Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
File: bqK-NzL279WcfeWrAwcqASxxte0.mft (raw, json)
Hash identifier: LnSyCPJ4gUaWIRbCdReaqt4YwEnkBrGwGTeqiqVVp4I=
Subject key identifier: 52:ED:92:DA:32:91:A2:97:95:47:30:78:B9:C0:88:D3:D8:48:DA:41
Authority key identifier: 6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
Certificate issuer: /CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Certificate serial: 01977075B14E0BEA141887F9914FEE45EC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
Manifest number: 12B9
Signing time: Sat 14 Jun 2025 22:00:50 +0000
Manifest this update: Sat 14 Jun 2025 22:00:50 +0000
Manifest next update: Sun 15 Jun 2025 22:00:50 +0000
Files and hashes: 1: PWqnw0c_B4f5uiecMpdwpL-VvcE.roa (hash: U77gGzVbzz3/VE1ufiaUseYNuoW+zWwbp+s9nBJADUU=)
2: bqK-NzL279WcfeWrAwcqASxxte0.crl (hash: ZTCm2oWCEkdnUCBydPNN701viB9DXSVwAku+ebpaT90=)
3: wQXUeRnOKpyt-UT9Y5wSBXvQMCY.roa (hash: bcR2MNuNZW8l1a/xl1JtyMuKzTNFRLkA134VnDPvPnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:b1:4e:0b:ea:14:18:87:f9:91:4f:ee:45:ec:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Validity
Not Before: Jun 14 22:00:50 2025 GMT
Not After : Jun 15 22:00:50 2025 GMT
Subject: CN=52ed92da3291a29795473078b9c088d3d848da41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0a:80:43:b5:e9:aa:bb:30:7d:5b:2b:f4:d9:
44:0a:d7:ee:6e:64:fe:04:73:df:be:64:f6:c9:8e:
9f:ce:a4:94:a6:51:ae:cc:20:83:1f:ed:f8:65:fd:
95:d0:70:55:4d:ae:65:d5:09:8d:3e:a2:12:34:06:
1f:15:58:d0:ed:9f:c9:6a:f7:e2:da:97:4e:67:99:
aa:21:d7:74:15:69:d2:0f:05:70:0e:47:19:12:90:
03:da:48:98:fc:da:65:87:57:82:e8:49:a4:ba:71:
7a:1e:8f:a3:02:be:bd:13:12:26:04:43:94:64:ef:
14:59:e4:bf:e5:be:d6:6e:e3:0d:56:f3:a1:35:45:
3e:b5:a9:f2:38:04:9f:88:a4:4e:bd:71:5a:47:53:
05:ab:73:42:14:12:06:c3:08:08:4b:d9:4c:a7:ef:
ed:6f:97:6b:5f:11:7b:c1:2f:42:37:e7:1e:1e:bb:
d3:7d:a6:fd:09:ba:e7:d9:61:9c:d9:c4:b4:76:36:
33:fe:93:e1:f8:70:a0:ec:02:cf:aa:be:de:d8:8b:
24:3b:f9:46:6f:0d:62:1b:b3:59:56:65:7a:a6:59:
5d:77:06:03:93:8a:d0:c9:7f:dc:4a:6b:ff:e3:2c:
c9:66:8e:f1:92:e8:f4:84:bc:b3:70:3a:cf:6b:c2:
d5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:ED:92:DA:32:91:A2:97:95:47:30:78:B9:C0:88:D3:D8:48:DA:41
X509v3 Authority Key Identifier:
keyid:6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7d:38:4e:42:fa:1f:28:2a:54:5b:7a:1d:28:b9:bf:1f:e8:
39:cd:23:e2:f9:00:ba:f5:b8:40:6a:43:87:12:5b:23:38:86:
b1:4f:3b:84:32:09:05:38:1a:14:48:56:2e:31:33:89:ea:7c:
35:d6:88:8a:77:50:9c:44:fc:78:4a:66:8c:93:2a:7b:3e:16:
22:c1:3c:09:fe:3b:f0:1b:35:cf:61:f3:64:be:4e:12:aa:48:
3c:57:f8:2a:a9:60:97:fd:ee:27:4b:55:65:69:86:fa:ff:15:
d5:80:3f:50:84:04:f9:f8:1a:6e:6a:09:b2:4e:a4:51:32:4c:
54:cc:17:1e:f8:73:8a:e9:9b:06:25:68:7f:f9:cc:b7:ed:65:
f6:1a:60:c3:ec:76:10:ef:19:d4:30:66:0a:f6:ee:cb:73:3b:
7a:5c:e6:90:1b:84:71:81:eb:90:dd:a2:e0:45:1c:96:44:c4:
0f:1b:8c:50:6f:ed:e8:1f:d1:a8:96:dc:dc:ac:07:e8:f3:99:
c9:b3:a5:17:dd:95:d9:59:5c:dd:d6:fc:15:69:8f:fe:c3:5b:
0d:14:12:b3:ca:59:8c:41:f7:5a:61:db:ff:79:d3:8a:32:83:
fe:01:96:eb:06:95:de:df:17:28:17:35:a5:c3:f9:4c:53:bb:
47:34:8f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:29 2025 by rpki-client