3:36:e4:0f:3a:4b:f4:4e:fe:22:4d:88:10:96:a5:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6A:CA:07:DD:4F:62:C3:6B:06:EC:F6:85:BB:EE:2A:FD:CE:65:C0
X509v3 Authority Key Identifier:
keyid:6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f7:75:63:fe:26:a8:ad:d6:79:27:3c:2c:54:26:a1:d4:40:
95:db:9d:fa:34:53:d8:ab:c6:c6:83:23:6d:07:9a:75:32:9c:
9d:9b:9d:42:ee:7c:53:2e:40:91:be:1b:67:3f:e1:3c:3f:97:
f6:b9:68:32:29:09:f2:b5:2b:f4:e8:59:d7:a0:14:30:02:f9:
90:c3:35:36:6e:13:10:d1:05:c7:b1:69:6f:95:f8:dc:97:30:
fa:4c:d1:83:0a:de:a0:f4:a9:3c:a2:5f:cf:bd:c5:f0:a7:3c:
0b:68:72:97:1c:fe:6e:d5:93:6c:c8:fb:00:e0:2f:83:4b:5b:
1d:6e:ec:d1:d8:c9:d6:87:0e:08:81:b0:26:f2:5e:5d:19:2d:
6b:92:e0:cb:57:2f:28:a8:d0:6e:ed:02:67:b5:4f:52:00:c6:
eb:e6:5a:09:68:f0:18:53:d6:cd:af:66:21:78:f5:0e:5c:8e:
3d:ae:e6:82:e9:dd:58:ac:aa:cd:51:a9:28:75:e7:d8:9f:44:
cf:40:e7:ef:50:2b:c1:41:ad:51:94:14:e7:15:73:9c:b9:8b:
ed:2b:47:ac:ae:19:de:26:61:1e:0e:2d:ba:1b:97:1c:d6:e0:
e3:2b:e5:03:9e:3f:8a:b6:aa:d4:f7:36:11:0d:4d:bd:26:fc:
94:19:95:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:11 2025 by rpki-client