Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
File: bqGhD32UTazB3sBBqqVZ1SK_uus.mft (raw, json)
Hash identifier: W8giaR9pSSreA9lEdgsIqjTyBVZHcnd/L/5KB0Bm/3g=
Subject key identifier: 0B:57:CE:04:DE:0B:D2:6E:BF:EA:2C:59:87:1C:AB:B1:A9:5D:59:24
Authority key identifier: 6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
Certificate issuer: /CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
Certificate serial: 0197827C9FC4A80992C6D707DD6AF736C023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
Manifest number: 1310
Signing time: Wed 18 Jun 2025 10:01:34 +0000
Manifest this update: Wed 18 Jun 2025 10:01:34 +0000
Manifest next update: Thu 19 Jun 2025 10:01:34 +0000
Files and hashes: 1: M9NbgULzUbUgy5QfFA80DfDkYIo.roa (hash: 9jvwTaiwGzjoN6t2OLikrXjXwIhCTFgXlEI2alktc+E=)
2: bqGhD32UTazB3sBBqqVZ1SK_uus.crl (hash: gtJc5mwEhZsWzIpegbkHzOvIfkAG2y7suBeun8SzScQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:7c:9f:c4:a8:09:92:c6:d7:07:dd:6a:f7:36:c0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
Validity
Not Before: Jun 18 10:01:34 2025 GMT
Not After : Jun 19 10:01:34 2025 GMT
Subject: CN=0b57ce04de0bd26ebfea2c59871cabb1a95d5924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:85:52:3b:42:cf:c5:83:13:c8:2d:c0:98:69:
81:6e:13:c3:2e:04:4a:92:08:77:c4:65:a3:67:4e:
de:32:35:fe:0b:cb:3f:8d:de:58:d1:5a:04:a8:2c:
6e:87:f5:3f:25:0b:0e:48:54:b6:59:7d:d7:b4:03:
09:78:b5:b5:28:8b:ef:94:95:da:88:01:56:3b:e4:
ea:76:d3:36:f4:09:5f:f7:98:06:61:25:3f:97:5b:
5f:33:4c:ba:89:3e:b5:95:5c:dc:a2:45:02:08:3c:
54:3d:54:cc:bb:82:9d:bf:97:87:df:26:be:c7:03:
65:56:9f:9e:dd:d4:31:8e:72:2a:2b:0d:3d:13:54:
24:23:d8:f6:d5:b1:37:14:ba:ba:28:98:c0:28:cb:
28:14:ac:a9:d3:45:cd:87:c8:8f:4f:4d:25:cc:a4:
d4:60:3a:85:04:be:d5:af:9e:f7:3a:ef:19:0b:9a:
5a:7a:fa:00:0b:28:04:6b:8c:85:2b:74:1f:ad:8f:
22:2e:54:02:2c:0a:96:e4:73:2b:28:a2:3a:8d:0d:
cc:25:c3:38:23:00:ae:52:a4:6b:34:5f:ae:3e:46:
79:ba:1b:7c:f9:c1:5b:3d:91:b0:7f:ca:6d:0b:14:
46:a0:f5:f1:70:bb:70:09:dc:17:40:0b:d6:66:12:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:57:CE:04:DE:0B:D2:6E:BF:EA:2C:59:87:1C:AB:B1:A9:5D:59:24
X509v3 Authority Key Identifier:
keyid:6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1a:b1:ad:98:aa:a7:14:43:79:a5:d2:31:fc:ef:79:54:66:
c8:89:1f:b2:2c:1a:16:e3:94:d1:e5:a7:85:eb:fa:a3:c5:da:
15:b0:f7:e9:c1:8c:e6:bd:9d:d9:eb:21:58:5c:98:14:0f:3c:
5c:b8:03:80:7b:da:52:5d:a2:26:42:ac:e0:55:c6:70:ed:b8:
82:65:44:07:d2:9e:7f:b0:48:c1:bf:e0:7e:b2:72:76:6b:76:
b1:19:bb:63:92:de:59:53:04:3f:26:1c:f3:4f:6c:94:17:56:
28:d9:d3:0f:8d:5f:a4:1f:e9:05:4c:ac:94:ed:7b:95:e8:a8:
a8:c8:0c:fa:50:2f:6b:0a:71:01:3b:e8:9b:ff:63:2d:e4:0e:
b1:cf:24:1d:17:5b:b2:16:8d:b8:20:7e:e2:90:e1:21:c8:89:
3b:f3:b8:36:2f:8c:bf:d3:c1:03:f0:e9:26:1b:c5:9c:47:ba:
a6:54:a5:dc:e7:60:fc:d7:90:17:9d:bc:1a:f0:45:93:6b:3f:
2f:e8:b6:f9:d9:3e:2f:cf:fb:d2:44:d8:31:0d:9b:12:8e:89:
36:76:68:c4:a0:19:dc:20:e6:a2:6e:42:44:a6:30:c8:1f:e7:
f2:b7:82:9c:d1:3c:c1:6b:2e:65:25:8a:c3:e2:f1:79:12:bc:
c6:e2:5e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:23:58 2025 by rpki-client