Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
File: bqGhD32UTazB3sBBqqVZ1SK_uus.mft (raw, json)
Hash identifier: SyR/qwcmkSSbKRMb0/8uFtPRW6+5i4M7DeWGTzJ8acU=
Subject key identifier: 54:68:94:69:02:9E:F9:1D:B0:D6:6D:4C:DC:7A:B1:76:98:58:6E:7A
Authority key identifier: 6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
Certificate issuer: /CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
Certificate serial: 01988B0F1052E5843C8E91BF1E091BFFF8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
Manifest number: 1399
Signing time: Fri 08 Aug 2025 19:01:16 +0000
Manifest this update: Fri 08 Aug 2025 19:01:16 +0000
Manifest next update: Sat 09 Aug 2025 19:01:16 +0000
Files and hashes: 1: M9NbgULzUbUgy5QfFA80DfDkYIo.roa (hash: 9jvwTaiwGzjoN6t2OLikrXjXwIhCTFgXlEI2alktc+E=)
2: bqGhD32UTazB3sBBqqVZ1SK_uus.crl (hash: LT1tI4mSczW8Ygs1X3fIvKLU3bhOImLJctjdTXrUUMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:10:52:e5:84:3c:8e:91:bf:1e:09:1b:ff:f8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
Validity
Not Before: Aug 8 19:01:16 2025 GMT
Not After : Aug 9 19:01:16 2025 GMT
Subject: CN=54689469029ef91db0d66d4cdc7ab17698586e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:66:8a:bf:5c:8b:ae:01:00:8b:17:ea:f5:
05:d0:04:1d:5e:30:41:73:00:57:95:ea:8c:87:4f:
24:32:75:0a:b0:86:70:2d:84:75:aa:f1:87:9d:00:
8f:c7:35:49:f5:1a:7f:3e:50:b7:fe:f7:4d:3d:9b:
95:0f:c8:94:51:64:89:8e:b5:0e:5a:4d:9b:cf:4c:
d7:6b:fb:49:83:a2:a1:96:56:db:07:48:b9:6d:e4:
61:05:71:c5:76:08:b9:d4:b0:e7:a1:da:cd:6c:05:
b7:12:37:88:f0:42:01:04:40:27:ca:fe:e8:d1:de:
c1:2f:a7:ed:6d:c0:21:ae:c3:dd:d6:ab:5a:84:08:
62:01:24:1b:21:a9:2a:de:ab:70:d8:03:6c:36:5d:
79:0a:40:0a:8c:1f:15:a6:7d:03:01:5b:3c:80:65:
5a:54:01:9e:26:9d:10:c8:be:cc:a3:e1:5f:2d:73:
4f:a6:01:e4:5b:9f:4c:39:03:45:1d:31:f4:7b:0f:
08:b0:7a:d2:7d:df:d1:d4:c7:77:91:ea:35:90:42:
c3:5e:08:11:ab:13:8d:2f:e1:a3:ae:29:84:a6:30:
cc:6f:26:0f:6e:5e:c8:a5:09:4b:46:a2:6d:34:89:
e6:10:24:a3:8e:91:b0:86:46:e2:f7:b3:12:77:c6:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:68:94:69:02:9E:F9:1D:B0:D6:6D:4C:DC:7A:B1:76:98:58:6E:7A
X509v3 Authority Key Identifier:
keyid:6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:27:df:10:25:32:94:e3:c6:30:5f:63:97:cb:75:d6:d8:af:
ed:a2:9e:1a:ba:62:cb:e8:22:f6:19:f1:6a:b6:06:fe:0f:e4:
