Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
File: BQJMtECm3Xana1aUwOL07jMOCnw.mft (raw, json)
Hash identifier: g2zys6XUAz7UwDE9Ocn2eUhKNwGXad1XqVDnYPHRVK0=
Subject key identifier: 7E:B9:70:9D:93:75:14:1A:AE:4E:AA:F7:5E:02:8B:1B:91:95:21:67
Authority key identifier: 05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C
Certificate issuer: /CN=05024cb440a6dd76a76b5694c0e2f4ee330e0a7c
Certificate serial: 01987D8B2510D92C6BFE5B15D9BA46F9EBD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
Manifest number: 0346
Signing time: Wed 06 Aug 2025 04:02:07 +0000
Manifest this update: Wed 06 Aug 2025 04:02:07 +0000
Manifest next update: Thu 07 Aug 2025 04:02:07 +0000
Files and hashes: 1: BQJMtECm3Xana1aUwOL07jMOCnw.crl (hash: LH/wyvLIO+bC6qUXQ9Bfjq3RWI7NCyBeZL1V6GPOdGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:25:10:d9:2c:6b:fe:5b:15:d9:ba:46:f9:eb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05024cb440a6dd76a76b5694c0e2f4ee330e0a7c
Validity
Not Before: Aug 6 04:02:07 2025 GMT
Not After : Aug 7 04:02:07 2025 GMT
Subject: CN=7eb9709d9375141aae4eaaf75e028b1b91952167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:ae:ac:77:47:b0:18:01:ec:36:a9:8e:f9:
d4:00:1a:55:77:58:e5:16:68:2f:48:40:b5:e4:61:
94:4b:71:a4:97:d3:96:85:6e:cf:5b:94:62:03:77:
f1:de:82:83:8a:d8:c3:d3:dd:e0:7e:f2:67:7c:d7:
57:2a:08:d7:61:f1:bc:d4:82:22:a1:50:13:65:f1:
77:9b:20:93:e9:1a:8c:4e:12:b4:de:bc:ed:80:20:
d7:23:18:69:7f:9f:77:40:01:73:e8:33:bd:02:e5:
13:6c:4e:69:4e:76:be:dd:42:59:90:8f:39:79:b4:
f0:09:b3:ca:e9:db:db:1b:1d:91:60:f0:da:c4:ff:
01:61:4d:24:12:04:4c:4b:c6:25:de:19:a4:ab:03:
44:eb:65:eb:45:f8:34:ec:1c:99:13:27:c9:19:58:
ac:a8:01:00:28:ff:ee:5e:7f:b4:a7:dd:c7:0e:d9:
d0:b1:9d:26:aa:25:02:2d:03:79:4d:dc:4f:b8:57:
1a:2e:54:4a:81:bd:04:e0:be:fd:9e:aa:bc:70:21:
01:30:e0:a9:c4:aa:63:70:4f:ab:5b:48:73:1b:a0:
8c:cf:f3:b3:c0:4d:79:75:1d:46:af:df:d1:1e:53:
8a:96:22:b6:1e:bb:6e:61:ec:e5:18:a4:5a:79:74:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B9:70:9D:93:75:14:1A:AE:4E:AA:F7:5E:02:8B:1B:91:95:21:67
X509v3 Authority Key Identifier:
keyid:05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:28:6e:ae:15:69:df:3c:96:15:a8:85:06:9b:07:a0:7d:73:
ee:86:f3:da:76:e9:dc:4b:85:66:60:c3:bf:68:81:16:2a:d4:
e0:b3:7a:0a:c3:62:f6:e9:7a:76:55:a2:52:51:9b:c3:05:0f:
76:06:66:be:71:27:78:84:b0:56:8c:83:a2:ba:90:30:ed:94:
72:85:ba:03:2e:a8:6d:ee:98:5f:53:4b:7d:13:20:52:10:b4:
40:e0:f3:e5:6d:1c:2e:dd:18:30:de:62:55:74:7d:52:5e:d9:
b8:0d:f3:ba:26:ad:01:b7:df:48:36:94:3a:5a:51:11:4e:f8:
db:bb:27:ff:4e:76:db:69:1c:f1:ec:2a:80:bc:0e:6d:a4:ca:
93:4f:a5:16:b8:63:04:f6:4b:35:1e:b2:65:6a:c8:a5:a3:a9:
eb:78:ce:1a:65:a4:42:0e:72:11:14:b3:27:34:9a:57:82:41:
e7:c8:8e:91:86:2e:0b:2b:60:c9:fd:e0:10:65:15:b3:90:26:
d0:cc:4f:78:69:f1:72:5f:e3:ff:b7:cf:ee:4f:37:78:4b:ea:
3f:d0:dc:ee:f8:45:65:1b:51:17:0a:48:7f:82:10:d8:ef:28:
eb:69:e2:18:1d:4d:ca:1e:34:c9:df:a4:86:17:4c:72:a0:a6:
0a:20:b5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:42:24 2025 by rpki-client