Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: sVKRbMQPVKtKFxuhxpUUjAb7E+TwFNqFb2a5uQ6K7F8=
Subject key identifier: A4:AB:2E:7B:B4:D4:99:98:6B:3A:3F:A3:B0:59:17:92:01:68:3C:D4
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 01987306D47FEE503BEE3933A82122B7F001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 03:01:24 +0000
Manifest this update: Mon 04 Aug 2025 03:01:24 +0000
Manifest next update: Tue 05 Aug 2025 03:01:24 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: KIvBhHouLRiDpfueXuxqhuexDHzsxkCkFiTEE42mTwo=)
2: oxM6mR0m9rOLSyak3ORyqAg0XsI.roa (hash: mea+PwbnpZFhyRm88cF7gUeBjEiQVDq413u5vrlmXG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:d4:7f:ee:50:3b:ee:39:33:a8:21:22:b7:f0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Aug 4 03:01:24 2025 GMT
Not After : Aug 5 03:01:24 2025 GMT
Subject: CN=a4ab2e7bb4d499986b3a3fa3b059179201683cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:b1:e6:bd:10:63:41:38:6f:7e:55:0a:70:
59:5a:22:1d:9e:40:ea:52:33:a0:21:ef:84:a9:bd:
0e:78:90:e8:f9:49:68:72:fd:35:59:63:58:70:17:
00:ea:81:e5:a9:fc:c6:5d:2a:3e:a0:3a:ac:9d:bb:
21:ea:b1:a4:9a:f1:a7:60:1f:25:5b:3f:41:00:d6:
0d:c8:4e:94:05:e7:00:cd:bb:51:5f:d2:e3:31:ce:
e6:48:bb:21:8b:9a:5f:76:ac:18:38:2c:81:76:f0:
2b:a0:0c:05:35:f1:e5:96:3c:3d:b4:9e:10:9e:2c:
84:79:14:e4:26:ec:1b:f8:35:b3:83:af:8f:0d:de:
b8:82:84:d2:a9:67:47:1e:b8:5c:0d:f3:b1:95:09:
30:2a:93:5f:97:0f:ad:a4:c2:8a:57:c9:ff:d9:07:
24:af:af:9f:24:7f:6a:06:a1:bd:44:38:7c:27:27:
81:02:fe:25:8c:cd:4e:10:93:a5:df:40:b9:cb:80:
c8:f9:3d:a6:86:43:ec:74:d6:be:2f:9c:9b:70:93:
1b:7c:87:4a:af:2e:f8:80:ac:66:4e:51:61:31:d2:
1b:72:27:5c:b0:d7:dd:4f:62:f4:54:9e:f3:5a:a9:
09:80:a7:86:e5:c7:e1:80:d5:f8:f8:a6:ef:15:64:
d6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AB:2E:7B:B4:D4:99:98:6B:3A:3F:A3:B0:59:17:92:01:68:3C:D4
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2e:50:7f:ad:42:d5:45:1e:f8:d3:67:8e:62:37:f8:e3:bf:
d3:73:f5:61:45:6a:55:24:fe:75:ca:e3:8f:a8:bf:e5:06:bb:
a7:34:ec:ce:97:bf:37:95:0a:36:d7:d1:90:61:a8:87:06:a4:
f0:fd:95:f4:c0:ec:b5:4f:50:37:2a:a0:07:89:21:33:8a:3e:
e7:5d:4f:1c:48:30:b3:ff:37:00:91:7f:ed:09:d8:35:2f:dd:
39:13:16:5f:be:b4:57:bc:16:42:52:e8:bb:fd:7d:61:98:51:
5a:bd:a9:f4:7c:b2:fa:d0:fb:55:03:0e:fa:88:86:95:c7:c0:
86:c5:2f:66:62:bd:9a:9f:2f:8a:f8:95:c8:95:29:22:f8:74:
cd:f5:de:a5:08:40:ec:6a:b2:89:c9:9b:cb:bb:ea:b2:48:09:
4b:02:09:2c:9e:25:fa:8a:3e:59:a8:62:fc:37:29:45:35:0c:
74:8d:17:92:a8:7a:b6:5d:c1:9e:a2:d9:c9:12:96:fd:78:b9:
3b:73:f3:bd:ea:88:ea:0b:ca:2e:a6:4c:ab:67:52:32:41:a3:
f3:53:9a:3e:66:16:0f:50:5f:ab:b7:40:b0:e7:5b:f1:1c:87:
16:d7:87:69:00:2b:04:94:f5:4b:88:b4:9d:01:c4:c0:40:58:
65:2c:0e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:48 2025 by rpki-client