
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft
File: sBTC9eALxnh9MoMbieoSTfYonkU.mft (raw, json)
Hash identifier: FrB63k/SUHWZphW9fs++906pqHjKMd6FU/I7yqTdjZ4=
Subject key identifier: 52:D1:2D:64:4F:04:FA:E9:56:DD:67:33:A9:F2:8F:89:B1:7C:46:15
Authority key identifier: B0:14:C2:F5:E0:0B:C6:78:7D:32:83:1B:89:EA:12:4D:F6:28:9E:45
Certificate issuer: /CN=b014c2f5e00bc6787d32831b89ea124df6289e45
Certificate serial: 019A71EEB955DD791498BB3C586CF37B2F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBTC9eALxnh9MoMbieoSTfYonkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft
Manifest number: 73
Signing time: Tue 11 Nov 2025 08:01:01 +0000
Manifest this update: Tue 11 Nov 2025 08:01:01 +0000
Manifest next update: Wed 12 Nov 2025 08:01:01 +0000
Files and hashes: 1: sBTC9eALxnh9MoMbieoSTfYonkU.crl (hash: zchngA/SqIox9MKkHK1M11/KB/w7mhNJITHwdYBGkeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBTC9eALxnh9MoMbieoSTfYonkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b9:55:dd:79:14:98:bb:3c:58:6c:f3:7b:2f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b014c2f5e00bc6787d32831b89ea124df6289e45
Validity
Not Before: Nov 11 08:01:01 2025 GMT
Not After : Nov 12 08:01:01 2025 GMT
Subject: CN=52d12d644f04fae956dd6733a9f28f89b17c4615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:ba:61:ce:e7:fc:9b:11:bd:00:f9:1f:6f:
94:ae:bb:26:03:f9:6c:ae:65:d7:75:48:08:24:61:
e4:74:3b:45:0e:53:83:b9:26:78:ca:2a:3a:87:85:
ff:33:37:c7:8b:c5:42:1f:f9:3c:dd:6e:c7:6c:62:
7b:9a:84:9b:37:5b:2d:9e:dc:86:95:02:f5:09:c8:
ff:47:f6:3a:69:b6:36:2b:5e:cb:6b:d5:18:69:f2:
54:11:e1:b3:58:3d:04:5d:2d:c6:df:65:f3:a8:11:
d8:3a:d3:5e:e2:55:6c:4b:9e:0b:33:d8:db:b4:ce:
3a:0f:8f:32:59:ba:71:e8:3a:ec:01:3d:12:67:00:
da:21:2a:ca:79:27:10:27:97:1a:a7:5d:80:82:f3:
c2:25:3a:63:88:1d:22:d6:77:0d:a0:29:41:0e:5c:
db:84:b6:4f:35:98:8f:85:a0:85:54:d4:e2:f1:b9:
65:13:85:d4:f7:5b:90:40:2f:0f:48:08:ed:3f:bf:
34:ab:33:0d:1c:9d:21:17:a8:44:26:ce:6b:c6:ab:
cc:24:ba:76:f0:ba:d9:78:d3:2a:a7:6c:44:58:7a:
de:99:93:5f:e0:a2:c4:44:3b:40:1b:a4:97:58:73:
36:2e:28:da:09:a6:1a:a0:44:83:bd:a7:f0:2a:a1:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D1:2D:64:4F:04:FA:E9:56:DD:67:33:A9:F2:8F:89:B1:7C:46:15
X509v3 Authority Key Identifier:
keyid:B0:14:C2:F5:E0:0B:C6:78:7D:32:83:1B:89:EA:12:4D:F6:28:9E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBTC9eALxnh9MoMbieoSTfYonkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1c:37:b6:72:1a:aa:8b:9c:0f:5a:2e:31:6a:80:7a:b8:e5:
85:e5:35:f1:8f:55:c1:0a:19:99:22:24:d7:e1:10:92:df:eb:
5e:be:41:62:e0:10:f3:ee:45:89:cc:76:e8:e9:32:49:59:ad:
1e:c4:0f:2c:7b:59:5c:9a:a8:15:48:ea:e8:f1:93:cb:49:35:
56:93:22:bb:5a:82:fe:ae:3f:82:1d:72:60:34:cd:7a:6e:04:
ed:bf:59:89:84:8a:8d:68:26:7d:ef:53:87:8f:a1:19:57:b1:
f5:46:a6:47:e3:6f:c6:2f:23:53:23:86:49:a4:90:9e:a1:90:
f0:1a:ba:7f:00:ad:fc:58:a5:0f:8b:17:b8:c2:6d:55:b0:a9:
49:40:57:88:19:7e:e6:8b:e8:c7:e6:94:1b:d5:52:0a:86:37:
b7:e9:62:4d:78:ad:ce:2d:e1:83:e8:42:1b:57:f4:67:19:7e:
3c:f8:48:bf:4a:ac:2f:fe:d2:ca:45:01:00:44:79:60:39:88:
99:67:2e:81:e7:66:c9:15:87:d1:2c:b4:fa:27:a3:11:72:62:
63:3e:50:68:83:2c:6d:bc:77:43:ce:d6:1a:a3:42:6f:6c:bf:
41:6e:52:28:a3:cd:ed:0b:d1:06:1a:e2:3f:c9:8c:58:e5:08:
d4:ec:22:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:33 2025 by rpki-client