Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
File: BT-EaexiUgmHiW2JJsFyKKe8-z0.mft (raw, json)
Hash identifier: k5S84eMJ7dmhf6824r552bFLaZkiSKTYs8dybT1XPK0=
Subject key identifier: 48:A0:43:EC:9B:5E:39:87:5C:F8:D1:2C:AB:0B:B8:AA:4D:71:FF:66
Authority key identifier: 05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
Certificate issuer: /CN=053f8469ec62520987896d8926c17228a7bcfb3d
Certificate serial: 0199239F9B8129324C00F4C983A323227F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
Manifest number: 111F
Signing time: Sun 07 Sep 2025 10:01:26 +0000
Manifest this update: Sun 07 Sep 2025 10:01:26 +0000
Manifest next update: Mon 08 Sep 2025 10:01:26 +0000
Files and hashes: 1: BT-EaexiUgmHiW2JJsFyKKe8-z0.crl (hash: 20lSPhXvPPSpbGd66TRNnR/gl0EY5roUQ4cpvWXu5Yk=)
2: HpFnJRgfsAOyrTqeLs8eo-g69ro.roa (hash: J1KtXJzzKcy+lZa+G0mBDKjPPemff/M6vpOlwWEgP+4=)
3: lLdmQa0LkR3Co21uBQYZ1e5FhDg.roa (hash: vtgIAMazUzVSJC7ln2bJgxtzKzngIXSl74Jinz+5lNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:9b:81:29:32:4c:00:f4:c9:83:a3:23:22:7f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053f8469ec62520987896d8926c17228a7bcfb3d
Validity
Not Before: Sep 7 10:01:26 2025 GMT
Not After : Sep 8 10:01:26 2025 GMT
Subject: CN=48a043ec9b5e39875cf8d12cab0bb8aa4d71ff66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:91:e6:6b:c1:39:56:84:83:58:95:12:9d:
cc:1d:3a:87:2d:5c:12:22:9d:cc:0d:2d:82:53:3e:
6c:23:76:96:2b:57:91:29:1e:78:47:80:29:d6:83:
16:9c:91:eb:5f:00:a5:93:8e:d5:ec:e8:bc:ad:48:
ea:3b:9b:aa:af:4b:d7:88:50:2d:4a:5c:d7:a0:09:
23:d2:5a:5c:4e:55:1e:f6:98:c0:9e:e2:92:1b:f2:
72:de:82:7a:1a:31:98:14:f3:29:eb:93:69:3f:84:
68:79:5f:3d:c5:34:74:62:7b:20:20:87:33:bf:1c:
e6:7a:76:1c:a2:77:f1:31:05:59:73:d5:2e:c0:5b:
3d:0e:23:72:62:19:16:3c:99:7d:5e:66:8c:d8:7e:
d6:30:15:9a:05:e9:8f:3c:6b:89:ab:a5:36:1e:fd:
3e:c7:c7:73:68:8f:76:20:3f:2a:f7:c7:fd:6e:04:
2e:52:f9:3f:33:fd:3c:e4:10:e2:64:ab:65:0d:91:
6c:3d:90:35:29:6d:e6:50:ff:37:51:3a:8a:7b:cb:
90:16:60:c8:a5:2a:03:ac:68:64:1c:70:64:0f:d0:
0c:b6:cc:b4:51:d1:cc:6c:0f:6f:8d:1a:76:96:ef:
41:99:c3:94:18:0d:3a:42:56:bb:2b:3c:45:71:84:
dd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A0:43:EC:9B:5E:39:87:5C:F8:D1:2C:AB:0B:B8:AA:4D:71:FF:66
X509v3 Authority Key Identifier:
keyid:05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ea:a8:11:d3:5b:5c:ea:11:70:96:87:82:3a:87:af:a4:cf:
