
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
File: bqK-NzL279WcfeWrAwcqASxxte0.mft (raw, json)
Hash identifier: CgYrGcDWeafSa0FAjwT3P9pUAzmXP0ThxeaXQlQIBa0=
Subject key identifier: EF:16:11:84:F4:F4:37:48:F4:3F:EA:92:C5:7D:AF:10:DB:87:7E:67
Authority key identifier: 6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
Certificate issuer: /CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Certificate serial: 01987AF69D7993FD5CCF7A3A6A18AD8A3BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
Manifest number: 1343
Signing time: Tue 05 Aug 2025 16:00:39 +0000
Manifest this update: Tue 05 Aug 2025 16:00:39 +0000
Manifest next update: Wed 06 Aug 2025 16:00:39 +0000
Files and hashes: 1: PWqnw0c_B4f5uiecMpdwpL-VvcE.roa (hash: U77gGzVbzz3/VE1ufiaUseYNuoW+zWwbp+s9nBJADUU=)
2: bqK-NzL279WcfeWrAwcqASxxte0.crl (hash: PxvlAG23bUfbymqCdD6ah9SdmGp2QKm5CL+0XtLiIDE=)
3: wQXUeRnOKpyt-UT9Y5wSBXvQMCY.roa (hash: bcR2MNuNZW8l1a/xl1JtyMuKzTNFRLkA134VnDPvPnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f6:9d:79:93:fd:5c:cf:7a:3a:6a:18:ad:8a:3b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Validity
Not Before: Aug 5 16:00:39 2025 GMT
Not After : Aug 6 16:00:39 2025 GMT
Subject: CN=ef161184f4f43748f43fea92c57daf10db877e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:bd:ac:ff:98:b5:9a:ab:f4:82:b6:d3:51:
80:70:07:f9:53:e2:88:da:81:5d:c1:ee:38:15:85:
f8:85:6f:a4:7c:97:5e:44:fc:24:d1:8f:41:f0:11:
3f:0b:d9:a1:88:d3:9a:0d:33:f5:8c:10:3c:0b:76:
d7:36:c8:3f:8c:3b:c9:25:41:7e:17:c1:b1:cf:46:
a5:ab:b9:59:8d:06:8e:9a:b0:c8:ce:18:56:4c:c7:
35:c2:0a:8f:4a:7b:df:9c:a2:3e:8c:a1:76:9b:26:
9d:2c:54:fc:ed:77:e0:01:9b:35:34:65:e4:b3:2f:
fe:69:73:f0:b8:b9:37:9b:9a:88:7d:b8:74:2f:9f:
38:bd:50:ac:82:39:f3:54:7f:67:d4:77:7f:d9:38:
c9:b3:77:72:ce:17:ab:cb:5c:bc:40:65:c9:f6:aa:
3e:dc:5e:69:12:b8:97:bf:73:f4:5b:aa:2d:32:3f:
99:5d:12:c2:74:c5:36:c6:34:07:41:d6:8d:7d:50:
5e:f5:d0:8d:d0:28:56:bb:56:27:01:1b:04:33:aa:
62:65:73:34:93:02:27:43:cf:81:16:3a:e2:a7:04:
a4:98:34:5a:e5:79:9d:eb:4d:44:6c:88:bc:cb:5d:
f2:9b:ae:43:c5:e3:d4:ef:0b:91:be:56:66:67:86:
c6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:16:11:84:F4:F4:37:48:F4:3F:EA:92:C5:7D:AF:10:DB:87:7E:67
X509v3 Authority Key Identifier:
keyid:6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3e:e2:2d:19:02:a9:28:72:54:5e:b1:c4:08:fe:a7:80:39:
73:f8:cd:34:bb:45:ae:f6:a1:10:21:6a:5c:f8:24:8a:b5:c3:
78:26:29:5b:db:62:09:15:3b:38:28:7b:7d:a8:a2:01:55:1b:
8f:02:26:34:66:1b:da:78:7c:f2:31:81:49:e7:ea:57:05:d5:
4f:a4:c4:01:e0:1c:e3:ac:3b:e9:a9:67:fc:d3:07:b7:9d:23:
5e:f8:d3:bd:ab:13:f6:92:12:64:cb:62:26:30:c7:32:1a:6b:
25:2c:61:10:07:ca:93:a8:9a:28:60:1e:74:b5:75:f6:a4:11:
e0:53:69:42:ac:1d:86:e0:76:44:f0:e1:89:d4:51:9f:90:52:
c1:94:5e:7e:1a:e9:04:ab:9a:4c:42:16:9a:3e:2e:eb:3d:bb:
77:90:c8:13:a8:99:1a:d1:7d:b8:26:3e:4d:0e:01:86:41:5e:
d1:35:30:59:a5:78:1e:a0:fc:cf:f3:c3:b8:f3:07:b8:41:3e:
3b:ee:32:14:41:41:9e:78:53:ef:21:ef:e4:e7:1f:cc:83:a8:
00:71:55:85:93:ce:2c:8b:4a:cd:68:49:39:cb:62:76:6f:23:
09:26:9e:22:b2:29:9e:98:5a:c5:4a:58:4e:b7:6c:93:b6:87:
c6:60:b5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:19:42 2025 by rpki-client