Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
File: BTUhGbS6RwjxGeTR-0dSvIga9JM.mft (raw, json)
Hash identifier: qlUAlQlcRIlkfnMJklWndr2lEpO98qbr7RZFA/db808=
Subject key identifier: 8A:94:1A:C6:90:68:02:41:2D:64:57:54:8B:2D:1D:4B:7C:3C:6B:E8
Authority key identifier: 05:35:21:19:B4:BA:47:08:F1:19:E4:D1:FB:47:52:BC:88:1A:F4:93
Certificate issuer: /CN=05352119b4ba4708f119e4d1fb4752bc881af493
Certificate serial: 0199228D018777ABD042728BD9279D4940E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
Manifest number: E9
Signing time: Sun 07 Sep 2025 05:01:30 +0000
Manifest this update: Sun 07 Sep 2025 05:01:30 +0000
Manifest next update: Mon 08 Sep 2025 05:01:30 +0000
Files and hashes: 1: 9Km7nTSXRAiniMh9JNXNOopqnW8.roa (hash: lIAOi4Gb5/nB1QvKoVu+d2qQeRbpRBNsS+yZokvVW0A=)
2: BTUhGbS6RwjxGeTR-0dSvIga9JM.crl (hash: 6Npj6lAPe7g0Lk/G0f6opijHo8su4aUMjrVRScQtAXA=)
3: P0W3X-yDwmL3jdWEyyFPblZWJ48.roa (hash: 1GBYTZrENIDaoy+I+yb47CXdH21TGrW0TYQJ2NR0pzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:01:87:77:ab:d0:42:72:8b:d9:27:9d:49:40:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05352119b4ba4708f119e4d1fb4752bc881af493
Validity
Not Before: Sep 7 05:01:30 2025 GMT
Not After : Sep 8 05:01:30 2025 GMT
Subject: CN=8a941ac6906802412d6457548b2d1d4b7c3c6be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:eb:e2:0b:47:86:95:b0:51:da:b1:f4:af:
19:e1:09:48:84:01:20:ea:e5:cc:18:5f:3b:02:a6:
fd:d7:c1:89:28:54:b9:e5:b0:94:86:a7:84:2a:f5:
9c:01:0d:8f:0c:02:62:a9:12:d8:3f:9a:ee:be:f4:
c0:7d:f9:f0:bb:b5:2e:40:f5:4f:1f:e6:16:34:33:
4a:2b:6f:2e:c6:3d:40:5b:27:68:ee:41:fe:45:ae:
62:4e:bd:0b:ff:7c:42:02:40:fc:bf:6c:d4:31:39:
50:60:6e:0c:b3:88:19:9e:2e:09:29:d4:2e:99:33:
e6:75:70:45:6f:44:42:95:14:4a:72:03:ec:e4:75:
39:44:f8:fb:d3:5d:5d:63:78:ae:69:ff:55:88:e9:
d7:55:19:2c:86:9b:40:e0:c1:6f:3b:6d:ae:b2:f4:
88:7a:34:68:0b:4e:1f:38:d1:5f:83:f0:31:67:a3:
df:c3:cb:0d:ef:bd:a2:5c:9d:01:f0:52:c1:dd:48:
9d:93:a5:81:85:ff:27:da:25:46:4e:68:fb:bc:8f:
e3:f1:55:c6:57:fc:0e:ba:20:fe:c6:d2:b7:f1:c9:
cf:55:59:05:65:bc:f1:56:6f:c6:13:25:9a:24:cc:
d1:83:06:3f:00:be:f2:fe:b7:ba:4b:52:12:c3:bf:
02:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:94:1A:C6:90:68:02:41:2D:64:57:54:8B:2D:1D:4B:7C:3C:6B:E8
X509v3 Authority Key Identifier:
keyid:05:35:21:19:B4:BA:47:08:F1:19:E4:D1:FB:47:52:BC:88:1A:F4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:de:f5:22:16:e7:3c:e5:f4:e0:f2:3f:cf:da:47:e3:a5:43:
a6:f2:39:ec:c1:b0:7c:5e:a0:f2:d3:36:31:99:9b:45:2d:ba:
bb:ea:28:c7:a8:bf:da:f3:5c:98:fb:83:d6:9a:d2:93:71:04:
13:c5:70:7e:20:d9:34:b6:60:c6:69:d2:ef:3a:7d:d1:50:92:
28:17:61:e9:30:b5:eb:11:d4:29:70:75:d8:1a:25:d4:71:0a:
35:8c:80:e9:45:73:b8:f1:de:2e:33:8a:d7:22:c2:80:91:00:
fb:25:e0:8c:a2:53:b6:62:5c:25:66:29:fb:ed:00:4c:79:b2:
4f:21:36:6c:43:49:4c:b1:87:7d:e7:cf:e4:50:f0:09:43:2f:
4f:7a:04:e1:55:fe:b7:2f:fe:91:8b:8a:41:f8:11:12:05:2b:
6b:59:b7:01:03:68:95:e0:f9:6c:7d:88:3e:92:ec:ae:eb:91:
9b:8a:1f:10:53:74:e7:4b:16:ad:4a:64:a8:c9:32:90:8a:a3:
37:ff:09:dc:0f:91:5d:d9:ce:82:c8:4b:cf:8c:80:d3:58:b4:
42:9b:b1:90:d2:31:3d:79:3f:38:bf:20:fe:ee:ee:19:71:df:
65:ee:c2:49:8e:da:27:cb:c1:5b:28:61:ce:96:99:87:39:c0:
59:da:b9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:02:55 2025 by rpki-client