0d:57:e2:17:6a:df:e0:4b:26:e3:94:fa:5e:cd:7d:1f:d4:b7:
04:a1:77:47:c7:e2:e4:da:eb:e3:73:b1:ce:5c:b0:1d:66:66:
f9:97:2a:37:05:67:57:b4:d9:6c:2c:6b:b5:1b:9c:49:b8:52:
d4:cc:b5:a8:b3:c0:b0:d0:ca:c0:08:01:8c:ca:ac:86:b6:d7:
99:12:6d:45:67:d5:fd:24:25:80:7f:71:13:0c:d9:96:98:20:
83:74:78:7b:f4:ae:fb:2c:94:8b:dc:23:2e:ec:4d:e9:1c:08:
26:c9:1e:4b:94:a5:c2:5f:2d:ca:0c:a8:4f:bf:b7:61:dc:8c:
10:6f:d8:29:80:8b:5b:0e:a4:77:ec:28:90:29:b4:86:5a:e0:
39:94:1c:b0:37:15:c9:e6:1b:60:17:99:c9:38:2d:8a:20:dd:
6a:52:c4:19:35:29:3e:6c:03:ed:0f:87:75:19:62:d0:29:44:
d2:b7:c1:6e:24:d2:05:30:c9:7c:dc:3b:1e:54:79:70:f0:35:
20:76:48:b0:36:8f:98:bf:d1:5b:15:25:7a:96:12:38:ce:27:
a0:ed:3f:9c:99:0b:2a:05:0d:47:9f:24:c4:87:d4:e0:b9:d8:
e6:3f:c4:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn5uBKTJMAPTJg6MjIn8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1M2Y4NDY5ZWM2MjUyMDk4Nzg5NmQ4OTI2YzE3MjI4YTdi
Y2ZiM2QwHhcNMjUwOTA3MTAwMTI2WhcNMjUwOTA4MTAwMTI2WjAzMTEwLwYDVQQD
Eyg0OGEwNDNlYzliNWUzOTg3NWNmOGQxMmNhYjBiYjhhYTRkNzFmZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLOR5mvBOVaEg1iVEp3MHTqHLVwS
Ip3MDS2CUz5sI3aWK1eRKR54R4Ap1oMWnJHrXwClk47V7Oi8rUjqO5uqr0vXiFAt
SlzXoAkj0lpcTlUe9pjAnuKSG/Jy3oJ6GjGYFPMp65NpP4RoeV89xTR0YnsgIIcz
vxzmenYconfxMQVZc9UuwFs9DiNyYhkWPJl9XmaM2H7WMBWaBemPPGuJq6U2Hv0+
x8dzaI92ID8q98f9bgQuUvk/M/085BDiZKtlDZFsPZA1KW3mUP83UTqKe8uQFmDI
pSoDrGhkHHBkD9AMtsy0UdHMbA9vjRp2lu9BmcOUGA06Qla7KzxFcYTdcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEigQ+ybXjmHXPjRLKsLuKpNcf9mMB8GA1UdIwQY
MBaAFAU/hGnsYlIJh4ltiSbBciinvPs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlQtRWFleGlVZ21IaVcySkpzRnlLS2U4LXowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mYWQ2NzItZTkzYS00ZGQ1LTg4OTMt
ZWZjMTc1MDI5NzQwLzEvQlQtRWFleGlVZ21IaVcySkpzRnlLS2U4LXowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9mYWQ2NzItZTkzYS00ZGQ1LTg4OTMtZWZjMTc1MDI5NzQw
LzEvQlQtRWFleGlVZ21IaVcySkpzRnlLS2U4LXowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+qoEdNb
XOoRcJaHgjqHr6TPDVfiF2rf4Esm45T6Xs19H9S3BKF3R8fi5Nrr43OxzlywHWZm
+ZcqNwVnV7TZbCxrtRucSbhS1My1qLPAsNDKwAgBjMqshrbXmRJtRWfV/SQlgH9x
EwzZlpggg3R4e/Su+yyUi9wjLuxN6RwIJskeS5Slwl8tygyoT7+3YdyMEG/YKYCL
Ww6kd+wokCm0hlrgOZQcsDcVyeYbYBeZyTgtiiDdalLEGTUpPmwD7Q+HdRli0ClE
0rfBbiTSBTDJfNw7HlR5cPA1IHZIsDaPmL/RWxUlepYSOM4noO0/nJkLKgUNR58k
xIfU4LnY5j/EaA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:11 2025 by rpki-client