Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
File: BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json)
Hash identifier: f1MzyYrdSOaNI0ayDqdcwooixcTZhNtNRX4Du7Ard4o=
Subject key identifier: D6:D4:A6:18:62:E9:B0:5B:5E:F8:5A:03:AF:2E:89:44:70:BE:2A:F4
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Certificate issuer: /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial: 019A4EBD416608944422EB6272603D6A198A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 12:00:17 +0000
Manifest this update: Tue 04 Nov 2025 12:00:17 +0000
Manifest next update: Wed 05 Nov 2025 12:00:17 +0000
Files and hashes: 1: 1-MjuqmBpsWgnIe94Ni9tG7TR67o.roa (hash: gyQfa4gE1hnrW3PZFgjLBZrA6G2ASLJW2A+0qIwPVfs=)
2: 8FxVFuW_oUKRR2bbRCVTojM73sY.roa (hash: VrCY5yDzoOr7RNufMtvUlC9GTknboOTsJCKPyCRZ9uU=)
3: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: 26pMkanAXmNMtnCtGCqy400o1ksHrhog3q5FhnwoPbg=)
4: QSsP3hVliieFZmqEh-oXRbOngVs.roa (hash: +SXMbXSSzjopaotKF7OHij1zUgdfHzWAWlGpHYpJIV8=)
5: oOnTeBcATSnpY8kitycXVQ1C_S8.roa (hash: l6l3Ce6tclEVymfIGsnHtdS0yV4TM8oW3r1alBKEgkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:41:66:08:94:44:22:eb:62:72:60:3d:6a:19:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
Validity
Not Before: Nov 4 12:00:17 2025 GMT
Not After : Nov 5 12:00:17 2025 GMT
Subject: CN=d6d4a61862e9b05b5ef85a03af2e894470be2af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:c1:21:fe:65:2b:d7:46:3e:7c:5b:01:9a:
33:cf:58:7b:17:c4:77:b1:c9:1b:b1:88:08:8b:a1:
e4:31:b6:2d:5d:a0:f7:75:ec:1c:88:14:80:d9:53:
48:d7:53:03:bb:a0:b0:fe:c6:02:35:78:7d:c8:e5:
74:01:f6:19:e0:ce:5c:8a:9d:07:c8:7d:07:bf:fb:
dc:19:7a:c5:b6:66:9d:f6:9a:a9:80:7d:e4:49:ae:
13:bd:77:37:ab:d8:08:ed:e9:e4:db:fe:31:13:c2:
4a:e1:b0:7f:47:44:4e:2b:34:a6:2b:0b:4c:63:1b:
ab:c1:fe:ca:ae:6b:78:b8:4c:10:13:85:91:1e:42:
91:6c:96:30:13:f9:de:87:40:b9:56:d4:38:88:0d:
f8:58:3d:94:c9:13:e8:ef:81:09:ca:24:9b:8c:2c:
6c:22:7e:c5:10:19:88:2f:11:07:4c:fd:4a:12:5f:
fe:31:48:17:44:20:e9:a9:a2:af:a0:bb:08:d9:7a:
23:f9:89:90:8c:1c:56:2e:75:46:3a:32:8b:06:8e:
4a:2b:8d:f8:c2:36:cf:79:62:ba:5c:d0:a8:e9:b5:
3d:42:ab:df:9f:9c:c5:b6:6d:19:a5:d2:3c:7a:e8:
ab:36:91:5f:e6:03:cb:27:62:e1:e7:9f:e9:ef:55:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D4:A6:18:62:E9:B0:5B:5E:F8:5A:03:AF:2E:89:44:70:BE:2A:F4
X509v3 Authority Key Identifier:
keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:52:c0:0a:fc:45:8f:4f:93:56:ea:c4:79:56:f8:fb:0f:35:
41:32:33:51:1c:16:e6:83:03:29:cd:c2:6b:68:f6:45:fa:d0:
69:0b:ac:57:18:af:cd:d7:e9:55:cf:3c:6e:5a:5b:b5:20:22:
f1:5b:02:88:02:24:d9:0b:ec:3a:16:e0:de:6c:44:bf:a6:aa:
14:3a:29:01:2d:89:cd:d1:b2:4a:01:49:bf:9d:9d:30:7b:a4:
2b:6b:9e:0d:5d:f5:24:4c:fa:a1:9f:0e:36:28:71:4e:fd:e9:
21:d6:60:ba:77:77:e2:a6:29:15:1c:e8:e5:fa:74:77:4c:9c:
1f:51:e7:d0:6c:a3:31:5b:b2:f6:a2:58:43:6e:61:30:ad:23:
d2:28:57:55:0e:92:95:92:2f:79:81:8a:20:85:1f:da:95:36:
45:1e:5e:cc:06:a2:48:e1:5a:00:75:02:b8:2a:20:4e:9d:01:
32:61:db:ed:07:f5:58:a1:ef:ad:c8:20:4f:38:96:44:29:e9:
64:6f:24:52:2e:44:bb:2a:48:11:fb:cd:45:cc:bd:cb:b8:53:
07:aa:4c:ed:65:af:e9:75:7a:45:80:11:04:18:9e:ef:99:bb:
4b:f4:f0:e0:67:b1:a2:3a:56:03:5f:06:cc:e4:f4:66:9b:2d:
36:44:40:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:04:56 2025 by rpki-client