Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json)
Hash identifier: N56WYifmi03o0cFf8WkFsj8gWF5dU5cU1pL1mIGycmM=
Subject key identifier: 21:09:FC:8B:7B:E8:E9:8B:35:BB:00:13:48:0E:FF:28:E6:95:45:3C
Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Certificate serial: 019A541A71F0D7966B4CB02161DF148F48C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
Manifest number: 0165
Signing time: Wed 05 Nov 2025 13:00:10 +0000
Manifest this update: Wed 05 Nov 2025 13:00:10 +0000
Manifest next update: Thu 06 Nov 2025 13:00:10 +0000
Files and hashes: 1: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: ypzgZC6V3nzhmvjEywgjFhjtCFO6zqEFtTsilK1nKUE=)
2: VUIS3dckNr0Kh1Z6hZLO0YNZ4g4.roa (hash: aYI+W1bfXl98I8N9jO+WeobvU+Z0j8a9IrQSBqb8MBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:71:f0:d7:96:6b:4c:b0:21:61:df:14:8f:48:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Validity
Not Before: Nov 5 13:00:10 2025 GMT
Not After : Nov 6 13:00:10 2025 GMT
Subject: CN=2109fc8b7be8e98b35bb0013480eff28e695453c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a0:9a:2e:54:46:9e:19:51:05:6d:b2:93:ae:
43:50:c8:f6:14:18:24:35:f7:7e:ad:9c:79:40:78:
67:33:86:5f:32:42:ae:fd:8c:17:79:91:40:5a:42:
30:9e:93:f7:cd:e4:e1:7b:28:c4:2a:e0:ff:3e:8c:
bf:a5:e1:89:e7:e2:67:95:de:e7:61:7c:89:73:a9:
39:26:f9:e4:90:84:4a:35:2e:b8:15:40:f7:84:fa:
2b:2a:a7:0e:2f:86:f9:29:8c:81:8d:09:98:da:8c:
3d:43:0e:22:09:21:6f:dc:34:e3:54:31:a8:63:94:
ba:46:54:0b:5b:ff:aa:ef:d3:b0:6c:32:83:85:5a:
b0:c0:38:b4:58:95:3d:cb:c0:4f:c2:ba:28:18:ce:
b4:8f:0b:63:bc:cc:1a:65:4e:38:a4:41:04:dc:9f:
3f:19:ca:9a:d4:6a:be:b0:1d:f6:b7:40:a4:fc:18:
ce:8c:b1:40:92:79:c2:bc:a4:7c:6c:97:1a:a3:2e:
a6:09:80:91:b7:e8:26:0b:02:35:49:a8:e8:c4:43:
2a:38:c4:ac:de:be:34:c5:20:76:de:b2:e7:d1:6e:
30:0f:61:d6:87:42:76:db:a7:10:d9:03:ad:e1:4c:
8a:54:fd:3f:a7:56:1a:78:9b:4c:db:ba:6d:a0:91:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:09:FC:8B:7B:E8:E9:8B:35:BB:00:13:48:0E:FF:28:E6:95:45:3C
X509v3 Authority Key Identifier:
keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:26:bf:50:1a:16:56:f5:65:e4:d7:e2:93:11:41:81:28:00:
0b:24:58:f8:ff:30:de:e6:47:28:ae:7d:f6:85:75:52:83:6d:
c3:bc:fe:8a:89:69:72:d1:73:11:ee:d4:b7:e2:05:9d:a1:7d:
28:11:c6:c9:b0:f1:7d:e4:ee:0d:36:ee:e0:f8:f7:10:3a:8d:
a1:34:70:cd:3f:80:c2:60:36:0a:b7:98:82:47:d0:73:eb:b1:
96:4b:ec:c4:17:ab:d3:9c:57:bf:a0:61:c0:0e:92:f3:1e:02:
86:15:77:1b:1a:78:0c:b6:ad:6a:3f:b5:8c:6c:7d:bd:08:93:
77:42:3c:c7:df:5a:22:9e:ad:6b:f0:32:96:8c:62:b9:b2:aa:
36:c2:26:84:b6:aa:6c:1c:93:dc:37:fa:15:4a:c6:8e:1e:27:
bd:ae:84:e8:b0:75:b1:db:a7:30:c7:85:04:8e:ec:2a:f9:80:
f5:ce:08:12:74:5f:72:59:42:10:80:08:82:b9:4c:ce:67:d4:
cc:2b:e0:69:dd:5d:c9:10:3d:a4:51:66:60:5f:ad:75:2b:df:
db:68:ea:49:f8:65:cd:d2:5f:9f:1a:e1:d7:2f:3d:3f:20:ca:
d6:f0:c3:42:9e:52:3f:6c:14:73:5e:d5:78:d6:4c:f8:b9:61:
42:e2:f5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:16 2025 by rpki-client