Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: 2zqKhFYwtxzn8l8Qiy5kmHzaLftjlTadqrhUnhxf6Qg=
Subject key identifier: EF:D0:BC:A1:D5:ED:1C:60:40:2B:4B:B1:0A:6A:C7:E5:26:01:3A:B4
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 019A50075135AFDB046690D1D123A1ABD449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 18:00:48 +0000
Manifest this update: Tue 04 Nov 2025 18:00:48 +0000
Manifest next update: Wed 05 Nov 2025 18:00:48 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: nZH6r5MnZYblWF6UCrYScuk36GBpnkJYAt6oy2zdW/4=)
2: oxM6mR0m9rOLSyak3ORyqAg0XsI.roa (hash: mea+PwbnpZFhyRm88cF7gUeBjEiQVDq413u5vrlmXG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:51:35:af:db:04:66:90:d1:d1:23:a1:ab:d4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Nov 4 18:00:48 2025 GMT
Not After : Nov 5 18:00:48 2025 GMT
Subject: CN=efd0bca1d5ed1c60402b4bb10a6ac7e526013ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:aa:f4:43:30:36:14:15:41:a4:d8:ac:24:
7f:ca:17:ac:cd:1b:26:5e:e6:57:53:d7:e1:11:a7:
fb:98:80:3e:1d:59:57:62:b0:da:82:ef:63:1e:0b:
32:1f:d6:f5:c0:f9:d3:6f:d2:9e:ef:3d:9d:64:55:
d3:2a:73:8e:0f:cd:13:8e:7f:47:ba:d5:ca:1c:64:
4e:0e:55:12:2c:79:24:41:84:eb:94:a4:cb:ab:68:
fb:e6:aa:75:43:1c:bb:24:91:95:cd:0e:af:e9:3c:
67:2b:bd:40:c5:72:de:25:9e:d2:40:26:e8:d3:61:
5e:fc:8c:66:89:90:9e:3d:ac:27:a7:f5:7c:70:45:
38:34:08:0f:a0:50:45:22:36:67:95:ff:cb:aa:fe:
24:c8:69:a1:39:69:bd:dc:12:9d:ec:da:0b:f3:45:
18:4d:6c:fe:63:a7:c2:41:b2:4e:d5:c1:9e:31:e7:
a6:86:51:23:6f:28:9e:8a:74:75:cb:1c:ae:69:2b:
b2:2d:a1:39:e1:78:be:56:13:71:be:ac:0e:d2:a6:
56:77:41:7b:27:b6:c5:c9:a2:86:ad:c0:71:ec:3b:
a4:26:82:02:e5:74:0b:4f:62:4b:fc:cf:f0:f1:56:
7b:98:02:1a:6e:f4:25:cb:26:d4:ff:94:37:65:c9:
93:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D0:BC:A1:D5:ED:1C:60:40:2B:4B:B1:0A:6A:C7:E5:26:01:3A:B4
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:22:66:e1:f0:27:3e:e4:db:64:f4:cd:aa:54:ed:71:7e:97:
f2:e7:b4:0b:8c:7b:f8:4d:5c:a0:94:84:f8:dd:03:51:2b:d4:
a5:22:2b:55:f9:37:36:37:cf:f9:2b:93:87:da:4c:0f:f7:79:
82:d5:53:4e:f0:bb:7c:4b:d1:db:d1:1d:fd:5a:7d:c9:4d:9e:
27:48:6f:52:cc:00:c4:10:07:51:04:2b:5d:b1:4d:3d:62:75:
52:80:d5:0f:0a:7a:d5:8d:d8:fa:b1:0f:18:8c:3b:f0:3b:ac:
3c:82:33:de:5f:c2:1e:60:1d:92:9f:d0:2b:c8:a3:ac:8b:bd:
92:12:33:6c:8e:90:d8:5b:27:fa:90:e4:41:97:8f:25:28:ec:
e0:55:c6:cb:18:f5:6a:0f:47:cc:dc:1f:3d:7f:c1:e0:ca:5e:
83:cd:99:50:00:7a:3f:c0:38:ec:31:ce:4e:c5:5f:f6:d5:88:
0a:a3:9f:5f:29:1c:8f:26:9f:3c:f8:dc:6e:7d:41:13:71:76:
74:14:26:9a:94:81:2f:77:d4:5f:03:77:73:81:5b:41:28:7d:
ad:fc:83:1a:d5:cf:08:21:1b:08:c8:e2:a9:19:b6:0a:41:a8:
51:6e:e4:0d:f2:d1:8c:ea:cb:47:24:0d:5e:93:26:94:09:76:
8c:29:60:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:25 2025 by rpki-client