Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
File: BTUhGbS6RwjxGeTR-0dSvIga9JM.mft (raw, json)
Hash identifier: 2OxLqDVgTQMqukDJwVsJt2XTQSL9PFbOpMYjYIktkd4=
Subject key identifier: BE:AF:71:3D:03:3F:E1:D8:47:40:06:51:6F:5B:3F:22:2D:88:46:47
Authority key identifier: 05:35:21:19:B4:BA:47:08:F1:19:E4:D1:FB:47:52:BC:88:1A:F4:93
Certificate issuer: /CN=05352119b4ba4708f119e4d1fb4752bc881af493
Certificate serial: 019A725CA0F01C620AB912BEEFD63D979D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
Manifest number: 0197
Signing time: Tue 11 Nov 2025 10:01:04 +0000
Manifest this update: Tue 11 Nov 2025 10:01:04 +0000
Manifest next update: Wed 12 Nov 2025 10:01:04 +0000
Files and hashes: 1: 9Km7nTSXRAiniMh9JNXNOopqnW8.roa (hash: lIAOi4Gb5/nB1QvKoVu+d2qQeRbpRBNsS+yZokvVW0A=)
2: BTUhGbS6RwjxGeTR-0dSvIga9JM.crl (hash: 86wM+yRDPiCaoy4MBlGpBdMVFfwUR6IeuxsSuLjyJL8=)
3: P0W3X-yDwmL3jdWEyyFPblZWJ48.roa (hash: 1GBYTZrENIDaoy+I+yb47CXdH21TGrW0TYQJ2NR0pzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a0:f0:1c:62:0a:b9:12:be:ef:d6:3d:97:9d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05352119b4ba4708f119e4d1fb4752bc881af493
Validity
Not Before: Nov 11 10:01:04 2025 GMT
Not After : Nov 12 10:01:04 2025 GMT
Subject: CN=beaf713d033fe1d8474006516f5b3f222d884647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6a:51:22:c4:60:dd:01:3a:f9:7d:f4:71:9c:
c5:a9:be:f1:44:4b:07:85:ef:d2:0b:9c:b9:8b:e3:
7b:99:df:fa:ac:50:ce:89:62:f3:0d:67:c5:fa:95:
1e:79:7f:f0:23:84:48:b2:f0:eb:b8:66:45:29:d6:
aa:0f:c4:21:7c:b1:c4:46:09:c7:dd:76:2e:7e:75:
e9:dc:76:86:1a:41:3f:34:31:83:4b:75:b0:56:7a:
50:16:2d:c8:26:61:06:59:3f:d8:b6:e8:16:cc:a7:
96:ae:f9:d0:06:72:a0:fd:4e:45:0a:79:51:d2:dc:
12:fa:4b:4f:8f:3e:18:ec:97:30:28:5d:5b:1b:22:
58:61:d2:dc:e1:62:30:df:dd:eb:06:a7:38:fd:cb:
60:9d:ac:ed:fa:b6:c1:3f:eb:78:4f:3f:b8:fb:98:
ec:fd:db:94:25:b9:c9:7c:c6:ff:84:db:90:1a:aa:
85:a9:b7:23:2c:ee:a4:83:1f:77:14:06:09:25:2a:
aa:57:9b:88:d0:67:67:30:05:6c:e4:8f:49:05:8a:
02:30:f9:8e:21:63:67:e6:4b:5d:b2:c6:0f:fd:69:
ec:fa:c6:af:5b:f2:12:18:b9:6a:13:ef:73:49:7e:
72:4e:db:9c:10:b6:41:2a:5d:99:5c:66:e0:0f:41:
f5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AF:71:3D:03:3F:E1:D8:47:40:06:51:6F:5B:3F:22:2D:88:46:47
X509v3 Authority Key Identifier:
keyid:05:35:21:19:B4:BA:47:08:F1:19:E4:D1:FB:47:52:BC:88:1A:F4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:62:d7:16:00:c4:1d:f4:e7:28:c5:79:aa:f6:48:44:d7:58:
f2:13:67:da:12:16:6b:37:db:e7:58:93:23:89:46:87:38:77:
97:fe:d6:2e:b0:7f:37:7f:19:0e:2a:63:8c:83:97:1d:3e:29:
63:a5:56:67:5f:52:fc:60:25:df:30:50:f5:59:af:8a:2f:98:
7c:90:0c:37:6e:24:39:9b:4a:94:b4:c5:3d:1c:f6:3f:a5:3f:
18:8f:c7:68:f5:a6:f5:24:49:8a:20:3e:b4:84:f9:97:1b:1b:
e5:bd:53:35:e1:e4:2c:92:3a:69:4e:e2:78:c9:ac:c0:8d:9b:
6a:8c:24:2b:7a:54:b6:a2:97:d0:43:ec:b4:50:41:6e:a9:34:
00:f5:ec:46:da:44:8b:75:d1:c9:15:6d:32:90:50:42:4d:42:
39:9d:12:e3:ad:c2:a1:33:97:45:b1:61:a4:35:01:da:28:cd:
8e:10:eb:67:b7:77:dc:4a:1e:cd:7a:02:c5:c9:c8:e4:e0:af:
dc:e7:1f:09:e3:79:39:44:67:bf:6f:cf:6d:ad:20:f5:3d:95:
12:09:81:d7:fb:47:bb:5d:2d:b7:b7:4d:64:c6:28:6f:1f:02:
65:0c:c9:fb:a2:28:da:7b:86:8d:fd:e8:69:53:2c:a4:a3:19:
84:1b:0b:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXKDwHGIKuRK+79Y9l50YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzUyMTE5YjRiYTQ3MDhmMTE5ZTRkMWZiNDc1MmJjODgx
YWY0OTMwHhcNMjUxMTExMTAwMTA0WhcNMjUxMTEyMTAwMTA0WjAzMTEwLwYDVQQD
EyhiZWFmNzEzZDAzM2ZlMWQ4NDc0MDA2NTE2ZjViM2YyMjJkODg0NjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52pRIsRg3QE6+X30cZzFqb7xREsH
he/SC5y5i+N7md/6rFDOiWLzDWfF+pUeeX/wI4RIsvDruGZFKdaqD8QhfLHERgnH
3XYufnXp3HaGGkE/NDGDS3WwVnpQFi3IJmEGWT/YtugWzKeWrvnQBnKg/U5FCnlR
0twS+ktPjz4Y7JcwKF1bGyJYYdLc4WIw393rBqc4/ctgnazt+rbBP+t4Tz+4+5js
/duUJbnJfMb/hNuQGqqFqbcjLO6kgx93FAYJJSqqV5uI0GdnMAVs5I9JBYoCMPmO
IWNn5ktdssYP/Wns+savW/ISGLlqE+9zSX5yTtucELZBKl2ZXGbgD0H1pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6vcT0DP+HYR0AGUW9bPyItiEZHMB8GA1UdIwQY
MBaAFAU1IRm0ukcI8Rnk0ftHUryIGvSTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRVaEdiUzZSd2p4R2VUUi0wZFN2SWdhOUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hYTMwYzgtMTU3ZS00ODQ0LTg2NTAt
NzY4MDNkODJjZThlLzEvQlRVaEdiUzZSd2p4R2VUUi0wZFN2SWdhOUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hYTMwYzgtMTU3ZS00ODQ0LTg2NTAtNzY4MDNkODJjZThl
LzEvQlRVaEdiUzZSd2p4R2VUUi0wZFN2SWdhOUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmLXFgDE
HfTnKMV5qvZIRNdY8hNn2hIWazfb51iTI4lGhzh3l/7WLrB/N38ZDipjjIOXHT4p
Y6VWZ19S/GAl3zBQ9Vmvii+YfJAMN24kOZtKlLTFPRz2P6U/GI/HaPWm9SRJiiA+
tIT5lxsb5b1TNeHkLJI6aU7ieMmswI2baowkK3pUtqKX0EPstFBBbqk0APXsRtpE
i3XRyRVtMpBQQk1COZ0S463CoTOXRbFhpDUB2ijNjhDrZ7d33EoezXoCxcnI5OCv
3OcfCeN5OURnv2/Pba0g9T2VEgmB1/tHu10tt7dNZMYobx8CZQzJ+6Io2nuGjf3o
aVMspKMZhBsLxA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:34 2025 by rpki-client