Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
File: BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft (raw, json)
Hash identifier: jx1MryY/RHv9/5Kqukf7dCcuTlcLoU2m53Qs7UjUArs=
Subject key identifier: 1D:3C:5A:3E:DF:7B:15:52:2C:46:ED:93:EB:5D:85:F9:ED:4B:16:0C
Authority key identifier: 05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
Certificate issuer: /CN=052b864969e9680764899015e163ece77bb4cb76
Certificate serial: 019897EF20E43287EC098CF466439A30E383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
Manifest number: 0A15
Signing time: Mon 11 Aug 2025 07:01:27 +0000
Manifest this update: Mon 11 Aug 2025 07:01:27 +0000
Manifest next update: Tue 12 Aug 2025 07:01:27 +0000
Files and hashes: 1: 5fuOdmrlGVquJxF0B-B8z5sBlNI.roa (hash: DT/HXrl83qCIDVdBkYEE4TLDh03lHlOlq+VLneGm87c=)
2: BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl (hash: L6JzqhsMrGS+30FRobs/claZlx5QOHSLNOO3mAPlvLI=)
3: Z4nN-Ws_wnObQX43h7KB04MEX0Y.roa (hash: 7C7D7tdUB5rOJYlfI1UfJ/CA32g7kMZ0Kt4eDwWV77Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ef:20:e4:32:87:ec:09:8c:f4:66:43:9a:30:e3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b864969e9680764899015e163ece77bb4cb76
Validity
Not Before: Aug 11 07:01:27 2025 GMT
Not After : Aug 12 07:01:27 2025 GMT
Subject: CN=1d3c5a3edf7b15522c46ed93eb5d85f9ed4b160c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:26:19:d5:4e:56:8a:db:f7:bb:b3:bd:33:
4c:99:90:9b:84:4a:ed:48:58:7a:96:f7:d8:88:b2:
f3:ab:62:5f:14:84:4f:e6:29:0d:cb:ae:2f:b9:70:
af:dc:1d:b0:5a:de:ed:7b:3b:3b:e6:b8:36:56:6c:
9c:b9:86:54:d1:62:f8:34:68:bb:7e:19:47:7c:c9:
0d:c9:d3:93:e8:d1:8c:29:3a:80:64:40:2a:a9:8f:
ff:62:2e:e7:46:c0:4f:ea:71:00:78:97:78:32:eb:
57:ce:a0:4e:aa:31:c0:49:05:45:1d:90:71:35:0a:
49:02:51:a7:dc:b2:de:6e:87:ba:e2:eb:22:2c:3c:
07:37:ce:33:ab:8f:3a:20:92:56:95:68:11:22:58:
fd:32:e9:45:5c:d2:82:b0:7b:f4:65:34:82:7b:31:
9d:0c:45:df:37:42:46:95:c8:a9:ec:56:35:45:30:
1c:c6:79:d3:36:c2:14:a1:07:45:7e:f7:07:ac:96:
7b:94:93:f1:aa:5d:a0:e9:58:f9:ee:cb:92:ce:21:
db:0d:df:b6:a0:30:30:ad:eb:02:69:d2:72:a3:e1:
3e:99:ed:82:75:72:36:de:26:7a:9c:9f:3d:a1:ff:
0b:08:62:d3:62:10:86:63:fa:b9:6a:ed:20:b8:82:
d8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3C:5A:3E:DF:7B:15:52:2C:46:ED:93:EB:5D:85:F9:ED:4B:16:0C
X509v3 Authority Key Identifier:
keyid:05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:30:b9:53:42:c0:c3:06:b4:11:a3:a2:c2:ff:af:9f:c4:e0:
a9:6b:87:84:ad:65:f8:c9:9e:5e:e7:6c:5a:8a:35:02:b6:42:
0a:4a:00:49:f1:71:ca:b2:f8:f9:4d:99:e1:b4:1b:98:8a:5c:
aa:b4:63:7b:57:1b:2e:2e:c5:1f:26:9a:55:f6:0c:01:f3:2a:
53:66:6c:99:d0:91:cf:99:bd:40:5d:28:d2:eb:25:1b:09:5a:
9e:ee:96:c1:5f:a6:28:0e:62:c0:31:38:9a:b8:58:c4:f2:b2:
b8:83:21:45:31:32:29:7d:7a:ac:1b:65:97:b9:0e:b5:e8:96:
55:8b:08:02:a6:81:60:44:19:5c:38:9b:0d:0a:31:ed:e0:5a:
60:04:1a:ce:49:74:41:13:5e:1c:29:bf:cb:31:59:d3:e4:0c:
1a:92:2b:f6:c1:ea:6b:71:a9:ef:73:58:49:37:67:b9:4d:86:
5c:da:8b:cd:51:a1:53:29:3c:9b:0d:02:93:63:bb:7b:9f:27:
86:d0:90:22:e9:b3:1d:56:1c:b6:1b:65:53:2f:ab:83:2b:a7:
8c:04:3e:f5:70:f1:db:4d:22:9a:33:cb:80:e0:09:61:46:54:
a4:7e:08:ba:e7:f8:a9:a5:59:46:a3:0f:c1:a7:90:6b:0b:45:
0c:a9:66:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:48:02 2025 by rpki-client