Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
File: BTPwgeV70J2rsG4334Vp61JCD3Y.mft (raw, json)
Hash identifier: NTGlkAIvCwOtgiM5Hi7Iuylje3lwDBiEqQEP5dQCous=
Subject key identifier: 25:1F:DE:46:72:9A:93:2B:4E:4E:97:46:07:C8:C2:22:CB:F5:94:0A
Authority key identifier: 05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76
Certificate issuer: /CN=0533f081e57bd09dabb06e37df8569eb52420f76
Certificate serial: 019A71B7BDC6D9C7C3BBC964D51F19425CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
Manifest number: 15CF
Signing time: Tue 11 Nov 2025 07:00:58 +0000
Manifest this update: Tue 11 Nov 2025 07:00:58 +0000
Manifest next update: Wed 12 Nov 2025 07:00:58 +0000
Files and hashes: 1: BTPwgeV70J2rsG4334Vp61JCD3Y.crl (hash: 475Y0N5lv2nQpXT6VBUk4qUID4w5ITko5lca7IuoBbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:bd:c6:d9:c7:c3:bb:c9:64:d5:1f:19:42:5c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0533f081e57bd09dabb06e37df8569eb52420f76
Validity
Not Before: Nov 11 07:00:58 2025 GMT
Not After : Nov 12 07:00:58 2025 GMT
Subject: CN=251fde46729a932b4e4e974607c8c222cbf5940a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:07:d2:2f:1e:8b:e2:47:ca:64:ff:c1:b8:
d5:23:85:6e:3f:b1:7a:09:ad:c3:1b:6b:15:23:29:
34:59:89:52:9a:83:73:6a:3f:76:d2:6d:38:15:ca:
13:75:32:3d:95:36:7a:70:a0:5d:10:c4:9b:2d:ea:
30:0c:7c:b2:73:81:65:c3:52:bc:32:49:09:71:ba:
d1:0c:45:2c:e2:e9:7d:10:ec:f3:fe:03:1f:50:6c:
63:04:07:f8:7e:ff:28:5a:b6:ca:7a:9f:d4:bb:35:
c4:53:cb:19:fb:64:35:54:ca:9c:f3:c0:d3:79:43:
d7:fc:1c:e6:02:f6:8d:45:b2:ca:d9:90:4b:35:eb:
c5:a7:38:91:e7:ba:c8:ab:68:84:74:fb:53:68:c0:
cd:8e:86:02:a2:2c:a3:59:78:18:a4:a4:2e:12:74:
6b:40:82:79:72:b4:4c:60:a3:4e:3b:46:de:da:bb:
f1:e9:3a:f0:20:9e:76:3a:6f:e9:7c:83:aa:97:93:
09:25:06:0e:d8:f1:77:ce:e8:3a:09:3a:b5:ac:22:
a6:58:fa:64:53:ce:bc:bc:48:6f:88:b4:54:ff:08:
2d:7a:62:8f:bf:23:9a:95:62:73:72:3a:9f:30:e0:
e9:0e:53:25:ce:5a:fa:39:7c:0b:c2:60:1e:88:85:
61:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1F:DE:46:72:9A:93:2B:4E:4E:97:46:07:C8:C2:22:CB:F5:94:0A
X509v3 Authority Key Identifier:
keyid:05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:94:db:6a:53:ca:f8:e8:7e:d7:bb:dc:ed:24:2a:01:71:28:
0f:0b:01:e2:1c:f8:a6:f8:a3:60:d5:a8:a7:cc:d4:dc:3a:7d:
18:6c:67:4a:aa:f6:74:c5:d2:f5:72:1a:ec:24:1a:71:d5:58:
88:8a:00:a6:64:6a:e8:1b:a9:8c:81:ba:7d:ce:2c:fa:7a:15:
a1:b3:d8:54:96:1f:20:cd:c5:15:25:cf:8d:06:b6:79:3d:dd:
c0:3c:88:0b:d2:58:37:a0:01:2f:6e:64:f4:41:85:f8:87:b1:
7d:0c:b8:92:3a:5f:25:78:34:69:b7:57:a5:51:fd:e9:b0:5c:
70:72:29:a2:85:62:fd:c1:da:7f:66:9a:fc:a5:e8:9e:63:c4:
77:fe:6a:11:ce:64:79:4b:56:0c:d4:9b:0d:4f:9f:7a:4c:ca:
f1:75:a3:84:e7:0d:95:fb:77:44:c3:05:90:23:e3:d5:21:e2:
b1:4a:a2:cc:c3:82:b1:2f:2a:cd:ce:e1:5b:36:8d:e7:d2:87:
45:e6:c0:eb:2a:f9:58:8c:42:0a:d9:32:be:6d:3d:5b:7d:24:
10:05:4e:7f:d2:a2:9e:97:e7:81:30:e0:60:5b:d1:8e:f6:20:
ee:60:15:dd:59:db:be:79:d1:79:4e:3c:2d:5a:3e:b5:95:d1:
24:34:3e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:51 2025 by rpki-client