Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: anT2LUS16hyaC+8up6IjyYvGXSWqXViQnT+WXPmJwDA=
Subject key identifier: D6:BB:87:00:C4:6C:F3:84:EC:46:D6:68:CA:28:73:B2:71:1D:D8:37
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 01976C61FE2A3C9DFBF93BD0111742A3FB95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 03:00:50 +0000
Manifest this update: Sat 14 Jun 2025 03:00:50 +0000
Manifest next update: Sun 15 Jun 2025 03:00:50 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: 4/b3hiYTOToNt9kIetUluV1rKIypd2LZ+OOW0eNam2E=)
2: oxM6mR0m9rOLSyak3ORyqAg0XsI.roa (hash: mea+PwbnpZFhyRm88cF7gUeBjEiQVDq413u5vrlmXG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:fe:2a:3c:9d:fb:f9:3b:d0:11:17:42:a3:fb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Jun 14 03:00:50 2025 GMT
Not After : Jun 15 03:00:50 2025 GMT
Subject: CN=d6bb8700c46cf384ec46d668ca2873b2711dd837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:01:a1:c5:6a:36:37:63:27:b3:ea:5c:bb:94:
9c:31:02:01:73:3c:fd:fc:b8:14:6b:e1:19:28:30:
d4:bc:02:76:ce:23:f3:1a:50:e6:df:95:38:08:8b:
39:0f:1a:7e:65:c3:f6:55:59:34:98:a6:93:05:de:
10:e7:ff:e7:57:ac:5c:e8:c2:69:b6:88:9f:8f:a3:
6d:d7:cc:3b:0f:a4:5f:f5:6b:bb:9c:cb:a1:b1:0a:
2f:aa:61:17:08:20:1d:5e:3a:56:06:45:06:64:ee:
b6:71:0f:9d:e0:3a:3c:4e:ab:87:5d:51:2a:fc:d9:
c8:d9:a7:2d:f1:f2:17:21:b1:63:1b:52:bc:1e:d1:
59:58:57:72:d7:6b:35:33:25:56:22:4e:d4:8f:6d:
40:66:cb:00:6c:6d:97:f9:de:e6:d0:30:09:88:e4:
53:f2:e6:d0:26:62:d8:13:d9:a2:0c:9a:94:d9:2c:
55:04:3f:d9:3f:70:bc:d5:b5:02:16:85:ee:03:bc:
71:74:b9:e0:d4:64:4d:25:29:72:aa:96:ce:03:c3:
d0:eb:db:b3:ac:02:5e:ac:38:bf:e4:90:d6:a5:8c:
64:af:81:3c:dd:92:64:68:89:a4:08:bf:b9:59:e9:
00:6c:f9:7b:2d:45:b3:66:29:a0:b7:be:d1:48:f4:
f7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BB:87:00:C4:6C:F3:84:EC:46:D6:68:CA:28:73:B2:71:1D:D8:37
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e7:50:65:c0:1f:12:db:c8:e8:b4:3e:1f:f6:11:b4:31:82:
00:b4:db:b1:37:f8:43:99:09:cc:e4:73:53:e8:61:4f:c0:ed:
bc:02:17:0b:2a:03:6e:87:e4:c7:49:b3:2c:67:06:b9:92:f9:
04:1f:0d:9c:9d:e0:46:42:ac:38:77:2e:f2:29:94:ef:35:97:
51:6f:9e:e1:ec:40:e8:7c:e7:24:71:92:02:84:ea:55:9c:cb:
cd:d7:c0:39:ca:a0:19:da:bd:10:6d:5d:c7:a4:30:d6:f5:fa:
41:d2:64:7f:c5:b0:03:a7:2a:c8:44:4f:1f:66:ed:95:10:ba:
d4:5d:ba:52:2d:10:61:28:cf:bd:09:d9:24:86:3b:00:41:29:
7e:c7:8f:ff:b5:36:75:77:ee:34:04:14:bb:40:d2:b6:37:85:
a9:40:46:43:28:d0:c6:2c:6f:97:f0:93:93:15:1d:ec:b1:80:
7b:5c:a1:91:89:5c:1f:1c:81:a0:a9:50:95:db:22:06:be:74:
50:75:5b:ba:d3:53:92:7c:7a:d7:ef:7a:f8:0a:02:51:bf:16:
ce:24:c7:b1:02:ae:6a:06:46:a6:98:a6:b5:a4:b5:8c:67:4f:
69:fe:25:41:f6:ae:0c:11:37:d7:03:d6:d6:2a:a5:d4:18:3c:
03:62:33:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:35 2025 by rpki-client