Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json)
Hash identifier: H37radJwpjrQ8zzR/wMr0fipiWuZvI6HOczk692XxLo=
Subject key identifier: 94:43:DF:3F:48:88:B3:42:70:E5:00:BB:DA:69:49:98:A5:05:2F:B9
Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Certificate serial: 01988D6AEAB594C536A1D3E72A3A5F5FC5C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 06:00:50 +0000
Manifest this update: Sat 09 Aug 2025 06:00:50 +0000
Manifest next update: Sun 10 Aug 2025 06:00:50 +0000
Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: tifXsmFVKIBj0JBBp+I/ssWZphDP+vytaWI7fimrQGM=)
2: Y3RMoJznpenQfrP3I4h7m1FHoFA.roa (hash: e1BDAMfL6M0zEJOo5zSP4vUUcw0LzSTWKVMkd0N43ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:ea:b5:94:c5:36:a1:d3:e7:2a:3a:5f:5f:c5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Validity
Not Before: Aug 9 06:00:50 2025 GMT
Not After : Aug 10 06:00:50 2025 GMT
Subject: CN=9443df3f4888b34270e500bbda694998a5052fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:61:a9:14:2c:fb:55:23:e0:6a:26:c9:93:49:
db:5a:ea:ea:33:ac:eb:24:b6:cc:36:05:97:2e:c2:
65:a7:8c:3a:91:da:92:2d:d1:a6:60:21:b7:32:08:
12:e2:ef:86:ba:af:99:29:3d:cf:17:7a:60:fc:46:
4a:80:58:95:8d:28:61:38:9e:dd:b7:b9:a3:57:03:
e9:50:cc:cf:4f:ca:e2:44:da:9b:70:0e:a7:0d:7b:
f3:ea:dc:f2:13:02:64:a9:76:49:da:fd:45:e3:d7:
f2:6d:44:50:ca:59:9d:05:ea:e3:60:50:27:c3:19:
dd:de:77:35:3d:d2:7e:9b:9b:09:6d:45:21:b5:71:
3e:09:a0:21:ab:77:9b:03:a9:cf:87:2e:ad:57:98:
28:91:d8:e1:7c:79:6d:de:6a:5b:3e:f3:83:48:f3:
f4:b4:f6:e7:21:db:31:74:cb:04:8c:ae:0b:93:47:
ed:a0:f5:cb:4f:cf:d2:dd:19:21:5e:dc:00:79:c5:
b8:6a:85:33:4d:18:08:31:e7:4c:5d:9c:7c:ac:3c:
29:64:39:bb:40:c5:6a:2e:0a:e7:da:3a:c9:e4:3b:
e5:4d:cc:da:f0:5d:b6:ed:dd:12:39:58:7d:fc:f6:
eb:ab:c8:fc:c9:13:ef:42:48:2d:60:dc:dd:88:b0:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:43:DF:3F:48:88:B3:42:70:E5:00:BB:DA:69:49:98:A5:05:2F:B9
X509v3 Authority Key Identifier:
keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:96:f8:91:3d:8f:e4:84:2b:9f:c9:fa:7a:b3:97:98:da:47:
06:0b:d7:84:99:5f:ba:4c:d2:c2:bc:1a:3c:78:5a:36:a4:6d:
97:45:37:2f:43:46:ca:29:d8:a2:df:1f:39:83:06:08:dc:da:
86:16:2e:8f:6d:6f:38:e4:96:4a:c7:f0:56:51:3d:26:ad:6b:
b9:d4:59:d5:a1:69:07:1d:52:36:4d:ec:8f:b4:f3:b3:d1:ac:
01:38:f0:0e:1e:fb:96:73:09:29:b7:63:52:f5:de:77:8d:2b:
8e:54:2b:6b:49:2b:cd:e2:11:fa:12:f0:06:aa:83:10:91:c5:
0c:b6:39:43:ed:5a:62:b1:22:e9:7a:ea:75:b4:18:11:0f:d6:
b6:80:9e:a8:c9:a6:e4:cf:ff:61:a3:5f:02:13:29:c7:89:aa:
ba:1d:c7:27:8f:4d:29:ef:ba:13:b3:d0:4c:68:fb:1b:07:66:
a6:8a:61:cc:2c:0e:77:c9:16:21:2c:d4:0f:62:5e:67:17:91:
de:76:6c:2c:1d:2f:a9:78:86:1d:3e:01:1e:6a:aa:cd:40:2f:
67:1d:7b:24:34:02:10:a2:b4:af:4e:96:b9:d6:56:55:55:2d:
65:87:2c:5c:43:c2:35:f3:f3:d5:d0:f9:41:4d:b0:f3:52:59:
36:f4:6b:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNauq1lMU2odPnKjpfX8XDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MjQwNjZmODY2Y2YzNmU5Y2JhOWU5YmU2ZjkwMjY0ZGEz
NzJmM2UwHhcNMjUwODA5MDYwMDUwWhcNMjUwODEwMDYwMDUwWjAzMTEwLwYDVQQD
Eyg5NDQzZGYzZjQ4ODhiMzQyNzBlNTAwYmJkYTY5NDk5OGE1MDUyZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mGpFCz7VSPgaibJk0nbWurqM6zr
JLbMNgWXLsJlp4w6kdqSLdGmYCG3MggS4u+Guq+ZKT3PF3pg/EZKgFiVjShhOJ7d
t7mjVwPpUMzPT8riRNqbcA6nDXvz6tzyEwJkqXZJ2v1F49fybURQylmdBerjYFAn
wxnd3nc1PdJ+m5sJbUUhtXE+CaAhq3ebA6nPhy6tV5gokdjhfHlt3mpbPvODSPP0
tPbnIdsxdMsEjK4Lk0ftoPXLT8/S3RkhXtwAecW4aoUzTRgIMedMXZx8rDwpZDm7
QMVqLgrn2jrJ5DvlTcza8F227d0SOVh9/Pbrq8j8yRPvQkgtYNzdiLCKTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRD3z9IiLNCcOUAu9ppSZilBS+5MB8GA1UdIwQY
MBaAFAUkBm+GbPNunLqem+b5AmTaNy8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUt
ODA0YzQ2NzkwOTNmLzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUtODA0YzQ2NzkwOTNm
LzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJb4kT2P
5IQrn8n6erOXmNpHBgvXhJlfukzSwrwaPHhaNqRtl0U3L0NGyinYot8fOYMGCNza
hhYuj21vOOSWSsfwVlE9Jq1rudRZ1aFpBx1SNk3sj7Tzs9GsATjwDh77lnMJKbdj
UvXed40rjlQra0krzeIR+hLwBqqDEJHFDLY5Q+1aYrEi6XrqdbQYEQ/WtoCeqMmm
5M//YaNfAhMpx4mquh3HJ49NKe+6E7PQTGj7GwdmpophzCwOd8kWISzUD2JeZxeR
3nZsLB0vqXiGHT4BHmqqzUAvZx17JDQCEKK0r06WudZWVVUtZYcsXEPCNfPz1dD5
QU2w81JZNvRrow==
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:16:18 2025 by rpki-client