Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
File: BT-EaexiUgmHiW2JJsFyKKe8-z0.mft (raw, json)
Hash identifier: LtOUOeXgl+ztPRh1dJ53kcmzCm3URCH7/5THgJIubls=
Subject key identifier: 53:DC:6E:1F:B1:FE:10:A1:32:11:4C:53:3A:8E:17:DD:E4:0A:94:78
Authority key identifier: 05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
Certificate issuer: /CN=053f8469ec62520987896d8926c17228a7bcfb3d
Certificate serial: 019A71B8F1CFCFD972E73DE092DA1704B1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
Manifest number: 11CC
Signing time: Tue 11 Nov 2025 07:02:17 +0000
Manifest this update: Tue 11 Nov 2025 07:02:17 +0000
Manifest next update: Wed 12 Nov 2025 07:02:17 +0000
Files and hashes: 1: BT-EaexiUgmHiW2JJsFyKKe8-z0.crl (hash: tbkcdbUlBsYguQg04GbqWnQ2j6vHahWm1Tq2lINGgF4=)
2: HpFnJRgfsAOyrTqeLs8eo-g69ro.roa (hash: J1KtXJzzKcy+lZa+G0mBDKjPPemff/M6vpOlwWEgP+4=)
3: lLdmQa0LkR3Co21uBQYZ1e5FhDg.roa (hash: vtgIAMazUzVSJC7ln2bJgxtzKzngIXSl74Jinz+5lNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f1:cf:cf:d9:72:e7:3d:e0:92:da:17:04:b1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053f8469ec62520987896d8926c17228a7bcfb3d
Validity
Not Before: Nov 11 07:02:17 2025 GMT
Not After : Nov 12 07:02:17 2025 GMT
Subject: CN=53dc6e1fb1fe10a132114c533a8e17dde40a9478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:36:d8:3f:eb:c7:5d:82:2f:1c:d1:64:7f:bf:
f6:1f:25:75:c0:c2:e1:5c:26:f3:c8:de:f4:29:71:
79:04:a3:97:96:bc:32:64:0d:97:b7:a0:97:c6:e6:
92:23:ae:68:e7:76:1a:fc:2b:e2:99:7b:33:46:4b:
fe:99:3c:3c:3f:b7:ce:04:62:3b:9e:8d:14:7a:d8:
30:41:79:2d:2d:f6:50:73:38:72:5d:8e:f0:d6:4d:
6b:ba:11:bb:21:b4:c5:52:02:b0:41:4f:f9:96:05:
78:9d:22:5c:0a:0e:b1:88:8b:b8:86:3e:24:c4:2d:
5a:54:ff:cf:cb:fa:55:5e:17:89:08:ee:ab:8a:61:
47:12:bf:13:be:2d:c5:92:2a:92:4a:30:fe:de:fe:
72:6e:7e:8e:7d:f8:a1:24:46:c7:3f:5e:34:39:19:
49:da:b2:5f:85:69:fb:24:5f:4a:2a:bf:91:fc:6a:
fa:d8:55:d1:f9:e8:0a:72:48:d0:bf:85:91:90:a8:
15:43:5d:6e:69:b2:09:99:62:93:fe:74:58:8c:f3:
7d:71:7b:73:d1:ee:10:43:0d:90:03:0e:6f:fd:3b:
66:21:bd:df:8b:a4:25:18:e4:b4:84:f2:a9:0e:4b:
a8:4b:89:f7:70:5c:e0:85:83:04:24:41:20:7e:14:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DC:6E:1F:B1:FE:10:A1:32:11:4C:53:3A:8E:17:DD:E4:0A:94:78
X509v3 Authority Key Identifier:
keyid:05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e4:47:14:d2:1c:f3:de:85:01:97:00:8d:cf:3e:d0:95:af:
39:78:03:83:6a:80:39:58:1e:a6:a5:89:5e:30:7a:a1:18:1d:
ca:6e:62:4b:c8:ca:8b:12:23:b2:66:44:55:29:62:6d:82:66:
43:55:18:73:5d:5b:48:06:c5:dd:9b:97:b5:f1:5f:32:2b:42:
f3:2a:1c:0a:b9:d9:a3:24:9e:f9:79:9d:51:6f:3a:e6:7f:9f:
ba:81:02:a7:e6:ff:60:05:ad:a0:63:ef:04:58:3f:d5:a1:47:
66:b6:6d:f2:f1:8e:27:f8:a7:72:ee:5a:83:e0:e3:a9:d0:b8:
48:0e:92:4e:bb:9a:a8:a5:a8:6b:65:4c:93:d1:61:21:80:33:
5f:25:0b:9b:eb:9e:89:fe:fe:9b:58:a9:14:12:7b:bd:4f:78:
03:84:d0:f0:b4:06:54:e2:13:7a:0d:16:a7:19:89:da:81:65:
be:42:88:5f:91:89:0c:4b:9d:f4:cc:af:8b:16:67:4d:d9:f3:
0a:96:0f:35:10:cc:21:4a:e3:2f:8b:b2:75:d4:28:47:39:0c:
7e:e7:94:88:76:07:ae:69:ec:b1:bb:c8:cf:bf:b1:09:53:aa:
ca:96:2b:90:73:48:e5:30:40:98:82:b1:d0:a6:f0:63:4a:29:
c6:a2:15:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:00 2025 by rpki-client