df:52:c9:44:6b:bf:10:bb:8c:a2:4b:43:1e:8e:70:f1:24:17:
82:0d:30:1f:3b:ef:a1:1f:ea:a1:ff:04:78:13:83:73:62:ef:
e7:d9:e6:2d:95:cc:ba:27:f3:e0:e3:45:0f:21:ae:b7:6d:35:
c2:77:97:b7:3d:a1:cc:34:8d:a6:a0:21:6d:25:2b:b7:eb:fc:
fe:6f:bd:f5:f6:38:85:2b:1f:bd:c7:d6:02:9b:a3:0a:59:de:
63:a4:59:51:9b:77:3b:a6:c4:ef:f4:15:74:8b:f3:b3:79:92:
0d:d0:d5:a7:2a:24:ea:b8:18:d1:1e:fc:4e:92:c9:c1:2c:27:
be:27:e4:0d:14:cd:f5:be:53:57:d4:0d:e8:c6:ab:cc:3a:89:
48:e0:a4:cf:08:f1:3f:d5:e7:d7:69:86:00:da:aa:39:1d:4a:
53:33:01:2b:b4:54:ed:2e:21:0e:1a:ab:cf:d8:62:0d:90:34:
20:9e:0b:25:fd:a6:54:b2:a9:ab:8e:ef:61:68:cd:24:90:16:
1c:d7:bf:44:f2:be:11:76:b9:bc:35:a0:11:04:fb:f6:ea:6a:
b4:e7:62:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLDxBS5YQ8jpG/Hgkb//i9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYTFhMTBmN2Q5NDRkYWNjMWRlYzA0MWFhYTU1OWQ1MjJi
ZmJhZWIwHhcNMjUwODA4MTkwMTE2WhcNMjUwODA5MTkwMTE2WjAzMTEwLwYDVQQD
Eyg1NDY4OTQ2OTAyOWVmOTFkYjBkNjZkNGNkYzdhYjE3Njk4NTg2ZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA1mir9ci64BAIsX6vUF0AQdXjBB
cwBXleqMh08kMnUKsIZwLYR1qvGHnQCPxzVJ9Rp/PlC3/vdNPZuVD8iUUWSJjrUO
Wk2bz0zXa/tJg6KhllbbB0i5beRhBXHFdgi51LDnodrNbAW3EjeI8EIBBEAnyv7o
0d7BL6ftbcAhrsPd1qtahAhiASQbIakq3qtw2ANsNl15CkAKjB8Vpn0DAVs8gGVa
VAGeJp0QyL7Mo+FfLXNPpgHkW59MOQNFHTH0ew8IsHrSfd/R1Md3keo1kELDXggR
qxONL+GjrimEpjDMbyYPbl7IpQlLRqJtNInmECSjjpGwhkbi97MSd8bWDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRolGkCnvkdsNZtTNx6sXaYWG56MB8GA1UdIwQY
MBaAFG6hoQ99lE2swd7AQaqlWdUiv7rrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnFHaEQzMlVUYXpCM3NCQnFxVloxU0tfdXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC84NWUxMDQtNWU1Mi00MDQ4LWIxYjEt
YzUwOTY4Y2RhODZmLzEvYnFHaEQzMlVUYXpCM3NCQnFxVloxU0tfdXVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC84NWUxMDQtNWU1Mi00MDQ4LWIxYjEtYzUwOTY4Y2RhODZm
LzEvYnFHaEQzMlVUYXpCM3NCQnFxVloxU0tfdXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCffECUy
lOPGMF9jl8t11tiv7aKeGrpiy+gi9hnxarYG/g/k31LJRGu/ELuMoktDHo5w8SQX
gg0wHzvvoR/qof8EeBODc2Lv59nmLZXMuifz4ONFDyGut201wneXtz2hzDSNpqAh
bSUrt+v8/m+99fY4hSsfvcfWApujClneY6RZUZt3O6bE7/QVdIvzs3mSDdDVpyok
6rgY0R78TpLJwSwnvifkDRTN9b5TV9QN6MarzDqJSOCkzwjxP9Xn12mGANqqOR1K
UzMBK7RU7S4hDhqrz9hiDZA0IJ4LJf2mVLKpq47vYWjNJJAWHNe/RPK+EXa5vDWg
EQT79upqtOdizQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:43:28 2025 by rpki-client