Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
File: BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json)
Hash identifier: oQVK3pn1csDR+EQJxQFJBOglEFzOJDyESfzV05j7f+s=
Subject key identifier: 59:4A:B3:A7:41:CC:D2:B1:ED:56:89:8A:C6:9E:C2:94:94:03:CB:CE
Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
Certificate issuer: /CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Certificate serial: 0198959261CA97835AF812C3BA82A0C5E9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
Manifest number: 1461
Signing time: Sun 10 Aug 2025 20:00:55 +0000
Manifest this update: Sun 10 Aug 2025 20:00:55 +0000
Manifest next update: Mon 11 Aug 2025 20:00:55 +0000
Files and hashes: 1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: CA1ibvJJ8pnrAP9loeAIzh77NIF4CBcUTCzIvyRdvlA=)
2: dXeaBJl10vB-B0zSVkLwNY_iIs4.roa (hash: F86Ia5myX5pjFnoQkxccwMDKgx5XnQXJd15fpxB0f8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:61:ca:97:83:5a:f8:12:c3:ba:82:a0:c5:e9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Validity
Not Before: Aug 10 20:00:55 2025 GMT
Not After : Aug 11 20:00:55 2025 GMT
Subject: CN=594ab3a741ccd2b1ed56898ac69ec2949403cbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:21:99:90:6a:ae:d5:db:39:99:53:b8:92:
ee:5c:df:a5:a2:e2:f6:68:a4:0f:d5:19:e8:8e:7e:
40:09:1f:ce:e4:69:a1:71:cf:dd:c2:e6:84:9a:78:
c7:c5:a9:0f:fc:a4:ac:ee:c0:28:ce:6a:b2:0f:78:
93:c3:76:49:3b:6b:c8:e5:c2:91:2d:7b:e1:37:c8:
7c:0d:ef:b6:6c:a9:73:07:fc:3a:07:50:c5:fc:b4:
5e:9c:b3:d1:48:a5:a4:15:8f:2e:ef:82:1f:56:90:
99:59:6f:63:78:d3:81:24:ce:20:48:4a:5f:c3:c2:
81:21:a0:8a:86:63:8e:8a:28:dd:27:a6:3b:c5:da:
0f:5b:fc:cf:1b:99:d1:20:dc:01:c4:2b:38:1e:a1:
01:3a:14:d0:cd:c8:f7:44:a0:18:73:d6:2c:97:2f:
05:f8:98:2f:93:3a:1c:f3:dc:bb:6c:69:55:2c:31:
b9:9f:19:dc:c0:a0:cc:cd:2a:96:25:b5:b0:5b:06:
e5:40:73:17:fd:bb:d4:a8:c9:3d:e8:40:17:23:96:
55:76:3e:92:57:84:ea:ec:97:4e:25:f9:b2:d8:c8:
2d:0e:ef:8c:bd:fc:d4:08:c0:d6:f3:2e:19:5d:91:
fb:98:c1:ee:7c:72:0c:79:0e:66:97:7e:6a:6a:1a:
b4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4A:B3:A7:41:CC:D2:B1:ED:56:89:8A:C6:9E:C2:94:94:03:CB:CE
X509v3 Authority Key Identifier:
keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:82:42:81:81:f2:91:20:bd:8a:71:1d:1b:8c:63:fa:14:75:
69:7e:a3:27:51:b9:71:e2:7c:69:df:16:4f:73:d7:40:22:4b:
98:44:e5:ba:94:a3:84:49:ee:e2:31:72:ff:ca:41:b2:45:46:
1f:a2:24:f6:32:a6:e8:0a:8f:86:a4:9c:69:7a:75:12:f1:f3:
19:54:3e:34:6f:e2:4b:9d:7b:37:76:69:47:f9:a2:62:9c:7f:
38:38:b3:ea:ea:1a:13:b4:ae:8b:6e:23:8a:b2:3c:21:16:e5:
19:eb:be:6f:a7:8a:9f:76:2d:42:1d:d1:47:11:93:d6:e4:d9:
84:68:98:1e:01:84:ec:1f:55:75:c5:3c:90:75:a1:f4:16:fe:
d2:c9:46:51:73:8d:a9:e4:c1:63:35:62:d1:72:73:12:bc:ab:
6f:b0:ca:6b:3d:97:a5:0f:d9:da:fa:53:48:dc:9b:93:b7:b2:
84:76:34:0f:72:e6:44:e8:5e:15:3a:63:e2:30:dd:4d:5c:12:
67:55:91:9a:f7:6d:26:32:e7:17:4f:35:c8:db:9e:bd:11:71:
07:46:24:33:d0:d8:13:c1:f5:6b:35:78:36:c2:20:c9:16:db:
30:da:07:c7:e9:b8:5b:ed:1c:8b:2f:2b:6d:e8:b4:18:49:f1:
3e:a2:a4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:52 2025 by rpki-client